Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ff31b7a2-5705-3d73-9ef9-3e064514bd08.roa
File:                     ff31b7a2-5705-3d73-9ef9-3e064514bd08.roa (raw, json)
Hash identifier:          j1cuFhfyM9gcGWkNi9z1EwwvWMeFyWUrqXagfCyBr64=
Subject key identifier:   0D:05:8F:50:BA:45:4B:F7:5D:32:24:AE:83:C5:D7:F7:26:4F:89:F6
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285849DC8FB1B4A48F7590B557C300
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ff31b7a2-5705-3d73-9ef9-3e064514bd08.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     21821
IP address blocks:        216.255.100.0/24 maxlen: 24
                          216.255.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:b1:b4:a4:8f:75:90:b5:57:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=fc2850e4-f2f7-4179-9b1d-c91ee1ae9872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e3:ad:47:07:e2:f3:ff:c0:05:68:10:d3:95:
                    71:db:8f:1b:78:ff:46:76:c9:4e:ce:d0:f6:c8:53:
                    42:ac:40:94:7f:84:00:f2:cd:41:a4:4c:cf:10:52:
                    ce:f4:ce:4a:01:f4:d7:82:e4:48:22:bb:d2:9a:bc:
                    1e:b4:00:fa:a8:28:b8:d2:29:84:26:ab:bb:6b:85:
                    d9:79:e9:4d:c7:0e:b5:b1:d5:d2:8a:c1:80:33:68:
                    58:7f:de:95:9b:50:60:4b:6f:cb:72:84:db:f0:e4:
                    40:69:82:77:76:89:eb:2e:88:86:20:38:15:50:e7:
                    04:4f:7e:c3:95:c0:c6:13:95:c9:3e:a6:91:d3:61:
                    a9:13:00:18:b7:14:91:40:10:01:6a:29:49:b8:c8:
                    9d:d4:89:6b:3b:9e:09:4c:3b:fc:ae:8a:f5:fd:01:
                    6b:9a:c1:76:ce:49:52:0b:b0:4e:0c:2d:a5:70:79:
                    f0:3e:5f:fb:c7:ae:ee:86:56:de:1b:9e:ca:6c:3c:
                    39:07:24:6d:c5:09:83:cd:d0:d9:90:6e:59:1d:9c:
                    7e:ba:83:aa:27:57:b1:74:95:3f:29:f0:4a:62:fb:
                    67:d4:ee:be:67:ba:e1:a3:b0:8f:3d:65:c2:bf:35:
                    19:ae:43:3a:34:b9:7b:8e:5e:d3:41:bb:a3:1e:50:
                    89:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:05:8F:50:BA:45:4B:F7:5D:32:24:AE:83:C5:D7:F7:26:4F:89:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ff31b7a2-5705-3d73-9ef9-3e064514bd08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.255.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:30:1b:4f:f7:d2:dd:c9:61:5e:3a:af:1a:26:29:46:20:4e:
         85:9a:fc:de:4f:a8:b2:1b:a6:87:93:20:4a:74:b9:ab:eb:88:
         27:51:22:18:91:36:24:a2:ce:7c:ab:27:fa:d7:81:76:3c:1d:
         91:26:f7:b3:64:d5:5c:c3:fe:af:ae:7b:34:f2:b1:cc:6e:8f:
         20:56:d0:c3:47:4c:b9:cb:21:e9:37:46:fc:b1:d0:1f:4c:ba:
         60:5d:37:08:0f:db:53:d0:20:90:eb:f2:fa:8b:13:2c:61:f6:
         29:18:7e:46:1d:56:74:1f:4a:ee:73:fb:6d:f3:c4:6a:04:1f:
         58:1b:1f:fb:9b:ed:bb:d9:01:36:36:e8:4b:56:9a:ba:15:81:
         c4:f7:66:7f:c6:b7:04:78:cd:d3:a8:32:91:df:a9:db:61:41:
         43:85:5c:cf:df:85:e0:49:2c:de:5b:eb:d4:1c:c1:dd:1c:d6:
         db:c1:9c:77:df:94:a2:04:d0:6b:e4:78:f7:4b:0c:e7:19:80:
         29:c4:b0:90:88:93:37:d5:3b:30:e3:a0:9f:e1:f2:6e:c8:62:
         8f:db:da:47:85:28:71:8f:b0:6c:5e:0c:dd:1b:1a:1f:01:08:
         39:67:ce:1d:ca:77:a8:dd:67:83:37:77:16:09:2f:cf:06:3c:
         66:10:e0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:07:34 2025 by rpki-client