Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/a7af81f7-89d0-360d-a8cc-f012798dfce9.roa
File:                     a7af81f7-89d0-360d-a8cc-f012798dfce9.roa (raw, json)
Hash identifier:          YVXQX/1NFeqE8GuQmv7sOPR9UgRsIK1sV7b8fsYbS14=
Subject key identifier:   8E:F9:60:86:74:7C:3C:56:04:06:6C:5B:44:3C:D7:DF:BA:95:46:FB
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584A2ABAEFAE7BB0F1E286CF0CB0
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/a7af81f7-89d0-360d-a8cc-f012798dfce9.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     11404
IP address blocks:        162.211.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:ef:ae:7b:b0:f1:e2:86:cf:0c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=70d712be-66f1-493e-8389-b7196793040e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8d:fe:92:1c:6c:7e:21:57:0c:85:89:db:01:
                    b4:a7:93:0a:c9:8f:c1:cd:69:5f:4a:1e:3f:b7:d9:
                    33:00:d0:df:a0:dc:36:09:29:5c:cf:a3:ec:60:76:
                    ed:e8:fe:be:ef:17:da:f4:74:ca:db:3d:f2:ff:06:
                    0c:da:74:86:f3:06:87:58:20:59:cb:6f:0c:05:67:
                    44:48:03:4f:fd:6f:2b:cf:14:c5:b8:fe:24:74:38:
                    6b:26:c5:3a:3f:e4:06:cb:b7:c4:b2:c6:a1:7c:6e:
                    b4:93:08:6f:4d:a8:0b:92:87:fc:af:49:24:c3:27:
                    b5:ec:25:fd:ee:9e:d4:b7:79:79:a4:2c:f7:f3:d5:
                    20:24:a7:26:8d:4a:e8:ff:38:ab:c3:cb:65:e0:a6:
                    ee:e8:70:cc:7a:cd:80:33:8a:e7:cc:5f:0d:e8:56:
                    ac:b4:61:f9:2d:9e:5f:de:e6:3a:f5:54:c4:13:a3:
                    7c:9e:e9:4e:e9:ec:19:c0:89:cf:bd:49:0e:e1:3a:
                    33:32:90:8c:de:0d:98:c2:f3:ce:13:12:1a:a6:4a:
                    68:43:92:b2:f3:9b:97:ad:0a:a9:85:08:ce:84:f5:
                    ff:65:54:3a:cc:eb:84:1e:66:c1:42:6a:07:c4:a0:
                    f2:03:60:0b:50:5e:be:0d:c4:9e:f1:77:28:8f:b8:
                    a6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F9:60:86:74:7C:3C:56:04:06:6C:5B:44:3C:D7:DF:BA:95:46:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/a7af81f7-89d0-360d-a8cc-f012798dfce9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:d1:ec:a4:aa:96:5c:8e:8f:5c:50:3e:01:70:0b:81:b2:28:
         99:a5:17:c6:ff:5b:d4:e9:16:fa:d0:6b:fa:5c:e4:fc:22:ea:
         ae:ec:a9:a3:15:c5:28:b5:c4:31:5b:df:3f:60:7f:82:e6:ff:
         e9:33:e1:bc:66:1b:4d:1d:b0:e2:57:3b:dc:b3:fb:38:84:97:
         b5:29:d1:37:4a:3f:29:aa:13:49:a9:b4:50:3d:cb:74:47:28:
         dc:4e:18:c9:28:7e:e0:4a:0c:c6:2c:0b:e8:5f:60:2f:f0:df:
         f4:67:11:48:9b:a6:3c:02:f6:05:15:11:16:07:e5:04:01:0a:
         9c:ec:eb:54:cc:3b:56:45:e4:42:0a:3e:88:9f:65:53:df:53:
         98:c4:78:a6:3a:0d:c9:2c:27:09:be:77:e4:ff:e4:fe:a8:57:
         f3:a6:d0:c2:c1:33:53:41:18:bd:7d:29:06:cf:a7:d5:f2:4f:
         41:3f:6b:81:2f:ce:71:f0:be:61:1e:32:10:aa:3c:34:b5:d5:
         06:b3:26:9f:9d:c2:d3:7f:c4:39:76:2a:48:45:07:41:68:3f:
         b0:2b:5c:de:98:0e:d1:ba:b0:4d:f7:ef:56:ec:fd:77:58:58:
         ea:3a:fc:f2:39:b4:e2:c9:f0:3b:3d:bb:4f:9e:0e:12:4f:6d:
         8f:cf:c9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:36:13 2025 by rpki-client