Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/c2186dfa-3aa6-379a-ac86-2c332db54c79.roa
File:                     c2186dfa-3aa6-379a-ac86-2c332db54c79.roa (raw, json)
Hash identifier:          stTnzzVEIH16BFkd9sm0Sf4fOqxr69jEdLbJTdG6XfE=
Subject key identifier:   3F:19:96:20:A6:E4:41:08:24:7B:E6:8E:D2:07:5A:3B:A2:EF:99:2B
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584A23C01B30777973F0CE14130E
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/c2186dfa-3aa6-379a-ac86-2c332db54c79.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     4922
IP address blocks:        24.49.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:1b:30:77:79:73:f0:ce:14:13:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=34c84f4f-ad15-4664-9469-8615695cea4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:75:34:3e:56:5a:ef:b2:27:0d:3a:65:1d:aa:
                    c0:ff:b5:09:ee:38:a2:c3:2d:18:9c:d6:6f:a4:22:
                    c0:c4:c7:9e:3b:3c:22:f9:1e:cb:c1:2c:99:e8:d1:
                    b9:bd:ff:29:87:65:91:f7:23:e9:96:a1:9f:e0:03:
                    7c:52:58:c1:82:ac:68:13:68:b6:23:31:2e:aa:5d:
                    c5:4f:a4:33:d1:c9:f1:5e:b2:a7:9d:ef:27:75:84:
                    d4:51:be:1d:a1:23:23:06:a1:f7:c1:88:89:93:56:
                    b6:d4:78:8f:c3:e6:14:f4:ac:bd:a0:da:1b:48:29:
                    72:6b:13:27:00:49:fd:f4:94:6b:72:73:9a:3b:c7:
                    19:c0:7a:cc:cd:c6:89:d4:6d:a8:88:d7:e3:ea:94:
                    ee:a1:bd:6b:29:25:02:5f:70:f0:af:d7:4f:43:ee:
                    40:ba:ce:69:99:21:cc:91:56:90:f4:13:f1:a2:a8:
                    24:b0:e4:d2:65:ec:58:6f:16:b1:3d:2b:00:2d:0d:
                    6c:ff:68:70:12:96:f4:ab:cd:6e:17:5e:20:ea:8e:
                    61:ab:28:49:34:d9:80:e2:83:c2:f7:37:a6:1e:e0:
                    ce:49:31:86:69:40:68:a5:72:a4:f8:f1:1f:be:9a:
                    0f:f8:2a:a0:5d:40:2c:ec:ab:ba:29:29:75:4d:0a:
                    f7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:19:96:20:A6:E4:41:08:24:7B:E6:8E:D2:07:5A:3B:A2:EF:99:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/c2186dfa-3aa6-379a-ac86-2c332db54c79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.49.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:a3:a2:17:5a:c2:ef:38:82:18:fb:84:ff:64:07:66:11:8b:
         06:ad:c5:f9:44:b8:6c:25:b6:46:26:31:a6:83:8b:42:b7:a9:
         f9:bb:43:13:ad:24:b7:22:78:49:0f:5a:60:d7:b0:68:e4:dc:
         1e:8c:84:04:70:91:ca:ad:80:36:5d:bf:7d:bf:8a:d5:10:a4:
         0d:d5:e1:77:c2:7c:b5:e3:a8:d2:44:e5:c8:28:e0:b6:c1:59:
         d7:81:17:56:aa:b7:5a:13:98:0b:fe:92:55:d6:01:00:ef:d0:
         5b:5b:47:eb:a8:7f:a8:49:5b:3c:0c:99:d7:0c:52:5c:2a:20:
         e0:1c:c2:e3:cd:54:e5:a4:8a:43:e4:66:59:e4:9d:b9:89:d8:
         49:f1:c5:d9:2e:e1:1e:1e:b3:4d:b8:02:fc:61:52:1b:35:d1:
         69:78:39:c8:59:7f:03:1e:86:f0:27:5c:38:71:8b:a5:72:7d:
         39:76:fa:27:a8:59:2b:61:99:72:30:21:f0:cb:5b:d4:64:16:
         6f:03:17:c3:7e:fd:2c:73:62:3e:f8:8b:a2:50:8d:85:03:f9:
         c6:bb:00:36:e6:40:bc:93:9b:ca:f3:ce:2d:51:a3:08:69:f3:
         65:d3:4a:13:c0:e4:49:16:fd:8c:10:69:71:0f:29:06:d4:ba:
         5d:f8:fe:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:20:13 2025 by rpki-client