Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/0ed91783-7295-3054-a231-e44a75457220.roa
File:                     0ed91783-7295-3054-a231-e44a75457220.roa (raw, json)
Hash identifier:          bWh9YecjGysBNj53QoRrTOf8QU9H6m2S+fK7santM6o=
Subject key identifier:   7F:B5:2C:13:60:86:8C:63:63:56:F8:21:C6:89:49:3D:F2:65:56:4F
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F4328584A0C056DFC526FF24A20AC3140
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/0ed91783-7295-3054-a231-e44a75457220.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     13213
IP address blocks:        216.224.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:6d:fc:52:6f:f2:4a:20:ac:31:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=ab9d9f69-8a13-494b-9337-e1200865efe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:06:80:29:b7:56:e6:e7:4b:0c:5a:24:65:98:
                    07:3c:51:64:c7:5a:68:78:f1:22:bd:9e:15:38:98:
                    37:d4:79:6a:41:1d:ab:6e:a5:53:0c:41:f5:a7:f6:
                    58:dd:ba:a5:5f:07:f0:71:c9:18:99:bd:b7:f0:03:
                    22:09:9d:a8:db:66:ec:a9:15:8c:e2:4e:0e:67:71:
                    3c:1c:e0:79:7a:11:0b:7c:88:23:3f:a2:ef:19:80:
                    87:d4:b3:71:0e:1f:40:9d:af:f9:cb:07:e9:f6:a4:
                    03:fb:ed:1d:75:8b:ec:20:ba:1c:da:77:22:a2:e6:
                    94:93:87:87:70:da:08:27:d5:fe:81:df:37:41:a4:
                    71:21:72:21:b4:df:e6:db:55:16:e9:73:55:e6:b3:
                    a1:68:a3:a2:77:73:52:87:c3:2b:dd:c4:31:95:79:
                    24:b9:85:e6:49:df:4f:d8:a8:b4:76:1b:ce:0a:16:
                    07:3f:7b:9b:16:a8:fa:21:1f:41:02:54:4a:8e:bf:
                    d0:91:77:e4:9c:74:09:46:b2:69:30:90:77:a8:b4:
                    78:fb:72:33:ab:43:c8:3a:7b:d1:bd:5b:7b:ff:1b:
                    40:e4:ea:f2:67:21:c6:5c:35:44:0d:4e:09:df:f7:
                    73:3a:89:9f:7d:4d:ca:8e:bc:ee:5b:15:2b:2d:60:
                    01:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B5:2C:13:60:86:8C:63:63:56:F8:21:C6:89:49:3D:F2:65:56:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/0ed91783-7295-3054-a231-e44a75457220.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.224.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:fe:77:fc:c4:f0:80:83:48:af:15:4e:70:25:1d:fe:17:4c:
         0d:86:79:f9:e4:76:c5:32:c5:83:ab:2c:95:16:f6:bb:e4:8a:
         9f:37:4d:66:cf:54:46:05:a7:53:8a:a5:79:1f:d7:8c:04:1a:
         ab:6d:82:e8:f1:50:b2:8b:37:38:c1:39:87:7e:9f:55:bb:91:
         8e:a6:d0:1f:d7:8a:96:fb:52:41:a6:20:bf:e9:65:6b:3f:8a:
         2f:ff:06:9c:b2:7b:95:4f:c5:d3:64:93:ca:a1:11:6a:59:92:
         75:b5:1f:f9:1e:80:a8:7b:27:fd:32:e0:5d:f4:ab:d3:25:26:
         40:bd:55:9c:9c:09:a2:b0:75:2b:6a:3a:46:77:7c:78:16:8a:
         95:80:d7:41:79:4b:71:c0:d7:9a:63:10:95:40:43:8d:39:1d:
         41:d5:93:7a:e8:c8:12:7e:59:58:01:7e:51:0e:11:01:8e:01:
         3b:53:a0:b9:ce:e7:89:78:82:07:a5:bf:85:dc:a3:17:24:87:
         2d:a3:0b:e3:cf:d5:8b:7e:58:be:7e:76:fa:8b:99:9f:4d:21:
         8f:a1:8c:ef:c2:aa:b5:af:1a:cb:9e:a7:03:c2:86:6d:0a:c7:
         a9:58:aa:9d:61:d7:93:a3:24:92:f3:95:d7:e4:4a:f9:20:96:
         33:f6:7d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:23:25 2025 by rpki-client