Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/4432433d-c4b1-3e44-82cc-f2a46a31efce.roa
File:                     4432433d-c4b1-3e44-82cc-f2a46a31efce.roa (raw, json)
Hash identifier:          nJqZmofn04F57GQwrFd9VMq33w39DNCnRfRpeGndleg=
Subject key identifier:   29:1B:D3:67:F8:6F:63:68:D4:0E:9F:05:29:D5:D8:7E:EA:7C:F1:1C
Certificate issuer:       /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
Certificate serial:       010D0C9F4328584A14657DC0F7BA4883DE43A600
Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/4432433d-c4b1-3e44-82cc-f2a46a31efce.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     399575
IP address blocks:        216.205.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:7d:c0:f7:ba:48:83:de:43:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=63bde05c-3f34-4567-9259-76f1c0c2d562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9d:96:10:74:10:76:d6:93:0d:8c:41:78:25:
                    6c:39:51:9e:7c:da:a0:8d:b1:d3:4d:ad:f2:1f:df:
                    78:9b:d2:ff:ff:ff:74:7f:4f:4c:46:48:3c:8a:45:
                    78:24:97:33:3e:62:57:90:67:53:db:81:be:06:68:
                    e7:6f:b1:3f:7b:2c:c6:ff:54:7f:07:fb:82:b9:49:
                    b2:e2:5b:9b:00:6e:55:88:cf:dc:50:6e:21:bd:df:
                    c1:f2:9c:52:6b:40:c6:81:e2:69:7e:f5:ca:90:c9:
                    75:58:67:a5:e1:fd:27:66:a5:16:e1:0b:b7:b3:6d:
                    a8:0c:dd:69:56:de:db:c1:6a:52:bf:d9:6c:3c:fb:
                    0c:0f:8c:f8:d8:74:c9:a0:8b:08:bb:27:51:25:4a:
                    2e:67:48:28:da:2b:76:f7:fe:82:71:08:3f:dd:2c:
                    78:99:2c:ca:93:f9:6a:e1:73:85:d5:56:a8:94:6e:
                    22:c6:a6:0c:70:e0:c5:49:4b:a5:7e:db:4b:ca:24:
                    20:7b:c9:41:02:d3:65:76:d0:ff:9d:93:b8:b2:7f:
                    f2:f7:9a:b6:a1:b1:0b:fe:6f:9f:e9:07:bb:2c:52:
                    23:de:3f:af:0b:5c:35:fd:ea:ce:15:9b:1d:c0:13:
                    5e:d0:97:17:fd:ac:70:93:62:5d:f8:bf:8e:b4:9f:
                    d9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:1B:D3:67:F8:6F:63:68:D4:0E:9F:05:29:D5:D8:7E:EA:7C:F1:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/4432433d-c4b1-3e44-82cc-f2a46a31efce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl

            X509v3 Authority Key Identifier:
                keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.205.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:1f:65:4b:23:4b:22:1d:53:3c:77:4c:85:27:93:f3:82:af:
         3b:03:45:1e:62:a5:8c:ca:be:5d:68:46:bc:2e:56:a6:ab:00:
         dd:08:21:29:fc:dd:8a:d9:7e:d3:96:3e:aa:f1:9a:fd:60:53:
         75:77:bd:3b:b9:b1:07:ba:c2:a2:aa:9d:44:52:b0:e0:a8:03:
         4b:11:6a:46:b8:3d:24:57:2c:65:51:2a:af:9f:7b:8a:dd:2c:
         c0:f7:b8:e6:41:21:69:41:58:33:2a:30:72:94:bf:dd:70:ac:
         39:22:d5:71:1d:3f:21:34:e2:dd:34:0b:16:8b:b2:88:aa:ee:
         02:2e:f6:10:c0:40:f9:07:a9:0f:c1:81:55:b5:fc:88:e8:16:
         88:66:64:8d:ae:6d:ac:6e:ea:a6:ce:bf:46:5a:20:3c:69:68:
         3a:32:39:7e:91:07:c0:99:ad:9b:7a:b7:8f:1b:fa:f0:0e:ac:
         99:76:b7:ab:8c:55:b3:ad:2f:08:f0:28:58:7c:0e:af:3b:d9:
         34:11:bc:36:9f:c6:28:cd:b3:65:af:0a:d7:3c:66:73:44:8c:
         59:0d:91:73:b0:9e:60:69:84:7a:45:10:8d:7d:1c:38:5a:3e:
         ac:79:fe:74:48:10:d5:37:aa:66:43:17:0e:5c:41:1f:e0:51:
         ca:32:5f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:45:22 2025 by rpki-client