Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/099a6177-074f-3801-a40d-53cbd0937cc0.roa
File:                     099a6177-074f-3801-a40d-53cbd0937cc0.roa (raw, json)
Hash identifier:          BBInhF1F1bCONSCjKxl7aFKOIlt7Exh+UChAfa+ZA90=
Subject key identifier:   64:E2:7C:93:2C:EC:F2:DC:60:F5:77:47:2B:C6:41:4A:1C:F1:24:EC
Certificate issuer:       /CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b
Certificate serial:       010D0C9F432858498769B6981A7F320558099680
Authority key identifier: 90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/099a6177-074f-3801-a40d-53cbd0937cc0.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        216.205.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:b6:98:1a:7f:32:05:58:09:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=4563b23d-65b6-40ca-887a-2e9ef45461bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:42:90:2e:bf:8b:9e:ed:91:8a:5c:c2:f1:16:
                    9e:e6:83:ea:9a:ef:48:bd:85:b7:33:bf:92:6c:16:
                    b4:c8:71:0a:93:99:47:3c:6b:e4:32:e3:3e:1f:bd:
                    bd:dd:79:4c:ed:62:3d:89:6b:a3:68:00:66:6c:4f:
                    ab:fc:d6:2a:8d:91:c1:fe:71:47:d1:cc:2b:98:93:
                    36:f8:6c:8e:88:91:3e:1c:1f:cb:d0:8d:eb:cd:aa:
                    64:c3:ea:b6:d6:fe:6e:ed:ef:0d:31:0d:9a:ae:95:
                    d6:9d:34:15:99:f3:b8:61:82:82:c8:f8:8b:04:1d:
                    86:0d:0e:c3:c8:e4:a3:44:96:87:69:fa:1b:f6:6f:
                    09:c3:78:dd:75:8a:29:36:2c:62:27:18:6e:87:0b:
                    db:63:62:8d:d6:5d:fc:9e:a6:93:5e:cf:2f:1c:1e:
                    99:0d:4f:93:74:7e:b7:bd:c1:1a:ad:0b:df:2b:74:
                    3c:f9:25:58:7a:c4:89:ac:84:c6:ca:44:35:89:b6:
                    81:7e:d5:8c:b5:a4:9f:43:30:5b:1b:58:43:36:f0:
                    ef:ec:32:5b:a8:f1:04:74:31:b8:85:a0:ac:fb:a2:
                    a7:5a:e2:7e:a9:aa:6f:25:37:38:c4:a7:5a:cd:95:
                    57:f8:1a:be:d1:cf:48:37:e5:a8:78:f2:6e:91:01:
                    83:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E2:7C:93:2C:EC:F2:DC:60:F5:77:47:2B:C6:41:4A:1C:F1:24:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/099a6177-074f-3801-a40d-53cbd0937cc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl

            X509v3 Authority Key Identifier:
                keyid:90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.205.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:c1:66:d1:e5:cb:93:b5:e3:10:9b:92:3a:48:c1:93:69:7f:
         3a:c7:14:84:64:75:34:63:52:b0:67:93:a6:45:a3:32:79:be:
         75:3a:94:e5:5f:22:5a:77:3d:a7:11:82:b3:d9:8f:8a:a8:61:
         2d:d9:4f:9f:b2:91:64:20:da:6b:c1:56:a1:93:ac:eb:d7:b7:
         61:3f:bd:20:3a:89:be:56:9d:7e:7d:48:b7:fd:54:51:5d:70:
         63:cc:5d:76:c2:88:06:98:f8:0e:0e:b8:c7:48:a2:50:da:46:
         92:7e:ec:82:2a:54:68:f5:61:9c:95:60:99:b2:c2:10:53:c9:
         92:3e:06:f6:d3:b2:b4:60:ef:bc:d3:76:4b:6f:d7:a9:63:9d:
         c4:c6:65:bb:2d:ba:07:7d:64:24:ae:fb:23:90:64:42:89:96:
         49:70:12:24:c1:2a:4b:51:95:b7:f8:c7:58:e1:1d:5f:02:e2:
         bc:9c:bc:8c:be:bd:a7:f8:6b:93:66:67:cf:49:22:08:36:51:
         44:7c:38:92:9d:59:ee:03:a3:51:77:73:c2:aa:1d:ed:b8:38:
         66:87:b2:d7:34:da:f1:c5:cf:75:ef:12:cd:f2:9a:ae:a9:da:
         e8:30:65:7c:cd:78:69:63:50:e0:2a:23:f6:16:af:3c:91:a9:
         a4:f2:01:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:58:43 2025 by rpki-client