Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/002ffc0a-8593-34a3-ae0b-58157b0fe36c.roa
File:                     002ffc0a-8593-34a3-ae0b-58157b0fe36c.roa (raw, json)
Hash identifier:          cyJOHQZBaVU3Tns5hCcs9fBMt4esTkvbHQ4KZzMW3v4=
Subject key identifier:   E6:45:DA:02:FC:B2:C2:C4:18:1F:07:62:8A:4E:B4:D5:69:30:64:C2
Certificate issuer:       /CN=24652152-0111-4df2-a7ef-61ad3cdecb58
Certificate serial:       010D0C9F4328584A2D858E8DE08709412304D460
Authority key identifier: 59:0F:20:E3:0E:B7:11:6E:4F:E7:33:BD:03:59:36:F0:2B:C5:EC:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/002ffc0a-8593-34a3-ae0b-58157b0fe36c.roa
Signing time:             Fri 13 Jun 2025 13:01:04 +0000
ROA not before:           Fri 13 Jun 2025 13:01:04 +0000
ROA not after:            Thu 11 Sep 2025 13:01:04 +0000
asID:                     13389
IP address blocks:        216.179.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/24652152-0111-4df2-a7ef-61ad3cdecb58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/24652152-0111-4df2-a7ef-61ad3cdecb58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2d:85:8e:8d:e0:87:09:41:23:04:d4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24652152-0111-4df2-a7ef-61ad3cdecb58
        Validity
            Not Before: Jun 13 13:01:04 2025 GMT
            Not After : Sep 11 13:01:04 2025 GMT
        Subject: CN=045363cf-7e52-4b1e-aaca-6e4bb792a896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:db:59:47:e7:a0:24:26:19:e2:f1:db:66:e6:
                    87:fe:9c:15:fe:25:06:07:62:f2:37:09:49:96:8d:
                    f2:90:6c:12:d5:96:17:46:41:87:40:5d:2a:f3:e7:
                    99:8c:dd:9b:7f:a2:5d:93:fa:8b:e4:d9:7f:23:48:
                    5a:cc:42:8e:0a:9c:2f:df:17:0f:b3:ff:45:5a:fb:
                    3d:79:1e:22:a5:e4:a6:81:55:cc:95:8e:cc:6f:09:
                    f3:2f:5a:53:39:59:90:a1:af:0b:af:10:aa:0e:79:
                    1b:f3:08:1e:06:d1:34:db:e3:06:bf:42:4f:92:ae:
                    6d:4a:7f:91:7f:81:eb:4f:06:97:32:3e:66:d9:36:
                    be:23:a1:46:fb:b8:18:a6:2f:95:e1:06:a1:03:8e:
                    19:93:a7:23:8d:c2:89:6f:61:11:4b:e4:e5:ad:09:
                    e8:40:20:d3:7a:b3:e3:67:1f:62:64:d7:28:b0:86:
                    1e:ef:41:30:e1:c4:56:b9:7b:5d:ae:3f:29:4a:41:
                    e2:aa:96:2a:81:ae:c7:8f:b7:96:f2:f5:ba:8d:6f:
                    70:69:e9:51:19:70:63:94:bb:45:4c:46:b7:a5:7e:
                    f3:30:cd:5d:9d:31:0c:af:1c:a2:1b:d1:74:63:97:
                    5b:28:97:7c:ab:a6:cc:05:c7:a5:2c:d3:8c:df:17:
                    a1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:45:DA:02:FC:B2:C2:C4:18:1F:07:62:8A:4E:B4:D5:69:30:64:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/002ffc0a-8593-34a3-ae0b-58157b0fe36c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/24652152-0111-4df2-a7ef-61ad3cdecb58.crl

            X509v3 Authority Key Identifier:
                keyid:59:0F:20:E3:0E:B7:11:6E:4F:E7:33:BD:03:59:36:F0:2B:C5:EC:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.179.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:bd:83:91:7e:02:e1:ee:df:16:1b:c0:95:90:d6:2b:08:dd:
         06:a8:1f:0a:f3:2f:ef:5a:eb:4b:1d:c0:34:e7:88:56:e2:63:
         db:3b:6c:6a:21:d4:c2:7c:c4:dd:ef:00:7c:b9:a6:e7:b3:24:
         f9:08:84:ac:2c:a7:db:f2:61:35:ad:03:d3:9c:ad:22:5e:d2:
         55:4c:12:70:3a:fd:6b:2d:89:f1:5d:ff:66:4b:e6:67:1c:d9:
         36:d6:aa:48:4b:a3:f4:a2:f9:f2:a7:ca:96:93:7d:0d:1f:3b:
         5f:e0:07:e4:cd:f6:d2:0e:23:63:05:4b:36:9b:8c:0e:28:63:
         a7:a5:f1:a3:7c:96:5a:78:e6:8f:bc:df:50:aa:e6:35:a1:80:
         b9:99:f6:d9:f2:9a:3d:62:4b:ac:ef:22:16:71:9c:5e:f0:9d:
         c7:1c:73:5e:09:6d:37:06:64:66:0e:48:69:68:71:d6:ea:d4:
         dc:55:da:55:58:b2:d9:8b:81:60:d5:6f:bb:86:db:e3:53:c3:
         7f:f8:03:06:68:39:7b:b5:42:54:89:7d:da:fe:88:0d:8b:bf:
         07:97:6d:32:67:14:07:42:15:43:d9:5c:62:7c:70:7a:d0:4d:
         d6:59:7f:f5:97:22:9c:8a:74:6c:21:0d:3a:0e:8f:f2:09:1c:
         e7:9b:1b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:30:33 2025 by rpki-client