Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/de86099d-1376-3261-90ab-da88c15a123d.roa
File:                     de86099d-1376-3261-90ab-da88c15a123d.roa (raw, json)
Hash identifier:          4zoS/a+yvq0rqkd4xKpvFlL6jQqKD0YdgyQ4GQaMqfg=
Subject key identifier:   B6:38:96:18:ED:94:BD:C8:5A:E8:B0:C6:88:11:68:CA:54:F3:2C:0F
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F43285849A4BAC3888DD5E85B5EC20C40
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/de86099d-1376-3261-90ab-da88c15a123d.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        216.252.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:c3:88:8d:d5:e8:5b:5e:c2:0c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=a685981a-2fde-4740-99ab-99fb41e4d4e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:df:3f:82:16:e5:1e:e4:f9:b3:74:41:f0:03:
                    b0:26:8f:92:7f:24:77:98:75:1f:42:9a:61:4b:ff:
                    5c:c6:5a:47:29:78:56:05:cf:8c:3c:85:07:d2:2e:
                    2a:3b:05:b6:88:95:c9:f9:74:1c:4c:ea:3e:aa:1d:
                    33:ef:84:3d:53:a6:75:42:f4:9d:5e:92:99:4f:d4:
                    e1:48:6d:36:c0:fc:2c:19:00:1f:53:3f:43:51:c4:
                    d6:c0:53:1d:60:9e:21:9c:3a:af:ca:ac:e1:c9:53:
                    3b:11:70:b0:65:03:15:c9:ca:f5:f5:b5:3a:9a:be:
                    ff:af:bd:96:83:3d:1d:fd:fe:e1:1d:30:7b:96:db:
                    3b:86:f5:81:b0:4e:e3:94:0d:f7:89:e3:4d:ec:ac:
                    2a:cd:48:86:9d:83:3d:5b:f3:9b:0c:36:8f:c7:34:
                    de:30:39:37:2d:2a:24:72:0c:39:6d:31:10:4d:2b:
                    f1:f3:b1:f6:9c:03:c8:5b:16:13:7b:60:1f:36:f4:
                    73:68:ff:57:14:e0:64:f9:33:84:0a:4f:52:f1:f7:
                    39:e8:80:56:72:d5:a0:d8:78:8f:28:87:43:03:25:
                    b6:37:af:07:9d:1f:66:47:10:c4:be:53:15:a5:28:
                    e2:83:c9:e7:07:dd:58:47:5b:5f:ac:95:e3:5f:ed:
                    f4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:38:96:18:ED:94:BD:C8:5A:E8:B0:C6:88:11:68:CA:54:F3:2C:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/de86099d-1376-3261-90ab-da88c15a123d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.252.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:b4:f6:3f:f6:0e:fe:ff:79:5f:f0:d2:80:da:4e:02:46:d9:
         1f:1a:0a:7c:14:41:40:ef:38:9f:db:bd:6c:97:2c:eb:fe:6a:
         c7:2f:bc:76:f9:92:c2:87:64:42:f9:54:8f:d1:ba:5d:0d:a0:
         63:a4:f2:0e:de:da:b2:4e:39:c3:e5:90:bf:ac:28:0f:02:1a:
         57:04:66:72:73:9c:7f:ac:4d:6d:69:28:cf:a8:ad:d6:1f:59:
         bd:56:75:ce:ab:f0:13:00:d2:83:6a:fc:06:10:3d:dd:80:06:
         a3:6d:3b:bf:a6:f0:f3:d6:fb:3e:50:d8:f6:0e:36:95:21:4a:
         2c:47:de:95:dc:80:37:d6:1e:99:0b:a1:de:a2:73:23:8e:c5:
         06:c1:6e:1d:51:8c:b9:5d:6c:ba:b8:11:70:c4:68:d8:6d:83:
         52:c3:02:68:18:d6:d3:8d:92:56:30:98:8d:9d:2f:64:7d:5a:
         fe:e3:ad:c2:f4:24:9a:b4:6e:1b:ff:c5:ce:7e:32:21:8d:8b:
         5b:66:f1:da:79:d4:69:89:b1:70:e3:0e:3a:de:aa:8e:33:74:
         c6:dc:e3:de:75:a0:d8:32:8a:43:a6:57:77:05:1d:0f:19:dc:
         0e:34:4c:fe:4d:58:b7:19:a3:17:c3:32:33:61:81:19:4e:eb:
         c0:05:b8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:08:20 2025 by rpki-client