Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/a5dbf212-654d-3f8d-b9e6-deab9baa5032.roa
File:                     a5dbf212-654d-3f8d-b9e6-deab9baa5032.roa (raw, json)
Hash identifier:          GerJSMvuN0/iDsNt+kuxykfhN4sZoPRqn7XMgVls/hg=
Subject key identifier:   7D:58:EC:F9:7A:BA:D4:3D:66:15:2E:52:61:93:8D:CB:E8:42:30:1F
Certificate issuer:       /CN=0f950b17-8345-41e7-bf75-5481729a0012
Certificate serial:       010D0C9F4328584A751AFA405D67FA92401FD000
Authority key identifier: 56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/a5dbf212-654d-3f8d-b9e6-deab9baa5032.roa
Signing time:             Wed 09 Jul 2025 04:24:42 +0000
ROA not before:           Wed 09 Jul 2025 04:24:42 +0000
ROA not after:            Tue 07 Oct 2025 04:24:42 +0000
asID:                     11606
IP address blocks:        216.6.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:75:1a:fa:40:5d:67:fa:92:40:1f:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f950b17-8345-41e7-bf75-5481729a0012
        Validity
            Not Before: Jul  9 04:24:42 2025 GMT
            Not After : Oct  7 04:24:42 2025 GMT
        Subject: CN=03db53c5-be47-45a5-9bcc-8966758f5f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:de:c8:5b:be:5c:fc:d1:ec:1c:7c:16:05:8f:
                    12:a6:09:5a:c3:ba:ff:df:99:80:07:68:af:7b:02:
                    ec:b2:63:5a:10:d0:4b:53:9d:1d:97:87:fe:c3:2a:
                    b7:71:72:5d:43:60:0b:a1:25:7d:f7:b4:c0:fb:0d:
                    15:3e:c3:15:cb:66:e6:7e:00:ac:c5:ea:97:8d:d8:
                    09:72:a9:57:b7:46:e0:5f:64:f6:27:c4:c2:27:9d:
                    ca:27:3e:46:9f:51:10:91:88:ae:fc:52:a1:ea:79:
                    39:8f:95:79:04:91:81:2f:87:93:91:d8:54:72:a0:
                    23:18:c4:54:f7:39:19:50:3f:df:f6:ad:42:0a:40:
                    23:00:86:32:70:be:21:91:45:b5:c9:0e:c6:6b:a5:
                    49:3f:d6:28:c9:a6:38:d8:bf:a3:58:83:21:ca:fc:
                    a0:40:87:50:aa:a4:37:85:02:a3:dd:b1:a4:31:92:
                    0c:ae:b4:86:a3:8a:e2:cd:66:90:e9:8b:ca:6d:ee:
                    d3:14:23:d9:ae:a6:4b:86:b4:79:59:3b:11:95:b7:
                    d7:8e:82:d1:a0:28:e8:ff:52:d0:1b:a2:04:8c:11:
                    33:20:59:6b:c9:e9:c2:d1:a8:04:2c:6b:8c:1f:15:
                    91:75:7d:e3:b5:12:b3:82:d6:24:e0:ed:46:b2:06:
                    e8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:58:EC:F9:7A:BA:D4:3D:66:15:2E:52:61:93:8D:CB:E8:42:30:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/a5dbf212-654d-3f8d-b9e6-deab9baa5032.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl

            X509v3 Authority Key Identifier:
                keyid:56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.6.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:d2:83:ba:3b:3b:bf:dd:ec:d2:b8:a4:13:0d:0f:37:6c:d0:
         05:bd:b8:f0:69:20:3f:16:f8:60:05:e4:30:77:a9:8b:04:95:
         ab:d9:5c:a7:13:f2:f4:b9:56:92:43:e1:92:26:c0:50:a4:f0:
         ac:a0:7d:bd:2f:2a:79:96:75:a5:db:d3:ac:9e:48:13:81:2a:
         43:7f:71:66:c7:46:77:0a:8a:2a:24:e6:c9:3c:e7:d4:49:7f:
         5e:66:b4:21:57:51:7e:93:2f:0e:a9:10:29:00:1e:21:14:3f:
         c6:62:32:bf:9d:be:dd:ce:a9:50:7e:e9:1c:56:0c:f3:5e:c3:
         dd:b7:96:9b:36:34:91:5f:65:86:05:e8:51:79:01:e6:5b:85:
         36:11:ff:aa:4b:44:df:be:cf:6a:e8:02:48:c5:b5:73:09:89:
         b0:25:05:52:ef:7b:35:c7:a1:4d:cb:4d:de:c2:fa:06:b5:1f:
         05:f7:aa:2e:5c:10:ca:0c:5c:7b:a3:06:13:90:af:b1:c6:3b:
         a2:d1:1a:f7:08:32:c6:7a:72:79:d0:a2:7a:e4:2c:65:91:26:
         1f:b6:7e:64:8d:a7:d2:5a:cb:05:5d:ba:ab:5b:18:17:57:4e:
         d8:ea:d4:e1:bd:7f:85:05:51:43:50:6f:b8:02:b6:5e:ea:56:
         fd:80:30:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:56:24 2025 by rpki-client