Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/1689d2e0-2698-332c-8ccf-cc602446529e.roa
File:                     1689d2e0-2698-332c-8ccf-cc602446529e.roa (raw, json)
Hash identifier:          EZ/mCSBVDjt+D5eO2vTMPoYrdyAjuhhPXwMXZC8u21g=
Subject key identifier:   75:BF:FF:4E:5F:A0:4D:92:76:4E:0E:2F:04:25:63:CB:92:2C:B6:C7
Certificate issuer:       /CN=24652152-0111-4df2-a7ef-61ad3cdecb58
Certificate serial:       010D0C9F4328584A2D858E71AFAD57A357B45290
Authority key identifier: 59:0F:20:E3:0E:B7:11:6E:4F:E7:33:BD:03:59:36:F0:2B:C5:EC:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/1689d2e0-2698-332c-8ccf-cc602446529e.roa
Signing time:             Fri 13 Jun 2025 13:01:04 +0000
ROA not before:           Fri 13 Jun 2025 13:01:04 +0000
ROA not after:            Thu 11 Sep 2025 13:01:04 +0000
asID:                     13389
IP address blocks:        216.179.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/24652152-0111-4df2-a7ef-61ad3cdecb58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/24652152-0111-4df2-a7ef-61ad3cdecb58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2d:85:8e:71:af:ad:57:a3:57:b4:52:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24652152-0111-4df2-a7ef-61ad3cdecb58
        Validity
            Not Before: Jun 13 13:01:04 2025 GMT
            Not After : Sep 11 13:01:04 2025 GMT
        Subject: CN=1339bd20-a20c-4b7e-82a1-d0cb9fef488b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8f:70:c8:1e:fb:f4:2e:23:61:1e:e1:17:c6:
                    ec:4d:ef:46:61:88:ef:39:0c:30:2a:f6:46:ea:61:
                    d2:3f:93:7c:45:f6:4c:12:65:85:ef:b8:63:e2:52:
                    a7:9f:3b:fc:2a:2f:a2:fc:24:67:c4:01:a1:02:08:
                    01:5e:df:a2:0d:aa:aa:00:15:90:c9:3a:8f:4b:06:
                    f2:f9:27:a8:71:07:cc:b1:ba:9e:fd:f1:0c:a6:68:
                    0f:3b:99:d9:a0:90:43:e1:0e:1c:21:3f:bf:14:8e:
                    dd:9d:0b:31:36:30:90:5b:b6:8c:0a:33:0f:cd:ce:
                    94:12:ff:46:a0:e7:0d:b8:1f:0e:fa:2d:e3:6a:2d:
                    53:ab:07:91:5f:c5:12:16:e7:87:bb:85:49:b3:ad:
                    93:80:ad:1b:b5:c6:10:cc:ff:30:ff:ab:e2:8a:b8:
                    ba:2e:bb:46:b3:08:11:cc:55:65:8b:b9:05:01:e5:
                    44:38:ee:72:60:75:ff:17:8a:af:c0:d2:d2:57:a0:
                    d4:15:e2:ff:03:bc:93:2b:ae:f5:f2:e4:cc:37:ca:
                    0b:77:99:be:e7:1a:2a:7a:be:40:2b:71:0b:1a:54:
                    ce:3f:3a:a6:33:35:b6:38:9c:85:06:59:22:fa:3c:
                    5d:01:2f:b1:df:86:28:a7:99:0d:5e:09:47:66:fa:
                    fe:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BF:FF:4E:5F:A0:4D:92:76:4E:0E:2F:04:25:63:CB:92:2C:B6:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/1689d2e0-2698-332c-8ccf-cc602446529e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/24652152-0111-4df2-a7ef-61ad3cdecb58.crl

            X509v3 Authority Key Identifier:
                keyid:59:0F:20:E3:0E:B7:11:6E:4F:E7:33:BD:03:59:36:F0:2B:C5:EC:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.179.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:7d:3d:b7:91:e7:b3:b7:12:e2:5d:25:a6:4e:d1:4c:35:15:
         9d:ff:f6:d6:cf:2f:72:2c:af:2f:76:ac:84:cf:01:c3:f1:a6:
         0f:ac:d3:23:f4:a6:ea:63:b2:5e:7f:f4:29:c9:76:54:b8:e9:
         5d:e6:b1:0c:b4:d1:82:06:9a:33:44:5d:97:35:dd:5a:c8:73:
         47:0b:60:d7:c2:22:85:5e:42:c3:5a:63:f3:7e:f7:79:47:20:
         b4:45:6a:6f:fe:ae:e3:f0:da:e4:eb:a1:d4:de:a3:68:a5:e1:
         fc:8f:e8:ea:25:1f:b3:90:29:d0:51:6e:01:bb:41:b8:b1:b1:
         4d:6f:dc:d0:f4:28:b9:05:14:59:ed:79:a8:a0:94:54:38:7e:
         07:f8:f8:20:65:81:eb:de:4a:aa:b3:3c:72:4a:e7:a4:8f:df:
         f1:79:17:74:db:e9:45:70:66:c9:43:bd:73:6c:60:28:46:29:
         f9:c7:d8:8d:84:bb:16:ec:63:71:8e:29:f9:2e:78:c9:18:a8:
         13:40:5d:95:99:0b:05:e5:18:20:09:ad:79:c1:d2:03:e4:8c:
         73:a4:49:1e:bd:09:36:14:2d:76:f9:69:4c:00:0c:85:79:e6:
         39:03:bf:88:ed:9e:d5:c7:a8:e4:1d:01:b6:22:46:ec:46:9d:
         de:5f:88:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:40:31 2025 by rpki-client