Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/6a9aa8c6-e387-3bb7-a185-fc2e357e33d2.roa
File:                     6a9aa8c6-e387-3bb7-a185-fc2e357e33d2.roa (raw, json)
Hash identifier:          0ulwNIeNsCJy1itOoKPQsOo31VFiUGtbUNmCDXlSDHU=
Subject key identifier:   37:FD:5C:1B:CE:6A:AB:71:2D:57:B2:98:D7:34:71:DB:13:B6:63:30
Certificate issuer:       /CN=8ee8b7f9-2148-4099-8192-6428b14301be
Certificate serial:       010D0C9F4328584A2C201F9FC7025BDF44A01FE8
Authority key identifier: 84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/6a9aa8c6-e387-3bb7-a185-fc2e357e33d2.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     3464
IP address blocks:        199.88.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:1f:9f:c7:02:5b:df:44:a0:1f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ee8b7f9-2148-4099-8192-6428b14301be
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=d261a048-9541-4dee-91a0-96e2e16ea954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:34:58:c4:3c:ad:b2:06:c8:0e:3d:d4:89:fd:
                    b7:b8:3e:e3:74:b2:a4:5b:99:c2:d3:cf:5f:df:2f:
                    c4:2d:50:d5:39:0f:bc:9a:7a:8f:d4:f8:91:76:d8:
                    8d:eb:90:44:80:12:a5:9a:52:66:01:c8:4b:cb:bd:
                    ee:a8:7f:52:ed:58:f3:aa:37:8e:ac:48:60:0b:91:
                    e5:8d:f6:b1:75:a0:57:ab:b0:2f:dc:88:a2:1d:cf:
                    0d:91:22:75:54:d4:2f:c0:b6:95:06:d3:cb:5a:5b:
                    4e:59:5d:c6:13:b0:d4:77:74:b4:58:b9:f8:c0:13:
                    79:24:4a:bf:fe:a1:20:8d:ce:61:4b:c4:5f:f6:34:
                    b8:a0:cc:a6:ab:09:f1:1b:2c:3a:f3:93:21:11:e0:
                    eb:2a:2c:4d:7b:69:1d:3b:72:45:bb:55:71:a3:ab:
                    25:d7:77:d1:5f:01:94:94:c5:63:6f:ef:73:db:99:
                    cd:f9:e7:cd:41:07:56:b7:50:83:fc:55:6a:16:8d:
                    54:27:49:65:1f:c6:2b:3b:6c:a9:da:45:ae:40:4f:
                    69:b8:be:14:56:8b:06:a4:2c:78:6d:1e:fd:c2:60:
                    b6:93:23:ec:8e:46:e0:d1:da:e6:c5:dd:73:66:4d:
                    d9:63:c0:ff:1b:a4:e0:dd:b5:dc:62:37:2d:02:fb:
                    ce:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:FD:5C:1B:CE:6A:AB:71:2D:57:B2:98:D7:34:71:DB:13:B6:63:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/6a9aa8c6-e387-3bb7-a185-fc2e357e33d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.crl

            X509v3 Authority Key Identifier:
                keyid:84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.88.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:a2:01:f7:cc:2c:7f:30:6c:a7:00:2a:09:78:11:cd:fc:c4:
         61:f4:5b:e1:40:06:ba:0f:25:e9:2e:3f:c1:bb:73:da:74:15:
         e8:89:71:f4:91:90:34:ce:a1:34:c2:4c:cf:0d:03:d5:8e:55:
         1b:e7:2a:3a:6d:ca:0a:2b:a1:dd:a5:b9:85:d1:24:bd:cd:ab:
         e2:f1:01:44:10:a2:92:e3:dd:87:7e:bb:5a:13:d1:d5:8c:5f:
         1e:d2:06:5d:70:40:b5:85:f0:81:1d:11:fa:03:51:da:6c:8f:
         b6:b4:61:fe:26:9b:86:d5:a5:aa:9e:25:79:e6:c6:b2:3e:77:
         fe:e5:5d:10:3b:87:03:f4:58:ea:97:dd:fc:20:b2:b9:84:9b:
         5b:5a:50:5d:4e:94:c4:20:52:2b:92:e2:05:69:71:18:94:21:
         c8:77:2d:62:da:67:0b:54:84:e0:07:d8:93:3e:f6:89:02:6c:
         e6:1d:c8:d6:57:be:7e:35:5e:c5:cc:9f:31:0a:af:9a:1e:5b:
         12:be:30:c6:aa:ec:4d:36:e7:fc:ab:e6:e1:e7:75:d7:94:7b:
         d6:8a:13:e6:32:45:8f:23:27:40:5b:27:72:6c:40:69:da:9c:
         59:a0:ee:16:38:fa:e3:09:74:6e:7e:97:50:9e:3b:ae:2b:20:
         57:14:59:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 10:48:45 2025 by rpki-client