Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f205ab86-219a-31dd-ab9e-6b08bb875800.roa
File:                     f205ab86-219a-31dd-ab9e-6b08bb875800.roa (raw, json)
Hash identifier:          oSODuTu0mRRFl6T/N92ssL46kLQsngphQVhCV6C+5Es=
Subject key identifier:   12:81:1E:89:A6:EB:F4:AF:E1:4B:C4:49:78:96:16:F4:83:B3:35:6D
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F43285849ABB4A920E567B4CA651D4640
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f205ab86-219a-31dd-ab9e-6b08bb875800.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     11090
IP address blocks:        216.137.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:a9:20:e5:67:b4:ca:65:1d:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=99680deb-f26a-4d1d-87f0-c348db6477d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7d:e4:20:f4:cf:22:2c:dd:af:78:89:23:1f:
                    9c:93:70:a1:fb:46:dc:b9:9d:1e:b7:38:fb:82:86:
                    0c:ce:fc:6f:ab:87:3f:7b:40:02:b3:d0:78:a1:37:
                    e9:6e:17:07:36:34:09:28:63:49:4f:69:9b:b5:a4:
                    dc:51:9e:08:2d:a8:c1:61:e1:0b:2b:53:49:be:37:
                    4b:b7:99:41:3f:b4:6e:f1:21:25:1a:f4:40:de:1a:
                    c3:51:67:8c:e0:c1:a7:97:3a:65:d3:3b:d4:61:7b:
                    bb:52:49:c7:64:47:20:9a:14:71:b4:88:b5:86:ee:
                    93:24:5b:c1:54:1c:d9:2c:99:d7:a8:56:94:5a:50:
                    4e:1c:b9:b2:b7:1c:46:97:15:43:a7:38:77:b1:09:
                    b0:03:2d:24:ce:60:bf:ad:b8:39:08:8e:d1:50:9f:
                    15:97:7a:1c:97:5e:bc:8a:eb:f7:90:cc:2b:bc:f8:
                    8b:35:f9:25:1d:4e:e7:b3:d9:06:f8:2b:4d:11:e5:
                    c8:90:49:9f:53:1d:ee:72:33:61:ca:27:6b:1e:a4:
                    cf:57:4c:28:7c:9a:05:8a:b9:af:83:b6:ab:aa:f1:
                    20:fc:1e:47:e7:d7:00:5b:5a:d4:1d:1c:3c:88:e9:
                    ce:22:7c:35:dc:0b:41:97:0a:ca:f1:71:1e:fb:ef:
                    67:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:81:1E:89:A6:EB:F4:AF:E1:4B:C4:49:78:96:16:F4:83:B3:35:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f205ab86-219a-31dd-ab9e-6b08bb875800.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:a3:bb:2c:46:54:4e:bc:bd:73:6b:8e:0f:3a:21:6a:a8:94:
         6c:06:db:71:98:ec:10:d4:23:32:b6:ac:6e:f6:93:d5:99:22:
         9d:3e:6b:33:4f:ec:eb:28:b2:6f:f8:32:ab:26:75:0a:c5:5b:
         c2:a0:3b:38:65:58:82:53:7e:29:a0:b5:79:8a:de:2a:32:75:
         6b:95:8b:f1:a7:5b:e4:7c:31:80:42:ad:f4:20:2e:df:25:65:
         6c:0b:0c:e8:8f:8f:25:05:7b:45:69:65:33:98:8e:4a:24:15:
         ac:1f:4a:4c:89:2b:b6:71:56:9b:de:40:47:b2:84:47:1c:34:
         c6:c8:90:fa:cd:d5:05:05:e5:cc:26:38:8c:61:80:54:20:f2:
         96:28:f1:26:52:4b:80:8b:56:c9:42:10:1c:86:26:b2:a0:e0:
         51:66:9d:cf:5f:74:0a:3e:28:97:c5:33:72:f3:d1:8b:1f:f7:
         13:6f:ac:b5:85:23:8f:0f:5f:ec:5c:58:41:1e:5d:89:c5:41:
         b6:45:99:80:83:57:cb:72:fc:c1:af:bd:ba:8f:cc:d6:85:65:
         ff:75:6f:3b:38:5f:3a:1a:2b:1b:8e:22:51:69:a6:a9:1a:32:
         8f:c5:e0:6d:45:a8:3d:c2:e4:d1:8a:23:9c:33:78:66:41:36:
         c7:b8:4e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:13:46 2025 by rpki-client