Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/f40e060b-2738-3aa3-9b1f-6c6b56e9d1cc.roa
File:                     f40e060b-2738-3aa3-9b1f-6c6b56e9d1cc.roa (raw, json)
Hash identifier:          AzM1jjl8JpBli3W3G9VygJhOzthIOOzQLz9PwDVcJVM=
Subject key identifier:   C5:3D:DA:56:A4:22:72:BD:8E:BB:94:A9:13:0B:AA:88:FA:F6:3A:C7
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584A2ABAEB46EA7F888610F61D60
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/f40e060b-2738-3aa3-9b1f-6c6b56e9d1cc.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     21859
IP address blocks:        216.185.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:eb:46:ea:7f:88:86:10:f6:1d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=f8c0704e-ce8b-4910-aa3a-169471d32370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b7:d5:b4:2b:0d:48:2f:f5:60:c0:88:a2:72:
                    98:32:59:a8:c0:6a:62:2c:65:d2:82:64:68:96:f0:
                    3c:19:6c:29:1f:47:57:28:d5:7e:ef:0a:c5:91:43:
                    07:34:ef:5a:66:07:7d:41:c0:b2:de:8d:82:b4:26:
                    8e:98:53:32:24:1b:f0:c8:51:85:1b:6f:a3:58:15:
                    50:e6:92:1b:1e:fb:d7:00:8a:1c:57:f5:83:ca:60:
                    fd:a9:b1:3e:a6:af:e8:87:3b:d6:1f:9a:29:79:8c:
                    de:bd:dc:a7:13:a3:5b:46:a0:eb:cb:68:a2:67:ca:
                    5b:0d:ba:24:26:f4:62:ca:d7:a6:e9:25:4f:b6:6d:
                    f6:f1:0e:fc:82:03:71:d1:9b:f3:bb:2d:30:ad:26:
                    6d:40:14:64:d8:22:26:91:8b:a8:b8:0b:e6:d0:2d:
                    f6:5a:34:e6:e2:81:3d:3f:86:a3:d8:aa:68:33:3f:
                    02:16:b2:db:b8:61:ab:08:3c:ff:d0:06:f6:d3:dd:
                    08:1e:ee:e7:bc:b8:32:ac:df:d1:c7:7e:93:ef:4a:
                    05:45:3d:15:f0:51:1b:da:ac:7d:05:b5:9d:ec:0b:
                    cb:2a:95:e1:f4:91:8c:a4:d8:b3:08:93:12:87:9d:
                    c0:0e:aa:ff:46:e5:af:eb:06:64:68:6a:ec:0d:62:
                    43:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3D:DA:56:A4:22:72:BD:8E:BB:94:A9:13:0B:AA:88:FA:F6:3A:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/f40e060b-2738-3aa3-9b1f-6c6b56e9d1cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:ff:00:ed:25:6d:34:73:da:1e:4e:d1:a1:ea:40:15:f2:18:
         ea:67:b1:cd:74:9f:b7:d3:81:a2:dd:67:23:75:1c:a9:d6:dd:
         da:29:bc:de:8a:22:31:32:c5:54:bc:29:14:5c:8f:8a:58:18:
         ea:96:9a:d4:ec:dd:c9:1e:4a:21:9b:97:ad:8d:d4:fb:1a:51:
         88:bc:dc:22:6e:02:ee:5f:1c:aa:29:aa:c8:d0:03:bd:68:14:
         8e:79:95:4f:f1:45:d9:d2:5d:9b:f5:0a:39:5d:4c:65:6d:54:
         86:5b:1f:67:8b:fd:98:66:73:3a:44:75:39:c6:87:8c:b2:5e:
         97:51:4e:00:c0:dc:91:bb:43:a8:e5:99:31:78:cd:de:a9:3b:
         88:ca:49:61:a2:08:16:fa:df:3a:cc:94:9c:76:4d:11:44:9b:
         4f:37:d3:ca:46:17:26:75:3e:d0:af:3d:08:15:23:be:e4:19:
         2c:7d:85:da:c4:60:a2:96:9a:79:ec:89:59:c5:7b:e2:29:30:
         53:25:c2:19:37:a6:73:9b:f8:ae:4e:ed:bc:76:b5:ae:99:72:
         fc:d1:46:d3:32:aa:cc:7d:8b:a6:b7:e6:76:aa:24:4d:c7:29:
         c0:ba:44:f2:6f:ce:24:75:3d:ab:2a:56:8f:94:de:d7:d9:6c:
         d2:5a:02:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:06:46 2025 by rpki-client