Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/5f86ea44-7735-380c-986a-0ad1ba7cb1c4.roa
File:                     5f86ea44-7735-380c-986a-0ad1ba7cb1c4.roa (raw, json)
Hash identifier:          nhqtz+1bVOo4mrDulTIc8EnqG9ko7XyLYjnVTOaAlqI=
Subject key identifier:   C8:E8:06:E0:03:6C:78:C1:DA:F7:5A:8C:ED:43:42:24:5D:53:73:F2
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F43285849E22526BD24311538908FA380
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/5f86ea44-7735-380c-986a-0ad1ba7cb1c4.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     11260
IP address blocks:        199.255.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:26:bd:24:31:15:38:90:8f:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=9d0669e6-a7ab-447c-8749-ca4a6d7d308f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e0:81:94:f8:4e:d7:1f:d0:82:cb:72:d2:0f:
                    93:0d:80:c5:02:82:b0:ef:b4:2d:91:dd:b3:6f:be:
                    06:62:6b:7e:d8:4e:08:3b:95:d6:9e:25:e1:6b:0e:
                    86:2f:ad:73:9b:8b:49:f2:2c:73:66:fd:ed:71:1e:
                    a0:52:7f:85:0c:79:d9:05:13:5d:60:9c:ba:5c:ff:
                    b9:69:5f:59:0e:09:53:22:ee:de:3f:d4:e6:89:21:
                    f8:71:ab:cf:88:1d:6f:e9:d8:11:f3:26:a5:d8:b4:
                    72:5c:92:e3:11:eb:55:04:57:97:3e:51:08:fb:f3:
                    63:e9:7c:ba:5a:66:25:df:5c:51:25:e0:79:8e:6a:
                    2f:b2:9d:55:8c:9e:bd:8b:f4:be:f2:4d:05:96:2c:
                    bc:12:d7:2d:0c:7c:d4:04:d7:af:9c:d9:75:34:05:
                    94:60:a4:9a:b7:72:d6:9f:ef:0a:40:8d:9a:48:a6:
                    94:b8:83:93:84:e8:1a:93:8a:15:a7:af:1e:cf:e6:
                    50:7c:65:78:d4:d9:6f:b5:b6:2f:b1:28:dd:37:c4:
                    c3:4a:fb:54:86:a4:4c:62:c0:3a:07:6f:af:ce:62:
                    0e:a1:8c:d8:d1:63:67:e5:27:20:96:07:bf:fa:d2:
                    54:cc:d1:c0:bc:bf:32:5f:33:cc:90:72:0c:fa:40:
                    0c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E8:06:E0:03:6C:78:C1:DA:F7:5A:8C:ED:43:42:24:5D:53:73:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/5f86ea44-7735-380c-986a-0ad1ba7cb1c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:98:05:8d:50:d5:f0:b1:4a:e6:3b:53:9d:e9:c9:62:74:f0:
         21:11:dc:9a:bb:a2:16:b4:7d:12:90:1b:eb:64:8f:9d:b7:8f:
         80:51:d7:52:8a:13:ac:b7:b1:07:e5:e9:f4:05:46:46:1a:bf:
         14:e1:7d:c9:b8:24:72:31:cf:97:e7:f3:4c:46:15:06:85:51:
         45:de:b3:a3:64:54:12:d7:a7:42:b3:4d:54:b2:68:9a:fe:c6:
         0c:ef:88:22:2b:a1:0a:3b:ab:90:7f:fb:37:6c:28:72:21:d5:
         2b:ff:4f:00:19:fa:4d:9d:39:8d:ab:7a:3e:8e:65:11:97:2d:
         1f:07:d9:8f:81:59:48:e4:e0:52:6e:b2:df:5e:a7:cc:16:e3:
         39:fc:61:e7:26:a6:8c:c1:9d:3c:46:44:ee:66:23:0f:2c:6d:
         fa:e6:ce:8c:ac:1a:36:8c:60:fb:50:bc:26:94:1e:7c:ba:bb:
         61:27:a1:bc:98:32:05:12:f9:91:0b:8f:46:18:5e:85:17:53:
         cf:7d:0a:04:1a:c8:0f:1b:aa:36:f7:49:07:df:bd:8e:86:35:
         34:5f:01:1d:cf:19:76:32:4b:df:a5:aa:b5:d4:cd:3e:af:1d:
         10:df:66:53:ed:5e:a7:32:b4:2b:b7:2c:25:48:e4:fd:b8:20:
         64:ea:ed:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:40:59 2025 by rpki-client