Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6b56d666-787d-3c41-98b0-5fd8b833760e.roa
File:                     6b56d666-787d-3c41-98b0-5fd8b833760e.roa (raw, json)
Hash identifier:          /S2RedVs64ajdnGBfV7v1CW5V7qILtpTh+AkBBRK4WE=
Subject key identifier:   7E:32:28:B5:F4:FB:25:F8:3F:C9:09:A0:2F:03:1E:AD:DC:18:BA:96
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F4328584A7D15FF95F9977DDF03D15400
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6b56d666-787d-3c41-98b0-5fd8b833760e.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     11090
IP address blocks:        216.152.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:ff:95:f9:97:7d:df:03:d1:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=48802c21-d02f-42f7-a189-0a2481f774c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:10:a4:65:c9:db:d1:4f:0d:65:da:8e:90:e1:
                    a6:3c:2d:b6:e8:1f:fe:36:03:1e:08:07:13:58:0d:
                    8e:3f:90:5b:e7:c5:eb:46:1f:bb:36:be:e6:a9:43:
                    0a:9d:8a:9d:ea:5e:a9:eb:c9:80:0e:25:e3:b2:ae:
                    45:3f:e0:1a:d5:a1:97:b0:41:0b:54:63:76:66:a4:
                    3b:de:7f:0b:6a:c7:47:63:7c:7f:8b:02:95:31:6a:
                    64:cb:23:a7:d1:82:1b:30:ff:82:a1:70:04:1c:4a:
                    0f:e9:01:b4:5b:a7:37:7b:df:be:26:0e:0e:cf:7b:
                    e0:3e:09:a7:1d:4d:5f:03:d2:b1:02:c1:54:d7:17:
                    ae:42:49:d6:04:96:e8:f4:8b:4d:24:d0:2c:eb:bc:
                    8b:7b:2b:b6:14:48:7b:6c:88:62:7b:a1:10:2c:2c:
                    91:18:44:c8:bc:d2:84:86:32:1d:85:aa:d9:58:9c:
                    e7:d1:6b:dd:e1:1f:04:4d:4b:94:7f:ad:28:a2:bf:
                    29:32:9f:f5:da:ae:fd:b4:c8:c2:b7:43:53:2c:5e:
                    e6:ce:b1:48:c2:f1:34:35:a5:48:0c:d0:04:66:1e:
                    fa:27:64:cb:d0:bc:2d:52:bf:34:79:20:62:7c:76:
                    28:7c:ee:4e:32:db:fe:19:44:f7:9d:0c:a6:2a:70:
                    2c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:32:28:B5:F4:FB:25:F8:3F:C9:09:A0:2F:03:1E:AD:DC:18:BA:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6b56d666-787d-3c41-98b0-5fd8b833760e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.152.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:5b:15:b8:bf:20:ee:98:b3:5a:52:b2:7a:94:98:44:cd:66:
         02:04:2d:7e:c8:76:ee:db:73:52:51:71:e4:9f:cd:4f:5e:2f:
         7b:b0:e4:25:ff:4a:57:f1:b5:fb:41:0c:a1:42:36:f4:38:ba:
         43:7d:be:03:0a:63:83:20:34:3d:fa:34:76:e2:06:ae:96:57:
         56:07:bd:9f:ed:1a:7d:25:c8:c1:10:75:32:38:25:b1:d4:f7:
         3f:c3:45:4d:b1:e2:56:fb:7c:dd:32:69:e1:76:62:78:52:ac:
         c8:17:0e:81:a1:2b:17:a7:5f:ec:14:fa:dd:d1:ff:8a:4c:54:
         6a:8e:9d:36:a7:86:78:e2:79:1a:a2:df:2f:86:c6:8d:eb:20:
         41:21:d2:7c:33:5e:24:93:07:74:7e:5c:fb:6a:c2:36:e3:ab:
         3d:7b:74:e7:1e:21:22:b5:c9:27:d7:c5:bf:13:a9:39:b6:14:
         6e:d9:4e:26:e5:c9:0a:54:4c:b7:eb:ab:89:d4:22:07:c1:1d:
         77:67:c7:72:57:de:5b:5f:24:b6:c6:99:b0:9e:77:01:5f:35:
         97:5a:d5:5e:e1:60:03:4e:82:51:82:e8:cb:50:1d:2f:70:f1:
         80:c8:11:95:c0:db:a3:ff:81:33:d3:56:c5:e3:3e:a3:ae:e1:
         44:41:9d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:26:07 2025 by rpki-client