Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/d402ec43-9e08-3318-b9b6-cce578a54cb9.roa
File:                     d402ec43-9e08-3318-b9b6-cce578a54cb9.roa (raw, json)
Hash identifier:          EnpuPY8knMvj9HAQJ1O6CaJcNewcmQr8o+dkA1xr/tE=
Subject key identifier:   06:DC:80:65:7F:57:03:75:87:E2:C8:0F:D8:98:53:64:A3:64:EB:5C
Certificate issuer:       /CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
Certificate serial:       010D0C9F4328584A03A5587EF4DAF8BBEF7C5880
Authority key identifier: 9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/d402ec43-9e08-3318-b9b6-cce578a54cb9.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     16509
IP address blocks:        216.24.225.0/24 maxlen: 24
                          216.24.226.0/24 maxlen: 24
                          216.24.227.0/24 maxlen: 24
                          216.24.228.0/24 maxlen: 24
                          216.24.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:58:7e:f4:da:f8:bb:ef:7c:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=5f2858d4-2911-4f91-a0eb-134c15d1763b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:96:b3:06:a1:94:57:51:05:c9:3f:35:95:d5:
                    1a:c8:b8:50:9e:95:e2:16:e4:69:6d:9e:64:7e:d5:
                    38:aa:28:fd:82:94:9e:d8:54:56:b8:f4:08:58:fa:
                    72:e6:a9:3c:46:c4:71:57:1d:1a:ff:b4:d7:49:31:
                    81:5f:8b:cf:ab:12:65:1b:ee:e0:bd:aa:f4:e4:5a:
                    f6:8e:57:26:96:51:e9:a5:20:3e:b3:89:bf:25:5a:
                    39:b4:d6:8f:38:4c:30:4c:2f:fe:cb:3d:01:86:bb:
                    5e:4f:e6:51:1e:da:b0:43:b4:64:88:3c:63:d3:3f:
                    b8:5e:37:37:0c:b9:01:a4:03:34:9f:02:d7:e0:6e:
                    13:95:c8:44:30:3c:26:a4:e8:39:ef:49:d8:84:03:
                    5b:e2:89:6b:5e:c5:d2:1c:fe:68:dc:01:eb:d6:64:
                    5b:59:21:db:16:64:6a:36:b9:9c:30:6c:9f:53:bd:
                    af:e5:5d:61:04:83:43:74:84:7f:26:05:0e:8d:05:
                    49:1a:eb:e0:94:ee:5a:ab:9d:ff:f8:b4:b8:57:97:
                    3f:e2:d5:be:e3:95:7b:5c:4c:44:26:c5:90:a2:f3:
                    b4:eb:c8:62:9d:15:4c:03:d4:80:d3:0e:07:e5:6a:
                    7f:7b:50:22:bb:13:f1:f0:01:4b:e8:b4:36:d4:b4:
                    2f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DC:80:65:7F:57:03:75:87:E2:C8:0F:D8:98:53:64:A3:64:EB:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/d402ec43-9e08-3318-b9b6-cce578a54cb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl

            X509v3 Authority Key Identifier:
                keyid:9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.225.0-216.24.229.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:0b:e6:53:03:24:2c:ad:a4:7b:a8:a2:a8:83:36:e4:f1:21:
         63:cc:64:64:d8:a2:00:f1:a0:ac:f1:29:5f:1c:59:8a:51:15:
         29:4b:8c:d9:76:41:aa:e8:46:62:1f:0d:b6:1c:c7:2e:ed:01:
         58:20:c5:3b:4e:30:77:f6:08:f5:b8:75:15:8c:d9:21:a6:21:
         66:d2:d1:19:b8:af:28:21:c9:b3:84:bb:88:9c:48:20:7b:b6:
         4b:9d:22:3e:33:67:4b:07:e3:8c:47:1e:28:51:63:bf:84:06:
         83:d8:ac:e6:d5:66:7c:63:bb:7f:f9:e8:34:35:99:8c:06:c2:
         e1:e1:d3:28:4c:55:51:20:3a:15:f6:4c:ff:12:02:34:f5:d2:
         d1:30:00:5b:1c:45:9b:20:1e:46:c8:e7:fe:9b:20:be:53:18:
         7d:3c:2c:41:02:b7:a8:ad:45:85:42:cf:1f:ef:98:a5:75:ca:
         77:a8:42:ad:df:1d:0a:50:34:8e:cb:d8:a3:e7:ca:30:ac:bb:
         57:fa:58:6a:45:23:d4:ee:10:85:16:b3:71:eb:56:7c:33:69:
         39:7d:fa:8a:9e:b4:2c:af:e7:f0:90:f0:44:cb:a4:9e:cb:de:
         00:16:8c:be:9a:6a:9f:51:f7:e1:d9:30:2e:f0:ba:b4:94:cf:
         34:75:06:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:46:30 2025 by rpki-client