Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c35e2c52-3f0c-44a4-8b47-f414626715a0/a0ba7a33-645b-34be-a2d8-82b28e0198c4.roa
File:                     a0ba7a33-645b-34be-a2d8-82b28e0198c4.roa (raw, json)
Hash identifier:          PCZRV2tFGdv89WI6GpnbnUYCBvogv633/j9uoaGKbxQ=
Subject key identifier:   25:00:A4:2A:B5:D4:2D:DB:60:CB:96:CC:5D:76:41:32:41:D0:35:5A
Certificate issuer:       /CN=c35e2c52-3f0c-44a4-8b47-f414626715a0
Certificate serial:       010D0C9F43285849E225304631175E05025FE610
Authority key identifier: 76:49:E2:8B:A7:0E:58:B3:54:F9:70:3D:44:24:C4:0F:46:A1:AD:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c35e2c52-3f0c-44a4-8b47-f414626715a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c35e2c52-3f0c-44a4-8b47-f414626715a0/a0ba7a33-645b-34be-a2d8-82b28e0198c4.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     63406
IP address blocks:        216.83.168.0/24 maxlen: 24
                          2602:815:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c35e2c52-3f0c-44a4-8b47-f414626715a0/c35e2c52-3f0c-44a4-8b47-f414626715a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c35e2c52-3f0c-44a4-8b47-f414626715a0/c35e2c52-3f0c-44a4-8b47-f414626715a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c35e2c52-3f0c-44a4-8b47-f414626715a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:30:46:31:17:5e:05:02:5f:e6:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c35e2c52-3f0c-44a4-8b47-f414626715a0
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=a803f42b-1f82-4cca-84cf-a89119e9a98b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:97:8a:35:7c:38:b7:af:84:7e:a6:fa:35:f1:
                    e4:6f:a6:f7:37:be:b3:5a:b8:a1:d2:66:8b:a1:a6:
                    a2:10:fc:e0:3a:c6:c9:a3:29:3d:c1:47:35:4a:60:
                    59:79:e6:99:a1:6d:2d:1c:56:7d:77:d7:8e:6f:b3:
                    fe:52:7e:9d:fd:df:65:c9:e0:2f:af:9e:46:db:38:
                    ac:bf:bd:76:9c:95:dd:ca:30:6d:62:21:9d:73:94:
                    50:9c:42:28:09:c9:78:52:33:ef:25:63:10:61:12:
                    40:90:89:56:ad:0d:bd:35:c5:8e:9e:a6:c8:10:16:
                    eb:cb:19:0b:5b:84:7e:12:6f:72:7b:38:43:9d:b6:
                    aa:9f:3e:b2:4d:d9:eb:d6:41:40:3a:cf:e4:2e:4f:
                    5a:4e:fd:ac:f5:e7:ea:21:d1:45:5d:01:1a:3a:59:
                    c7:8d:a9:82:a6:6f:c6:af:e4:83:79:bd:d8:3a:b5:
                    3e:3b:15:7d:87:71:7a:91:e2:b4:d7:b3:aa:57:f4:
                    e6:e6:6c:36:1e:33:a2:92:21:8f:9e:8e:ee:f5:ee:
                    6c:9e:53:00:b9:d1:53:88:71:d1:fe:90:a8:e5:c9:
                    97:29:d8:8c:2b:f2:07:b4:75:56:f5:05:78:a7:d6:
                    fa:b1:a9:1f:56:c6:1e:88:88:ba:7e:d8:86:16:73:
                    fb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:00:A4:2A:B5:D4:2D:DB:60:CB:96:CC:5D:76:41:32:41:D0:35:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c35e2c52-3f0c-44a4-8b47-f414626715a0/a0ba7a33-645b-34be-a2d8-82b28e0198c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c35e2c52-3f0c-44a4-8b47-f414626715a0/c35e2c52-3f0c-44a4-8b47-f414626715a0.crl

            X509v3 Authority Key Identifier:
                keyid:76:49:E2:8B:A7:0E:58:B3:54:F9:70:3D:44:24:C4:0F:46:A1:AD:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c35e2c52-3f0c-44a4-8b47-f414626715a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.83.168.0/24
                IPv6:
                  2602:815:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:c9:82:44:2a:d8:39:a7:42:99:36:c0:c4:f8:45:6e:45:79:
         a0:16:cf:2b:b5:2a:ed:35:45:91:f0:75:00:b8:dd:34:10:c6:
         23:ff:f6:9c:3a:4c:a3:7f:40:68:ab:0a:cb:e0:1c:8d:69:f4:
         41:6c:ed:fc:c0:c0:98:a6:0f:0a:ad:9d:4f:5a:a3:f0:1a:cd:
         f1:51:4c:ab:d0:48:c2:45:d1:e4:5c:d4:7e:e4:6a:5c:ab:de:
         bd:1d:1d:00:4d:b4:85:df:3e:3b:e6:bc:fa:c6:29:2a:0a:cf:
         da:9a:f6:cd:5a:a7:24:2f:e6:51:4e:d3:46:b3:4c:ef:47:48:
         d4:fd:f4:c9:40:1b:aa:54:ad:14:0b:1d:c1:0f:cb:96:d4:65:
         55:86:2c:73:55:07:67:30:e3:2b:1f:3d:3f:98:97:22:03:b3:
         db:2d:42:8b:db:9b:ff:70:d5:c6:fe:43:96:ee:81:ff:58:1c:
         ef:44:3d:f8:67:3f:5a:e3:93:3f:1a:2f:02:5f:61:44:c0:4b:
         04:87:d8:c3:ee:de:7b:9f:6d:8f:77:f9:66:61:0e:56:fe:59:
         df:91:9a:8e:33:8b:01:ee:f7:c6:0d:13:9d:87:26:62:79:e1:
         7c:1c:b3:23:5a:09:9c:6f:0d:56:58:0b:ca:0b:45:b8:f5:df:
         43:92:a2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:12:16 2025 by rpki-client