Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/7f168197-3e85-3fd5-b48a-baf1c2344d4d.roa
File:                     7f168197-3e85-3fd5-b48a-baf1c2344d4d.roa (raw, json)
Hash identifier:          1ozRLOE+UsA1BV4und4gNQKtM4+lvgbd1gIMrnc2tNo=
Subject key identifier:   E3:BD:EE:B2:01:C6:3C:1D:9B:B0:16:73:DF:71:45:7C:EF:48:39:D0
Certificate issuer:       /CN=cbdc881f-54ac-40a9-89b3-5383cf243bae
Certificate serial:       010D0C9F4328584A050A7A21CE29FF1F09156B00
Authority key identifier: 0B:77:9F:06:0B:42:75:84:12:DE:DC:60:66:74:A4:3B:3B:C5:1C:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/7f168197-3e85-3fd5-b48a-baf1c2344d4d.roa
Signing time:             Fri 30 May 2025 01:00:48 +0000
ROA not before:           Fri 30 May 2025 01:00:48 +0000
ROA not after:            Thu 28 Aug 2025 01:00:48 +0000
asID:                     396982
IP address blocks:        209.240.16.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cbdc881f-54ac-40a9-89b3-5383cf243bae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cbdc881f-54ac-40a9-89b3-5383cf243bae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:05:0a:7a:21:ce:29:ff:1f:09:15:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbdc881f-54ac-40a9-89b3-5383cf243bae
        Validity
            Not Before: May 30 01:00:48 2025 GMT
            Not After : Aug 28 01:00:48 2025 GMT
        Subject: CN=6b8d539b-6a2e-48f9-b308-014fd95760cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5e:22:c4:b1:33:ec:9a:07:d1:4c:ac:a4:14:
                    23:f7:04:46:5e:1e:25:ab:50:80:37:ac:75:a1:ca:
                    d7:75:18:85:c3:f4:2c:da:39:84:45:d3:a2:53:95:
                    98:2c:21:0b:49:e5:1b:e3:39:ae:3a:7d:54:58:ba:
                    27:43:53:15:e6:6b:72:b3:4f:df:5d:63:95:e0:18:
                    9b:c5:6e:11:70:79:99:12:68:bb:42:d5:45:b2:7a:
                    b2:d6:d3:b2:f7:80:a9:ed:91:36:ae:19:44:2c:8c:
                    7d:a5:2d:ba:a6:0c:7f:1c:98:36:51:e2:6c:32:56:
                    ac:58:bb:d3:d5:43:07:e1:36:d5:4a:03:a2:cc:cf:
                    99:13:93:b4:44:2e:c8:4a:3c:1f:65:e3:5c:2c:0a:
                    ef:7d:ed:8a:b5:f8:9d:20:21:03:86:d4:9e:52:e4:
                    b1:a6:66:4e:e4:dc:16:85:c2:20:fc:87:64:4a:8f:
                    df:a6:e2:ec:79:86:af:ee:e1:be:d6:78:7b:25:c3:
                    ef:99:63:84:0e:5d:ec:36:3e:9a:b6:75:16:22:92:
                    98:ed:6a:7f:db:ed:7f:c0:9c:09:ad:fa:91:c5:4d:
                    af:86:4c:e9:f5:74:65:c8:d8:c8:33:96:c6:b9:50:
                    b1:c0:c9:0f:e9:a8:a5:20:34:d8:12:94:3f:19:f1:
                    36:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BD:EE:B2:01:C6:3C:1D:9B:B0:16:73:DF:71:45:7C:EF:48:39:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/7f168197-3e85-3fd5-b48a-baf1c2344d4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cbdc881f-54ac-40a9-89b3-5383cf243bae.crl

            X509v3 Authority Key Identifier:
                keyid:0B:77:9F:06:0B:42:75:84:12:DE:DC:60:66:74:A4:3B:3B:C5:1C:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.240.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:2a:35:2e:a4:95:cd:81:48:67:1e:b8:a3:23:44:59:d1:bb:
         51:54:78:3d:42:d8:05:ef:7d:74:0e:6d:96:1e:5a:6f:46:4e:
         1e:da:3d:a5:33:db:51:36:f6:b9:a7:f3:69:8c:c3:b7:45:43:
         6a:43:b3:bb:ad:24:bd:22:6f:aa:38:c4:fb:cc:1e:b2:b2:4b:
         25:f7:9e:7b:9b:4f:1c:0a:92:14:09:8b:dc:d0:b4:4d:cf:a5:
         52:d7:95:88:bd:11:ba:0d:f5:f3:2f:6b:31:3e:1c:65:69:ca:
         68:5f:cb:b5:a1:a2:8f:31:73:22:fd:e6:f9:84:da:79:88:e4:
         f1:61:ae:a4:bb:6d:49:4f:ef:12:40:60:e5:7c:ca:5d:7d:22:
         d6:40:9e:b0:51:3c:4b:d7:0f:8c:08:55:6d:3b:4f:4b:ba:c2:
         8b:57:62:8d:49:7b:7f:34:2a:3c:28:f9:ed:7c:4b:23:7a:a1:
         b1:be:9c:e7:a4:86:53:e2:1d:85:38:d0:26:da:48:39:79:c4:
         e5:3b:e8:dd:a7:1f:c1:2c:85:ae:89:13:ec:31:e8:07:4b:f7:
         7a:a6:b2:3f:e9:33:99:df:f8:5f:84:80:8a:6c:a2:f6:7a:27:
         66:99:d0:6e:5e:1d:c0:29:42:12:81:75:dc:14:21:df:62:ae:
         84:59:ec:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:07:30 2025 by rpki-client