Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/31d9d835-72eb-3df1-b107-708439cd323f.roa
File:                     31d9d835-72eb-3df1-b107-708439cd323f.roa (raw, json)
Hash identifier:          nAzWtuevAGqLZ25OyfDsQTF9P3P+nsiSJ+PuwArGk6U=
Subject key identifier:   46:D4:E9:9C:C8:B0:90:77:7E:B8:15:44:FC:FC:B7:E9:C0:EA:FD:83
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584A23C013EA5BB5F22BA2FEC800
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/31d9d835-72eb-3df1-b107-708439cd323f.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     4922
IP address blocks:        216.30.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:13:ea:5b:b5:f2:2b:a2:fe:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=05c39fd4-06d8-40bb-8dc7-1393d74d8f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e0:4b:5c:d1:1b:cf:5d:cc:88:83:00:c9:2e:
                    37:7a:0a:eb:ed:17:2a:1c:e9:8d:af:1d:98:64:04:
                    a4:89:c4:04:36:bd:ec:ee:c8:b1:25:cd:64:1c:2a:
                    84:78:72:9a:eb:2c:7c:2e:d3:cd:22:12:fb:2a:dc:
                    51:6c:1e:4c:c3:63:d3:e4:18:6a:da:ed:e7:78:8f:
                    d1:69:3b:89:b7:5c:e0:de:5b:b3:19:3d:1b:89:68:
                    29:18:92:c8:7c:0e:6e:2b:bf:d2:2c:0d:0d:f1:77:
                    6b:47:64:b4:cd:9b:03:40:d9:07:b3:6e:07:a0:76:
                    2e:94:d7:a8:88:ad:2c:ea:d8:bc:d6:b1:4f:b8:5b:
                    07:4f:ff:b6:35:45:31:ec:24:e6:4e:a1:0c:52:cc:
                    42:b2:5f:ac:87:c4:27:64:79:22:18:f4:16:44:6a:
                    ee:6a:b4:58:de:83:72:62:22:f2:5b:93:26:74:58:
                    f5:36:4c:19:db:ab:6a:f5:ef:7b:bf:ad:c6:ab:ed:
                    5e:9f:fe:0e:a2:f2:5c:9a:02:f6:b6:09:72:5e:a3:
                    e8:f6:c9:9d:1d:0b:e1:e2:03:86:4e:bb:6d:1b:e0:
                    ff:2d:8c:6c:48:91:87:eb:1e:99:10:db:8c:51:fb:
                    82:da:91:00:15:cb:ca:0d:b1:81:2c:e5:e8:83:ed:
                    4d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D4:E9:9C:C8:B0:90:77:7E:B8:15:44:FC:FC:B7:E9:C0:EA:FD:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/31d9d835-72eb-3df1-b107-708439cd323f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.30.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:1e:b7:5d:f6:8a:1b:10:bb:d0:19:16:ec:e1:cd:9f:95:e3:
         ba:68:76:3e:f4:87:d1:7d:95:1d:cb:d1:e8:b0:f2:38:2d:6d:
         1c:f5:36:17:b5:d0:3b:57:ac:c9:93:6d:23:03:ff:15:03:13:
         97:a8:17:8c:b6:fe:07:50:06:cb:48:fe:e4:a8:6d:b9:3d:26:
         59:ff:48:db:e9:60:a9:65:e6:00:e1:b0:95:b1:61:3f:a5:36:
         84:d3:3e:cb:95:9c:f6:03:a5:18:94:17:91:a7:d4:0a:10:6c:
         72:ec:e1:f4:20:48:a3:d4:47:5f:47:05:1f:95:6a:6d:67:8c:
         e3:d1:d6:65:87:d2:9d:d3:47:62:69:46:7e:cb:f1:06:7f:f7:
         ba:c2:03:5f:07:09:ad:eb:99:84:7a:46:3b:89:77:b0:82:31:
         ba:42:8b:0e:98:e1:f3:72:f2:dc:97:0d:a7:78:35:ca:81:ec:
         5c:f7:41:23:c4:35:a9:8f:de:97:36:15:d2:76:0e:ac:ad:6c:
         ca:59:d8:a1:fc:6f:06:1e:44:7e:23:49:fa:d5:7e:86:55:b1:
         3c:ae:6b:16:32:0b:98:11:47:68:1b:ca:ab:37:63:30:b4:5f:
         09:4c:20:d6:ad:de:7a:f1:cb:99:14:f2:e1:32:3f:c5:f4:79:
         00:08:12:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:36:28 2025 by rpki-client