Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/3452aa2f-4b9b-31d3-b07c-c2ea3c22d739.roa
File:                     3452aa2f-4b9b-31d3-b07c-c2ea3c22d739.roa (raw, json)
Hash identifier:          hsaOvkld7aJlqrPu6KLL1UydR2fdSd3qxXJAXU0Ju/w=
Subject key identifier:   1B:BA:5F:62:EE:D6:E7:C1:B3:81:1E:19:E1:CC:F2:4D:B4:8A:EB:85
Certificate issuer:       /CN=0538ef3c-e342-4e27-a075-8167bc73c054
Certificate serial:       010D0C9F43285849CE9A66FEF5CE66358BE45A80
Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/3452aa2f-4b9b-31d3-b07c-c2ea3c22d739.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     11260
IP address blocks:        216.104.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:66:fe:f5:ce:66:35:8b:e4:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=69e8f130-88f3-441f-ad78-6eed79cc65da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e2:19:5b:e1:29:d5:b1:23:c3:64:33:d4:ac:
                    8e:af:a0:b1:46:a2:0d:d1:f0:9a:c1:4c:59:c2:30:
                    8f:41:cc:93:b7:ac:67:60:70:f4:48:46:23:e7:8e:
                    bc:cd:0d:23:5b:6b:c1:9f:99:94:bb:f2:bf:1f:0b:
                    da:4b:f6:c5:29:66:20:18:77:ee:0c:c4:30:df:1b:
                    9e:e5:7c:b0:a0:5b:69:4a:b4:36:9c:a9:56:81:48:
                    4e:43:59:da:aa:fe:55:43:ac:4c:5a:b5:5b:e8:24:
                    a8:5d:ab:8d:39:90:d4:81:34:58:56:5c:50:27:74:
                    07:83:79:53:5f:da:9b:12:6a:28:b9:0e:eb:2c:f2:
                    db:18:5a:9e:60:5b:bf:57:39:17:f6:a0:6c:42:c5:
                    bb:23:e8:8a:ae:51:54:45:62:c2:89:a5:c1:39:07:
                    4e:ba:33:ca:34:72:9f:27:a9:38:55:c7:30:3f:60:
                    eb:da:a6:1d:76:a5:28:44:73:ef:74:c7:19:91:32:
                    5c:29:a6:7a:ac:94:df:34:ec:bc:f9:ac:c3:7b:32:
                    60:98:9b:22:0a:cb:2d:da:c0:46:82:22:8a:cd:ce:
                    76:ec:06:84:99:87:81:a6:cc:ba:1a:14:7e:31:27:
                    02:77:71:c6:6a:81:3b:97:25:1a:d0:5d:f0:44:11:
                    f6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BA:5F:62:EE:D6:E7:C1:B3:81:1E:19:E1:CC:F2:4D:B4:8A:EB:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/3452aa2f-4b9b-31d3-b07c-c2ea3c22d739.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl

            X509v3 Authority Key Identifier:
                keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.104.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:57:1c:0a:65:8c:8f:37:a0:89:42:b9:5c:2a:7a:2b:af:ea:
         39:96:72:b0:0a:8f:ac:c6:31:93:df:2e:4e:93:6a:47:9d:cb:
         12:89:b9:a5:f5:63:18:27:6d:90:f2:17:bf:db:30:7a:44:89:
         23:67:47:27:32:8a:0d:eb:d5:a6:83:f5:c3:27:c8:7c:00:8a:
         42:29:58:00:4f:ab:07:8e:99:8e:86:48:78:31:a1:63:2c:9c:
         95:df:70:c1:2b:08:3d:7f:75:56:6c:1b:28:98:50:f8:75:b2:
         24:e5:a0:77:af:fe:f7:4a:7d:d9:30:2f:70:fd:4c:43:f8:cb:
         90:10:96:e7:6c:af:4e:b2:4c:05:21:02:5e:20:b3:29:9d:c1:
         e3:ec:d5:7f:90:2a:17:13:0d:6c:10:84:38:a2:ad:ec:6d:24:
         72:2d:da:ba:19:58:95:48:8e:3e:38:19:85:d9:76:71:5c:76:
         06:d4:07:d0:f8:89:3c:96:65:db:01:35:ce:05:a4:94:06:97:
         55:0b:b9:3f:61:64:f9:62:d6:19:84:6f:e4:a9:cb:5c:cd:62:
         37:fe:75:f6:82:5b:ca:bb:97:47:9a:3e:d5:fa:60:a5:de:be:
         a3:05:76:10:4d:f3:b4:f1:70:32:e4:27:0f:ad:51:2c:10:85:
         74:08:d9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:43:36 2025 by rpki-client