Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/7cd44315-8fe6-3708-b097-b929bd292f20.roa
File:                     7cd44315-8fe6-3708-b097-b929bd292f20.roa (raw, json)
Hash identifier:          BNhGM6Upkqe7nYLC7sjHzhfp3BBnF8xa9FJBEjpB5Ek=
Subject key identifier:   24:4C:FA:1A:D3:A7:9D:B0:09:CE:50:A7:12:01:AA:57:D4:C3:B6:09
Certificate issuer:       /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
Certificate serial:       010D0C9F43285849FF7511ED5EA66D92A0A66F80
Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/7cd44315-8fe6-3708-b097-b929bd292f20.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     400238
IP address blocks:        216.87.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:11:ed:5e:a6:6d:92:a0:a6:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=6e64c91b-f648-4762-bc44-5cc38a15e6f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f3:ad:ba:d0:3a:77:14:cd:b2:41:c6:8c:d7:
                    95:0e:d2:02:d0:4d:77:fc:cf:6d:52:17:0f:87:c8:
                    8d:a0:07:9a:b1:fa:06:ab:bd:35:13:71:59:22:a2:
                    d7:26:24:38:bf:99:4a:82:1a:f9:57:9b:97:eb:a5:
                    33:fc:a0:5c:82:d3:12:4d:05:e8:a7:80:9e:a6:cd:
                    37:6d:4c:2e:70:27:76:45:3a:a3:d1:83:12:f2:be:
                    e4:f6:52:c1:7c:46:2e:9c:63:ed:5a:62:0b:ac:0c:
                    c5:5e:6c:4c:8d:1e:21:83:41:ef:7c:49:59:f5:48:
                    69:be:93:4c:8a:a2:5e:cb:be:7d:6c:a1:02:6d:e2:
                    13:b9:72:8a:ed:59:35:85:4b:8c:89:74:3b:bd:fb:
                    73:30:c1:37:d4:c3:56:5e:59:ec:57:fb:15:d1:f1:
                    85:2a:00:09:cb:1c:c7:fb:77:04:66:10:22:bd:a4:
                    ec:6f:ee:00:bc:ef:1a:11:fa:3d:06:ea:fa:f8:d5:
                    0e:2e:50:82:8b:1d:b5:d8:d3:7b:6f:4a:fa:5b:84:
                    05:9e:38:08:6d:b7:c3:02:ca:a8:d4:7c:9b:4d:bf:
                    b4:f6:eb:02:64:2e:cc:6e:1d:4d:46:a1:d7:8b:c2:
                    1b:41:cd:84:c2:a5:d3:1d:88:5c:4f:95:86:52:7f:
                    ee:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4C:FA:1A:D3:A7:9D:B0:09:CE:50:A7:12:01:AA:57:D4:C3:B6:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/7cd44315-8fe6-3708-b097-b929bd292f20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:51:7b:c7:04:59:c3:cb:cc:38:9d:0b:f5:f0:31:f5:ce:41:
         b9:0d:cf:2f:e0:99:1c:fa:8f:ba:c6:df:a3:5b:f7:c1:9a:0e:
         80:33:92:a8:ae:29:d1:77:a1:04:f4:e4:51:52:bd:03:a5:19:
         cf:ab:4b:28:15:fd:94:f4:99:11:d3:82:31:75:df:82:eb:ef:
         50:d4:2d:ff:df:2b:30:83:80:d9:ac:09:1a:d9:dc:64:7e:0e:
         30:24:4c:af:7b:08:93:78:1b:b3:72:66:a6:34:71:8a:47:8c:
         ec:60:5e:1b:cd:fb:60:2c:ce:3d:21:6c:38:b4:36:9e:64:81:
         8e:c5:3d:95:f8:a5:8a:b7:d5:9b:7f:4f:88:7e:3d:24:52:12:
         63:9d:3c:b6:89:95:55:41:82:e1:fe:20:59:10:f4:2b:3e:a8:
         87:1a:fc:fd:ae:4f:b9:76:13:c1:8f:fe:60:7b:d6:91:88:f9:
         19:1c:06:f3:be:f7:64:a8:ef:c7:0b:f7:49:57:03:17:e8:2a:
         e0:3b:23:f9:65:15:2c:13:e8:49:51:84:26:64:76:15:f9:98:
         60:12:1e:02:ae:3d:7d:a0:3c:c0:45:81:e5:a1:0c:47:43:1e:
         f1:45:18:a7:12:bd:55:87:ea:dd:b4:7c:53:23:5f:57:bb:83:
         ce:63:7b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:09:50 2025 by rpki-client