Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/a3d3d07f-7e7e-3cd2-991b-136fb6c37bcb.roa
File:                     a3d3d07f-7e7e-3cd2-991b-136fb6c37bcb.roa (raw, json)
Hash identifier:          Yjz4pDROnPXRwlXGONqzGh/54Ug6dzWaDK7HVBGwOMs=
Subject key identifier:   55:E2:23:AB:47:4A:B9:CC:06:2A:30:36:E5:80:E5:D6:71:FE:73:F4
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F4328584A093A9CC61E0E5E5B524C3880
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/a3d3d07f-7e7e-3cd2-991b-136fb6c37bcb.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     64251
IP address blocks:        205.213.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:9c:c6:1e:0e:5e:5b:52:4c:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=903e9ad9-a64f-4ad0-bbbc-daf91594411f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:83:20:e8:de:9a:9c:ce:36:d1:71:20:0a:90:
                    03:bb:0d:79:58:34:cd:56:f9:dd:64:f5:39:1f:9f:
                    80:15:36:c9:df:36:53:87:bd:4e:2a:25:a1:4f:0e:
                    65:43:d6:a7:ed:47:b5:3d:40:ae:ab:32:73:e5:65:
                    0c:e4:d4:e2:46:62:a5:74:96:74:76:40:2e:76:fb:
                    c2:d9:44:ef:96:10:3f:01:41:8e:be:36:ff:94:51:
                    15:c6:ff:8e:2e:29:7c:cb:02:a1:56:4a:ac:a6:67:
                    70:9a:e7:40:b9:5c:69:0c:d2:fb:91:74:61:52:01:
                    92:b2:01:7c:95:35:5f:85:64:35:7a:30:1b:83:59:
                    d2:18:ec:86:ff:bb:e7:1d:e2:aa:56:02:98:05:df:
                    2f:62:63:cd:e5:d9:6c:d1:11:7f:42:13:dc:15:34:
                    0f:63:79:0d:ab:e0:00:51:9b:e2:89:6f:93:62:0d:
                    a2:1f:2a:99:c5:5c:c1:c2:1e:3a:7a:f1:f7:90:73:
                    07:b4:75:7b:7a:96:da:55:11:af:04:7a:2e:a8:88:
                    d0:a6:dc:9b:96:d7:5f:d8:c2:66:f0:07:29:85:de:
                    69:51:b3:ba:70:ae:92:5f:b3:ec:8d:0c:bc:ec:72:
                    53:3d:e2:4b:44:54:3f:63:7d:ab:3a:83:b0:53:b6:
                    5c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E2:23:AB:47:4A:B9:CC:06:2A:30:36:E5:80:E5:D6:71:FE:73:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/a3d3d07f-7e7e-3cd2-991b-136fb6c37bcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.213.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:95:9b:ea:85:f2:c8:ea:92:c6:c7:07:57:18:88:98:d3:81:
         e9:e4:c3:a5:83:32:3b:71:c2:5c:4e:59:16:e1:56:bb:7a:d5:
         de:75:83:0a:dd:9f:9e:e2:98:3e:ef:f1:75:7c:ad:cd:01:e5:
         2b:fe:7f:a1:94:9f:e5:21:93:a8:c8:32:2e:8b:a3:21:6f:a7:
         c9:75:97:39:ac:80:48:5a:f5:fe:50:fe:08:2a:3e:e4:f9:67:
         06:f4:fa:3b:0d:16:ca:5d:3b:5c:3e:56:d0:93:36:7b:18:e1:
         1d:72:66:7b:a2:72:8f:97:67:5e:e3:25:25:88:90:c9:9b:b7:
         7a:9b:11:b6:3d:40:29:d7:b0:e9:bc:0a:6c:d6:ac:70:24:6c:
         1c:8c:65:17:7b:40:5d:85:0b:a8:54:af:6b:81:c2:b6:7e:f9:
         4a:33:24:77:5a:1b:6b:19:3d:d8:16:ba:69:d8:5a:29:cd:f6:
         c9:d9:8b:49:39:22:c2:0c:17:da:9a:62:7f:e4:99:04:fd:f3:
         f4:37:13:27:08:bc:0c:c2:e0:7e:d7:a8:1d:97:b4:75:16:73:
         ca:6c:6f:1b:a0:52:91:d5:96:90:c8:ca:7f:6d:bf:55:86:30:
         31:7a:25:00:31:7a:00:bb:11:0c:4e:2a:4b:2c:1d:a4:b0:22:
         fe:e0:86:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:16:37 2025 by rpki-client