Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/2b19fe31-783c-3d4a-8ece-06a253df9756.roa
File:                     2b19fe31-783c-3d4a-8ece-06a253df9756.roa (raw, json)
Hash identifier:          AeeRTXGV7Ypm/Pu8xSvvnbj6zne81Dp5qHnkLqQVyNg=
Subject key identifier:   5E:1E:55:4E:96:A0:9F:BB:79:79:DB:FA:D4:63:F2:F4:37:CE:EE:75
Certificate issuer:       /CN=faf569a5-954e-480e-9904-712ec61652b7
Certificate serial:       010D0C9F4328584A225ABA952CC53B25ABF33C80
Authority key identifier: 06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/2b19fe31-783c-3d4a-8ece-06a253df9756.roa
Signing time:             Mon 09 Jun 2025 13:01:01 +0000
ROA not before:           Mon 09 Jun 2025 13:01:01 +0000
ROA not after:            Sun 07 Sep 2025 13:01:01 +0000
asID:                     4913
IP address blocks:        216.226.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:22:5a:ba:95:2c:c5:3b:25:ab:f3:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faf569a5-954e-480e-9904-712ec61652b7
        Validity
            Not Before: Jun  9 13:01:01 2025 GMT
            Not After : Sep  7 13:01:01 2025 GMT
        Subject: CN=d37f9b27-fb7e-4f21-8c4b-ecfc68f51ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f9:cb:ef:be:71:28:34:ae:86:f4:7f:19:c0:
                    d4:5c:a6:37:0a:ab:b8:80:c7:34:51:fa:f1:60:e7:
                    5d:d2:7c:6d:ec:80:f8:ca:2c:94:28:2a:77:97:2b:
                    18:a8:82:ef:b1:74:df:64:a9:b4:ea:e0:df:84:87:
                    da:51:95:b6:7c:92:a3:e8:4e:2e:22:2c:44:03:63:
                    23:c6:25:a9:1a:1f:a5:cc:b4:40:e2:2e:87:5b:a6:
                    98:b9:49:cb:fb:23:3e:e7:eb:f9:0b:1b:26:b5:bf:
                    68:cd:29:4b:b4:7b:fd:7c:a4:a3:68:1e:43:53:eb:
                    1b:bc:4b:7a:71:de:97:30:07:94:1a:34:14:e0:61:
                    0d:1b:9a:f4:25:2b:a8:95:81:2b:69:b6:a2:d6:32:
                    47:07:b5:1d:58:cf:9f:60:ad:5d:6a:5d:1a:4d:91:
                    d7:3d:09:ee:f7:44:76:8b:dc:7e:9b:f0:23:6e:d6:
                    78:ad:95:80:bb:c2:fe:3d:ca:81:65:4c:56:c3:fe:
                    84:a6:02:cd:8d:9b:17:d2:6d:1a:56:9e:b5:2e:a6:
                    7a:1a:76:77:09:de:7f:9d:af:ac:be:c9:33:7c:0c:
                    00:1a:eb:85:2d:06:1f:c1:33:e6:f7:9c:d4:2d:ea:
                    d8:0e:5c:b9:c6:79:af:65:60:27:3a:11:4f:31:2e:
                    81:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:1E:55:4E:96:A0:9F:BB:79:79:DB:FA:D4:63:F2:F4:37:CE:EE:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/2b19fe31-783c-3d4a-8ece-06a253df9756.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl

            X509v3 Authority Key Identifier:
                keyid:06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.226.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:ba:30:c3:12:ff:64:62:50:3e:ab:58:50:57:4e:80:db:46:
         bb:84:b8:b8:6b:0f:2a:2a:a3:bb:cc:12:64:53:92:32:1c:b7:
         7f:89:2b:aa:dd:85:06:4b:47:bc:95:75:72:ff:ad:00:7f:b2:
         51:2b:2a:32:5e:1a:23:03:47:b4:20:d1:25:31:52:12:fd:af:
         1f:73:08:7e:67:f5:11:99:6e:65:4a:63:12:df:1f:36:80:68:
         43:07:06:85:a6:ad:3a:63:1f:11:78:e4:9b:a5:4d:e5:7e:b9:
         3d:b2:46:2b:05:86:cc:cb:a3:cd:13:3c:78:73:1e:e0:3c:9f:
         af:9e:34:34:80:25:63:7f:d3:2b:ce:eb:bc:b6:2c:4b:9d:87:
         e9:ee:5e:3e:e6:4b:6d:bf:fe:7d:90:3c:7d:77:26:3f:0a:ab:
         a7:38:30:89:32:7e:26:9a:cd:a2:c7:0c:11:f2:fc:5f:1b:e0:
         0b:2f:3b:3b:d1:0e:c7:27:18:d1:f3:e8:b0:04:90:ff:a7:bf:
         3c:5a:c0:f2:2d:14:7a:63:0d:33:3e:c2:bc:1f:bd:c0:26:26:
         a6:44:28:b9:04:a1:8c:22:7e:12:e1:7c:1a:10:e3:b7:a6:84:
         b6:76:bc:e7:ba:f9:57:6b:35:1d:10:1c:02:73:eb:50:a1:5a:
         7f:87:03:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:58:42 2025 by rpki-client