Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/96377f13-9828-377f-8847-5a9e522ad52d.roa
File:                     96377f13-9828-377f-8847-5a9e522ad52d.roa (raw, json)
Hash identifier:          /n49mkiDbsBf4e74DWUuzQ1KzBttjd5pLqxzrQbL/kA=
Subject key identifier:   95:60:7E:3A:5A:68:8D:76:A7:34:54:42:0F:16:DD:6A:81:73:00:16
Certificate issuer:       /CN=0538ef3c-e342-4e27-a075-8167bc73c054
Certificate serial:       010D0C9F43285849F71524079E7742A35F77B1C0
Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/96377f13-9828-377f-8847-5a9e522ad52d.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     11260
IP address blocks:        216.167.224.0/19 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:24:07:9e:77:42:a3:5f:77:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=b9590dce-8e94-420b-b2c0-34d9e3071a1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5d:74:8a:3c:a5:8d:cd:74:c3:ab:7d:61:34:
                    7d:14:54:c0:1f:f3:5a:4a:6f:d6:2e:71:09:99:1a:
                    1b:c7:f4:9a:47:3d:fb:9a:f7:99:68:1c:ad:4e:75:
                    97:6b:b9:fd:ab:43:20:2d:86:17:57:df:7f:83:44:
                    5e:53:b4:34:e4:f1:ce:de:e3:ca:af:e0:95:d3:fa:
                    ec:00:f2:f4:da:3a:e9:a1:9e:18:17:1e:40:aa:e2:
                    79:f0:95:db:83:4f:0c:ea:06:a5:ed:c4:25:5b:77:
                    26:fc:c9:90:a4:17:b2:8c:53:d1:13:cd:0d:73:f4:
                    25:e7:55:b5:59:88:c2:97:d1:a7:e1:ba:2f:ed:5a:
                    ac:e1:47:78:6f:ff:10:7f:8e:c0:eb:4d:91:15:77:
                    71:1e:82:ac:08:ba:18:77:a0:e7:a3:32:d7:91:2e:
                    7a:e8:df:bf:18:9f:c5:b9:d1:db:f7:90:f0:ac:3a:
                    30:18:59:3b:59:bd:90:bf:0c:27:c8:1c:6d:a5:3c:
                    81:aa:24:cf:ea:62:8d:43:ce:84:23:f9:53:d7:54:
                    23:d4:28:ae:32:c1:75:dc:42:4f:49:91:2e:20:a1:
                    ae:cf:22:c4:cb:f3:ea:f5:a5:08:0f:14:a5:67:68:
                    b7:8d:74:75:51:a3:c1:15:b1:24:5f:c6:07:03:38:
                    e5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:60:7E:3A:5A:68:8D:76:A7:34:54:42:0F:16:DD:6A:81:73:00:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/96377f13-9828-377f-8847-5a9e522ad52d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl

            X509v3 Authority Key Identifier:
                keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.167.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:5c:f9:0b:be:a2:4b:93:61:b2:38:79:36:7f:89:a7:ca:9c:
         bd:41:83:1d:51:bc:d1:b4:ac:a7:77:42:b0:37:8c:0d:d5:c7:
         9f:8b:36:95:e3:b2:ca:a5:e9:80:b6:74:87:5e:35:08:b7:86:
         3f:13:8c:b1:62:5d:f0:70:43:24:54:ff:a7:0a:6e:98:a8:45:
         68:77:74:bd:6f:64:ae:c4:02:ca:77:c0:9e:b0:b7:41:49:45:
         fe:2a:50:5c:60:3e:21:b4:d3:94:04:e6:46:a9:27:aa:9e:23:
         c9:1b:f5:75:55:0d:80:75:2a:19:5d:dd:5d:34:3a:a7:cd:e9:
         b9:62:94:f7:3a:2e:0d:b3:ee:3f:9c:95:ed:68:f8:09:a1:b5:
         21:f5:69:6b:03:e7:d2:89:03:51:b6:6a:5e:b0:e4:9a:a2:8b:
         87:6e:ae:f7:18:09:0c:dd:c7:2b:2e:f4:45:7d:d7:c0:7e:fc:
         0a:a3:4d:16:1e:17:7a:b9:2f:5e:26:04:52:cc:56:12:a7:0a:
         69:ad:b6:40:c8:dc:f5:09:8e:e8:d8:d9:05:4d:d3:a9:62:65:
         bf:28:10:04:5b:b1:b9:a4:34:d7:85:30:d8:2d:36:0b:69:ef:
         2a:5a:5d:b3:2a:93:64:b1:f0:80:dc:4b:97:2d:e6:9d:de:60:
         35:86:d9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:25:25 2025 by rpki-client