Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/c8f7a454-6474-3e76-9fe1-0ae508a770a0.roa
File:                     c8f7a454-6474-3e76-9fe1-0ae508a770a0.roa (raw, json)
Hash identifier:          pPUGpTgmujCT4MYO+eDdmUOZDK2F4Y3TXCB7t6fwc4M=
Subject key identifier:   C1:45:C4:41:13:40:84:F4:8A:A9:16:B7:88:F3:FF:25:D0:0A:C9:1B
Certificate issuer:       /CN=8ea241f2-3e20-4202-98ef-4d92b45559ea
Certificate serial:       010D0C9F4328584A0D6A8D1646102C853362B7A8
Authority key identifier: ED:6B:14:F9:53:5D:F2:B5:35:4A:CC:8C:16:95:25:E6:3C:B6:05:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/c8f7a454-6474-3e76-9fe1-0ae508a770a0.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        204.16.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/8ea241f2-3e20-4202-98ef-4d92b45559ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/8ea241f2-3e20-4202-98ef-4d92b45559ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:8d:16:46:10:2c:85:33:62:b7:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ea241f2-3e20-4202-98ef-4d92b45559ea
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=b2c153f9-ec0d-4b95-805e-ec8225da1798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b8:3f:c6:e0:76:52:69:25:53:15:5b:e3:9d:
                    ca:e7:6a:d7:e0:6c:32:4f:8d:ad:6f:86:4e:f5:ed:
                    72:40:c8:bd:bc:07:32:96:ef:94:e1:69:c3:b2:63:
                    c0:45:67:dc:4b:71:73:aa:e2:20:be:ce:7f:b8:08:
                    bc:db:64:2d:34:9c:ad:cb:eb:68:2e:ff:03:8c:bf:
                    a4:5d:cf:2f:e7:5d:c4:60:7b:ec:ce:19:36:2c:d1:
                    27:ae:38:ac:85:d6:45:a4:39:de:4f:09:89:24:08:
                    e4:a0:65:1e:80:72:eb:ad:ca:84:a8:ee:6a:d7:f4:
                    34:26:a4:92:03:83:b0:29:09:e4:3f:3e:e3:3a:d9:
                    de:1d:21:42:47:80:c2:48:3a:45:56:3e:cc:70:95:
                    f7:bb:d6:65:87:2a:c5:b6:72:f9:c0:53:1f:72:d1:
                    6e:8d:ff:2d:7d:78:5d:d6:74:fc:51:7f:ea:8e:a4:
                    d4:40:d1:25:0c:d6:d7:25:9a:d4:8c:73:f2:05:13:
                    1c:4e:df:e0:07:80:af:87:9e:93:a7:ed:db:4c:c7:
                    a0:04:1a:3a:b4:3c:89:44:9f:25:e3:2a:09:a5:dd:
                    04:d4:9c:b3:d2:28:55:32:3f:cd:c6:62:f9:0c:fe:
                    c9:f8:c6:76:9d:0c:70:13:07:d8:db:a5:38:24:97:
                    e1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:45:C4:41:13:40:84:F4:8A:A9:16:B7:88:F3:FF:25:D0:0A:C9:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/c8f7a454-6474-3e76-9fe1-0ae508a770a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/8ea241f2-3e20-4202-98ef-4d92b45559ea.crl

            X509v3 Authority Key Identifier:
                keyid:ED:6B:14:F9:53:5D:F2:B5:35:4A:CC:8C:16:95:25:E6:3C:B6:05:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.16.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:16:d8:a0:43:94:61:2c:dc:07:08:79:f3:be:29:94:32:84:
         a3:e7:52:e3:2e:d7:cc:2f:ef:e0:27:2e:b6:f7:2d:de:e8:9a:
         7c:cd:0b:5e:3b:c7:f1:f1:ab:da:e8:1c:e4:a9:30:56:80:bf:
         88:d0:cc:a1:c2:73:d3:d2:1c:ea:09:4e:a8:d2:c0:21:56:5a:
         98:7b:41:52:ee:9a:b3:05:46:c9:53:8f:bb:ac:84:e1:74:ba:
         b8:8c:18:6e:cd:af:96:f9:8d:05:bf:01:01:4d:be:21:21:ba:
         c2:1f:81:6d:4a:83:02:c3:9c:b8:4f:68:bb:39:bc:5f:bd:1c:
         a0:ca:8b:fb:93:93:98:c3:4a:d6:9b:60:4d:e0:74:2a:23:71:
         fc:32:c8:cf:e6:e6:64:7d:9b:32:b7:39:f3:ab:57:85:d6:20:
         c6:59:ba:c7:17:4c:0a:00:ea:be:f2:18:48:a5:b9:19:f6:91:
         87:20:29:8b:cb:a7:40:13:50:ec:e0:90:21:60:b4:0e:64:b4:
         43:80:8a:c6:d7:e1:bc:77:24:60:3f:59:60:1d:9f:84:8b:1e:
         e5:05:ef:11:5a:32:de:b5:bd:87:20:2f:d4:95:2f:d7:86:31:
         0e:f9:81:35:fb:af:a3:16:f7:95:a9:8b:ef:d5:a2:1c:28:d5:
         f2:32:4f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:09:34 2025 by rpki-client