Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a321c735-b1b8-3adf-9dad-44df0331b65f.roa
File:                     a321c735-b1b8-3adf-9dad-44df0331b65f.roa (raw, json)
Hash identifier:          jHNlnfcXeAJnQmdBKooh/+6kMdHOi0boRMiC8+LckW4=
Subject key identifier:   CE:70:21:BD:31:F9:FC:E8:68:87:F9:40:23:E0:04:9F:4C:1F:6D:EF
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285849F116B7FA38712D9AFB46FFC0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a321c735-b1b8-3adf-9dad-44df0331b65f.roa
Signing time:             Thu 22 May 2025 21:29:25 +0000
ROA not before:           Thu 22 May 2025 21:29:25 +0000
ROA not after:            Wed 20 Aug 2025 21:29:25 +0000
asID:                     834
IP address blocks:        216.24.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:16:b7:fa:38:71:2d:9a:fb:46:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: May 22 21:29:25 2025 GMT
            Not After : Aug 20 21:29:25 2025 GMT
        Subject: CN=7ddc9a5d-5f21-4da2-a9d9-f027d8aa089f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cf:d0:17:ec:93:97:0b:c0:8f:e2:e3:f9:d1:
                    e2:aa:59:6e:13:a9:19:dd:4c:ee:a0:2e:96:20:93:
                    b2:e1:96:17:0f:05:c6:58:ed:13:ee:db:bc:cc:81:
                    d7:ee:1c:a5:fc:38:0c:d5:21:50:f3:6b:d2:0a:3e:
                    ac:f9:d2:bd:0a:b3:85:1f:b2:be:13:76:76:7e:9e:
                    71:6d:02:b3:66:0a:2b:a2:fb:61:1f:9d:b0:bf:69:
                    a5:a8:85:e6:76:8f:ee:32:f8:53:0a:0d:1c:ef:f7:
                    19:3a:17:18:be:d6:ef:d3:5f:1c:47:b7:c2:8d:7a:
                    06:93:41:ed:68:ad:dd:1b:b9:47:92:e2:b3:69:ec:
                    2e:12:e4:6c:f1:6d:92:bc:dc:25:fd:25:49:3b:ed:
                    4f:c2:f6:49:8c:2c:25:88:87:69:29:4d:d8:bd:c1:
                    6b:db:e0:c6:6c:7b:ed:af:7d:c4:c7:ab:d2:fa:43:
                    f4:40:43:68:9f:dd:62:2a:18:d9:f7:cf:df:51:86:
                    9c:21:52:cb:9a:b3:d7:4b:fd:ff:a5:9b:c2:f0:d0:
                    8a:8a:14:01:44:3c:5f:57:c5:8a:1a:d1:bd:5e:4f:
                    27:06:a3:a9:38:e1:c6:67:58:51:65:5b:b0:36:e8:
                    cb:85:37:cf:df:bd:bf:51:c5:3f:26:f8:7f:7a:78:
                    9a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:70:21:BD:31:F9:FC:E8:68:87:F9:40:23:E0:04:9F:4C:1F:6D:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a321c735-b1b8-3adf-9dad-44df0331b65f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:f5:e3:18:0c:57:2d:dd:95:82:83:88:bf:76:43:5b:6e:34:
         79:3f:0c:8f:d6:f0:22:12:ff:4b:69:96:3e:ab:2f:98:b0:34:
         1d:03:2a:7a:d1:f2:ac:1a:a7:c2:07:3c:75:b3:82:b0:51:d1:
         6b:f9:1a:ef:8d:6d:a0:d2:f9:d5:68:e3:de:71:27:d2:86:48:
         f5:e4:ce:07:92:72:2b:3b:1a:73:1e:62:ec:56:6b:91:57:cb:
         60:2c:37:cc:9e:26:5f:91:e5:ee:3a:eb:aa:84:cf:ab:88:bb:
         20:b4:43:5e:04:f5:75:4d:25:02:41:a4:1e:c3:25:34:a7:06:
         0d:0e:7f:9d:66:d1:19:98:bc:06:a1:62:12:ef:77:7f:22:aa:
         8a:b9:61:21:d8:0a:13:0b:f6:82:04:9a:78:8b:49:89:5f:dc:
         0e:39:fd:3e:67:6d:50:fd:d5:d5:6f:53:44:63:19:7c:76:7c:
         4a:a5:07:5e:89:b9:b7:ca:05:f5:7c:5a:cc:fd:d6:76:7c:f5:
         d3:18:cd:29:89:41:c7:b2:24:85:24:7d:82:98:8e:16:28:25:
         f4:50:31:78:03:15:78:bf:60:af:b0:64:37:8b:0c:bc:92:32:
         a6:c7:4e:fd:7e:5a:ba:d0:49:7c:40:f1:9b:0a:0f:4c:be:82:
         22:67:b0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:58:39 2025 by rpki-client