Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/16c713f8-8be9-4f10-9fbe-a5850c795c72/59f93d3d-6332-31f3-89b0-d8058df54f66.roa
File:                     59f93d3d-6332-31f3-89b0-d8058df54f66.roa (raw, json)
Hash identifier:          JjJDfPHBt4fZ03U0uXjzqOFk76MVOpjXa3Pi8EDwWnc=
Subject key identifier:   A1:7C:1D:D3:E5:C2:67:45:78:E5:C6:68:1E:8D:C7:E7:C4:AC:64:20
Certificate issuer:       /CN=16c713f8-8be9-4f10-9fbe-a5850c795c72
Certificate serial:       010D0C9F4328584A2ABAE198728F9D3745A7ADC0
Authority key identifier: 35:80:A6:64:68:17:32:E1:F5:E3:13:2E:F4:07:D8:C5:57:73:8C:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/16c713f8-8be9-4f10-9fbe-a5850c795c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/16c713f8-8be9-4f10-9fbe-a5850c795c72/59f93d3d-6332-31f3-89b0-d8058df54f66.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     5740
IP address blocks:        216.162.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/16c713f8-8be9-4f10-9fbe-a5850c795c72/16c713f8-8be9-4f10-9fbe-a5850c795c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/16c713f8-8be9-4f10-9fbe-a5850c795c72/16c713f8-8be9-4f10-9fbe-a5850c795c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/16c713f8-8be9-4f10-9fbe-a5850c795c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:e1:98:72:8f:9d:37:45:a7:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16c713f8-8be9-4f10-9fbe-a5850c795c72
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=ee719e94-031a-48ac-ba1d-fc493f5035b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:53:25:52:ef:a4:51:4a:3f:e1:66:04:8f:f8:
                    1f:9f:35:d9:c9:9c:2c:0e:01:1b:02:22:4f:ea:da:
                    67:3f:90:cc:a3:c0:d7:64:c1:2b:64:1a:e6:db:30:
                    f3:e7:92:8d:c2:b0:0b:d7:64:dd:ef:0c:58:e2:35:
                    40:2b:df:ce:c6:2b:36:45:99:9c:9f:ea:51:71:d5:
                    29:97:52:e4:87:9f:11:76:75:20:e5:bc:f2:db:93:
                    46:bb:5d:8a:82:bc:6e:6c:c6:ae:62:73:3e:de:35:
                    b6:e7:06:04:37:c6:2b:8e:ca:c8:64:45:10:c4:dc:
                    6f:1f:62:f5:40:5c:ec:f7:ca:f9:10:dc:4c:7f:f5:
                    40:84:27:db:d3:43:7a:9b:ee:8f:3f:d8:ca:dc:fc:
                    c7:f1:4c:7d:96:33:3e:25:1c:1e:07:d5:06:f6:02:
                    9e:d9:8e:ea:ca:ba:38:b4:29:9d:09:18:eb:b6:dd:
                    23:9f:db:cf:8a:0d:45:47:76:5a:7c:f9:eb:60:24:
                    80:8b:0e:65:6a:8f:17:1d:2a:df:1a:75:6d:bf:6a:
                    96:f1:42:9f:63:d7:f1:ae:8b:0d:f9:70:93:d1:00:
                    23:78:7c:6c:98:90:ca:61:6f:97:6f:20:08:08:06:
                    9d:32:b6:5a:3a:d7:88:ba:32:ee:b6:ec:35:80:c2:
                    c0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7C:1D:D3:E5:C2:67:45:78:E5:C6:68:1E:8D:C7:E7:C4:AC:64:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/16c713f8-8be9-4f10-9fbe-a5850c795c72/59f93d3d-6332-31f3-89b0-d8058df54f66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/16c713f8-8be9-4f10-9fbe-a5850c795c72/16c713f8-8be9-4f10-9fbe-a5850c795c72.crl

            X509v3 Authority Key Identifier:
                keyid:35:80:A6:64:68:17:32:E1:F5:E3:13:2E:F4:07:D8:C5:57:73:8C:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/16c713f8-8be9-4f10-9fbe-a5850c795c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.162.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:b1:76:9f:42:b0:02:74:17:5e:5a:b2:2d:8f:71:28:8f:ee:
         5d:d0:d8:a0:ab:9f:0e:8b:81:cb:84:89:01:fd:6f:73:1e:9d:
         e0:09:dd:33:28:2d:c1:bd:2b:d8:54:53:23:50:66:1f:ce:03:
         f7:f4:c5:a0:89:c2:81:4c:58:6d:c7:e1:78:f1:c6:37:6b:c4:
         8e:86:17:a1:93:42:d7:b7:6c:7f:8a:ac:42:a5:c1:e8:78:cc:
         92:fd:d3:9d:7b:aa:87:0f:d0:80:30:9f:4c:c5:c7:73:90:30:
         ed:78:e4:6f:bb:8b:8a:ff:cd:d7:9f:6a:9f:3f:e5:47:b0:3c:
         f0:69:19:90:d8:05:c8:df:9c:da:75:6d:46:ef:e9:66:ae:41:
         91:38:2c:04:20:1a:ed:f3:88:94:f4:e2:96:b0:3c:01:3f:f2:
         80:e1:23:55:66:10:27:08:90:95:98:e6:60:f2:25:26:00:d8:
         35:f4:e9:b3:4c:c6:a6:9f:8d:02:39:81:b7:0a:28:28:e1:4b:
         c7:c2:fa:56:1f:89:b0:e6:14:26:de:c7:9d:b5:f0:b1:64:29:
         56:b5:24:a0:20:8d:37:b8:da:ac:56:cd:00:1a:54:4d:1f:21:
         62:68:a3:df:f7:14:86:a5:d7:7d:ee:8e:31:4a:bd:09:f9:ac:
         37:79:13:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:07:41 2025 by rpki-client