Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/a04f4449-a649-3911-bf78-79e06327d3a8.roa
File:                     a04f4449-a649-3911-bf78-79e06327d3a8.roa (raw, json)
Hash identifier:          A9sFLnVSV3YeHwhjyllJDCz6vIqhPXmUXtxlufwMcCY=
Subject key identifier:   BC:14:35:09:81:E5:26:12:EA:8D:A9:2C:1C:D0:6B:66:62:79:B0:8D
Certificate issuer:       /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial:       010D0C9F43285849D1650880BCADD1D9EA32BA80
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/a04f4449-a649-3911-bf78-79e06327d3a8.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     11650
IP address blocks:        216.195.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:08:80:bc:ad:d1:d9:ea:32:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=fb01138f-d48c-4524-9708-60fd3f2a8a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a7:b5:58:63:d1:18:98:0a:d8:fd:8a:62:46:
                    4f:8e:ca:6c:cd:bd:b2:14:c2:8e:10:01:f3:a3:8c:
                    ba:2b:d0:ab:ea:87:8a:23:98:09:a7:c2:af:c0:84:
                    88:09:43:cb:3a:0a:27:f5:b2:33:3a:f8:be:2b:30:
                    7e:ef:e0:e6:13:25:e4:a4:43:dd:5d:1c:fb:77:1d:
                    50:f1:98:57:c2:3a:fa:d9:2b:85:ee:d7:ee:c5:a0:
                    1a:82:7a:a4:96:f0:87:51:08:1c:5b:53:97:fc:be:
                    bb:f5:2c:85:ef:af:1f:77:d7:73:d8:a7:98:5a:6a:
                    6a:b2:0b:ce:36:2f:37:77:c7:1b:5e:35:49:fc:78:
                    72:30:c6:ff:9e:d6:b9:d6:df:86:35:49:de:b0:eb:
                    85:fb:1a:ed:1a:67:26:9e:50:ed:81:b5:32:84:91:
                    13:05:b8:ff:bd:2b:e0:c1:75:b5:e7:bd:1f:1e:96:
                    ef:84:6e:7a:3b:7c:cd:dd:85:13:48:30:c2:df:4d:
                    ed:d9:6c:e1:f1:26:53:4a:fa:be:90:58:de:2e:26:
                    21:ed:8f:2f:75:ff:d4:cb:20:f0:73:5f:d4:12:e4:
                    d4:54:78:59:5f:eb:43:6c:ba:b5:f9:b8:53:30:54:
                    e5:88:e7:a1:52:18:6c:ba:95:a1:a5:aa:af:51:a6:
                    4d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:14:35:09:81:E5:26:12:EA:8D:A9:2C:1C:D0:6B:66:62:79:B0:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/a04f4449-a649-3911-bf78-79e06327d3a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl

            X509v3 Authority Key Identifier:
                keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.195.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:0e:6f:78:99:8b:39:93:8a:d2:b3:3c:b0:74:10:6b:7a:0c:
         2a:ba:62:9a:33:7d:82:51:81:0e:d8:0c:58:3b:7a:d8:9c:d2:
         bf:a1:95:69:09:91:ca:6e:ef:ca:a7:00:98:55:72:01:ea:75:
         87:62:ee:cc:83:57:dd:e6:88:d4:66:08:34:24:e0:6b:73:53:
         f8:1f:cb:fc:10:52:e9:58:4a:22:f2:d5:f6:d7:1b:ed:f9:92:
         96:e8:ac:70:a5:2f:1f:d1:72:a6:d0:ae:51:39:34:90:78:89:
         27:81:d3:02:0b:1a:db:9a:e9:71:3e:71:36:55:b3:2e:87:87:
         87:35:f2:25:93:67:40:fe:7c:8d:61:4e:2c:eb:c9:02:c6:7f:
         1b:a5:9c:cd:e2:4c:46:92:ba:dc:23:90:b9:26:1c:8d:90:24:
         3d:a0:1c:6a:64:e2:80:4f:9d:47:ee:6f:b5:8d:fd:62:8b:44:
         cd:2c:8d:29:d7:41:a4:a2:21:06:91:66:6e:b5:b7:79:c3:dd:
         97:77:87:95:dd:b2:1b:93:5c:77:c6:14:f2:01:5a:13:f2:7a:
         25:83:46:6b:82:2c:93:cb:5d:7e:39:ea:76:77:40:e6:c8:ac:
         70:3d:e0:d1:31:34:59:df:5f:ce:5e:f3:fb:cd:a1:12:99:a8:
         a1:74:09:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:01:12 2025 by rpki-client