Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/86d1b8f3-ad69-3bb0-870e-2573a74a74fa.roa
File:                     86d1b8f3-ad69-3bb0-870e-2573a74a74fa.roa (raw, json)
Hash identifier:          FnSNwWl0XjQPepWBNcxaRwc+uCFLf5NdYBY+4UixqZQ=
Subject key identifier:   06:AC:FF:9B:C3:A5:5B:2C:90:28:03:05:36:B2:37:E7:AC:38:1E:13
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F4328584A00DAC9510E83E01D012D4400
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/86d1b8f3-ad69-3bb0-870e-2573a74a74fa.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     6461
IP address blocks:        216.13.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:c9:51:0e:83:e0:1d:01:2d:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=a1c65d9f-7e15-47c8-97f0-562adcd2bc31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:53:26:2d:7f:0c:89:ef:29:46:c7:91:fb:51:
                    12:3c:50:05:56:9d:2d:18:af:ba:d7:08:d7:f8:14:
                    64:78:bd:16:ba:08:60:73:64:f2:ee:5c:42:97:9d:
                    a9:1e:07:02:cc:00:83:3a:8c:27:4a:fb:3d:2c:57:
                    4d:24:16:66:da:09:6b:b1:cd:02:85:08:0f:4b:fe:
                    a8:0d:c6:c4:87:25:6e:ce:56:3e:15:cf:21:4f:45:
                    e4:73:33:9b:02:c0:ef:51:64:bb:14:c0:98:a3:fc:
                    74:4a:77:ee:c9:61:ad:31:16:ea:21:6b:53:6f:fa:
                    e0:b9:6f:02:e9:09:89:2c:3d:2e:1c:d0:58:71:e9:
                    f6:e7:6c:12:63:0a:3e:e4:35:b2:93:e0:1a:16:b0:
                    90:88:8e:10:65:8b:7c:c6:58:6a:a2:fd:73:93:eb:
                    5b:ba:51:d2:67:69:2b:1c:70:6e:59:c2:d3:2d:f7:
                    f0:5e:9c:81:f0:da:eb:7d:48:67:27:67:fc:69:65:
                    b7:99:b9:e4:d9:be:0f:c3:4d:c8:4e:5a:6f:b3:8a:
                    b8:96:47:18:db:49:4f:55:f9:f2:51:02:0c:6a:c1:
                    fb:19:15:39:8a:a6:91:21:d3:99:f7:7b:34:ff:c6:
                    a1:79:77:df:a1:16:57:38:e7:18:2c:c4:90:66:57:
                    e3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AC:FF:9B:C3:A5:5B:2C:90:28:03:05:36:B2:37:E7:AC:38:1E:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/86d1b8f3-ad69-3bb0-870e-2573a74a74fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.13.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:28:57:40:7e:e6:c1:8d:0b:6a:c1:45:bc:cd:74:4f:58:95:
         cb:cf:73:c1:ac:9f:62:c0:85:06:ee:e9:93:27:c9:fe:84:9f:
         ac:cc:5b:06:92:4c:ee:c2:f1:aa:84:89:d7:33:13:8a:54:b2:
         73:50:5b:f2:5b:ff:40:79:34:e5:a2:37:f1:0d:4d:11:e4:2a:
         1e:75:31:9c:29:e2:0c:30:f6:b1:58:b4:dd:0d:b4:e6:cc:96:
         45:24:82:c3:ee:fa:07:a6:09:6c:31:ff:d6:9b:06:69:79:dd:
         3f:1b:70:02:b3:e5:62:43:0b:c5:f5:9c:68:38:b6:56:88:c8:
         8a:b6:dd:d0:47:93:bd:b4:51:25:ff:23:0a:2d:b1:d5:57:18:
         b9:02:9e:5c:84:f9:a7:aa:3b:b2:41:64:51:e5:95:af:10:d9:
         20:7a:5e:1f:be:4a:f9:cc:9e:2a:30:83:c3:20:2f:fe:62:d1:
         49:4a:ac:5a:49:19:f6:8c:bb:9d:f2:4c:79:b6:c5:69:f4:9b:
         25:ab:44:24:4a:e0:d0:ca:ba:ff:94:ed:1b:da:d5:15:3a:30:
         fb:d3:32:89:04:29:7f:58:1f:67:65:ae:ea:c6:34:09:87:76:
         21:19:2b:4e:4c:5c:cb:4e:1b:72:02:0e:d3:12:71:44:86:96:
         61:6d:2e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:40:58 2025 by rpki-client