Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1e533a29-fc0f-36b6-8e1a-a48d6fc338d4.roa
File:                     1e533a29-fc0f-36b6-8e1a-a48d6fc338d4.roa (raw, json)
Hash identifier:          ceuIC6IsH19bXvCYyx//Irbs60B1pxOHs7ySoJKXIL4=
Subject key identifier:   00:FE:AF:AA:5E:B4:D3:E8:6D:88:54:E6:51:CD:85:BB:D7:F1:12:48
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849F9DFCDF5D969F2A5DC856EC0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1e533a29-fc0f-36b6-8e1a-a48d6fc338d4.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     15290
IP address blocks:        216.13.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:cd:f5:d9:69:f2:a5:dc:85:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=1b765e5a-dc16-479c-8ec4-342989778235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3d:a7:fc:bd:bb:9b:01:ca:c2:58:20:73:e4:
                    f6:18:5c:1c:3e:96:fa:62:21:f1:0e:f2:91:f7:dd:
                    fb:b6:ca:fc:76:a6:bd:d6:e3:4d:09:b5:e9:4d:e8:
                    95:ba:f0:c1:7c:2e:19:39:07:e3:5e:3d:5e:bb:be:
                    1e:0e:72:a2:b4:ac:73:58:ed:80:33:7e:7e:83:ea:
                    95:45:57:39:f7:6a:85:eb:18:ab:90:2f:8c:6f:e6:
                    99:7d:a3:18:64:56:09:54:29:be:b2:80:24:ed:c4:
                    30:40:9a:5e:30:1d:50:6a:56:f8:21:e9:5c:07:77:
                    a5:8e:db:96:d6:fa:5b:ef:45:a7:27:c9:26:34:f1:
                    dc:08:2d:6a:41:61:40:ab:79:53:30:a7:8a:99:d7:
                    a6:50:a3:03:6b:a7:1d:53:2e:a0:e2:3e:fd:4a:62:
                    fd:f1:10:70:c5:d1:4c:71:7f:c6:90:ff:b4:7b:23:
                    69:19:03:c6:92:fb:58:86:04:f6:3e:86:11:7e:40:
                    8f:1c:57:be:e8:96:24:1a:5e:58:1e:1f:dd:d7:6f:
                    e5:76:b6:e8:61:0a:7f:34:4c:ff:88:ed:26:82:d6:
                    06:92:6e:89:5b:5c:08:61:e1:fa:3f:56:7a:64:f6:
                    85:9d:2c:ba:c3:d8:60:ea:6e:9b:d1:4a:54:23:36:
                    e2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FE:AF:AA:5E:B4:D3:E8:6D:88:54:E6:51:CD:85:BB:D7:F1:12:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1e533a29-fc0f-36b6-8e1a-a48d6fc338d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.13.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:08:c5:4c:b0:1a:7f:1d:6c:0c:fb:5d:bf:e0:ae:3e:18:71:
         64:77:94:af:e1:2c:5f:10:10:61:90:29:ec:f4:ef:3b:e0:e2:
         cf:ea:fb:99:fc:3e:b3:1f:38:d9:a4:63:29:08:7f:be:67:c2:
         26:5b:28:ba:18:cc:5b:00:84:07:9f:70:f9:56:c0:3e:1d:79:
         09:69:55:00:26:0a:ad:08:fe:b0:5e:b3:69:14:2a:1b:84:ea:
         70:82:f0:1e:7d:e0:42:df:94:14:53:d1:f1:9e:5d:44:6d:c9:
         88:b1:df:a3:30:96:0b:ca:f8:7d:f2:13:7f:03:13:40:16:94:
         a2:29:6c:21:ae:0f:36:eb:98:be:d5:a3:cc:87:30:20:e0:0e:
         41:69:47:4e:aa:99:4f:4b:a7:6f:64:25:43:aa:79:91:33:6c:
         64:10:8e:ab:4b:a2:ba:02:e6:35:c3:7e:d1:76:5f:67:a7:4c:
         0c:b4:16:a8:dd:4c:aa:28:f0:15:79:ca:86:3e:ed:bc:b0:cd:
         19:65:7f:e8:21:08:88:8f:10:33:1f:fe:bc:67:b5:84:e8:5e:
         8b:b1:d5:90:5a:5b:28:3a:76:25:4d:6f:de:5c:bc:4f:4d:81:
         25:f1:2b:4b:40:79:8a:38:0f:5f:56:7a:fd:e0:85:cb:4d:4e:
         86:bf:12:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:00:10 2025 by rpki-client