Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/686d3cd6-a59a-351e-8bbb-d84a28213d21.roa
File:                     686d3cd6-a59a-351e-8bbb-d84a28213d21.roa (raw, json)
Hash identifier:          F3JAZ3cjyESL8jcTbfGXC6XGwjnHm5p/uC4PeWJX/HU=
Subject key identifier:   E7:E2:65:40:EA:7C:6E:DA:5D:F0:9A:D2:D1:BA:97:DE:D3:A7:DD:06
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584A3DAA9A48FE96A3D2204CF040
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/686d3cd6-a59a-351e-8bbb-d84a28213d21.roa
Signing time:             Thu 19 Jun 2025 07:48:49 +0000
ROA not before:           Thu 19 Jun 2025 07:48:49 +0000
ROA not after:            Wed 17 Sep 2025 07:48:49 +0000
asID:                     62610
IP address blocks:        216.27.173.0/24 maxlen: 24
                          216.27.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3d:aa:9a:48:fe:96:a3:d2:20:4c:f0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun 19 07:48:49 2025 GMT
            Not After : Sep 17 07:48:49 2025 GMT
        Subject: CN=c8c7fb81-fb4e-4d4d-b6d8-ee88f9a188ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:37:e3:8f:e2:fa:1f:3b:76:92:64:49:9b:d3:
                    82:8c:3b:e0:99:fb:e3:39:66:27:40:cd:32:05:c5:
                    5f:e2:24:38:b1:3c:c5:90:c8:d0:c1:d8:cc:68:06:
                    b4:eb:40:7d:b5:5f:5b:50:98:74:85:e9:72:50:b1:
                    34:4b:d4:d9:f1:1e:bb:36:52:58:33:4f:8f:95:ba:
                    35:82:4e:ea:6b:88:8b:b1:98:a5:36:e2:b2:b7:08:
                    b0:68:de:58:10:d2:07:4d:a7:6e:ae:7c:88:80:04:
                    1c:e1:c4:60:54:42:5e:43:b0:11:39:71:3e:d2:0b:
                    c3:90:27:a4:f9:53:c9:fe:e3:f3:a6:4d:96:fe:e3:
                    ba:2f:11:e9:0d:c5:2b:d5:25:31:46:f3:40:e7:85:
                    0c:f2:89:4a:7b:21:63:b1:f0:2a:0f:92:ee:c9:59:
                    8d:39:4b:0a:90:a0:ed:22:bb:be:ff:fa:6f:1a:7f:
                    3e:12:f6:d6:92:02:db:62:48:ca:1e:43:4a:11:fd:
                    4f:d6:99:63:b1:98:48:ab:50:47:29:52:30:e3:b8:
                    36:90:6e:a6:5f:f3:92:fb:12:16:bc:33:fb:bf:4a:
                    51:43:6f:03:99:dc:36:52:ec:74:0f:f4:a7:b9:f1:
                    49:2e:00:61:9d:47:ce:97:2f:4a:29:0d:67:97:de:
                    40:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E2:65:40:EA:7C:6E:DA:5D:F0:9A:D2:D1:BA:97:DE:D3:A7:DD:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/686d3cd6-a59a-351e-8bbb-d84a28213d21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.27.173.0-216.27.174.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:c1:93:35:aa:cf:04:96:93:2b:9f:c7:cf:45:69:6a:bb:37:
         55:38:c3:72:37:8e:ff:70:7f:0b:fe:bb:27:17:4a:9b:a0:94:
         fd:12:8e:de:29:91:07:b6:00:dd:ec:cc:b3:56:f7:38:5e:b1:
         22:a3:48:75:6e:10:e0:53:28:de:6f:1f:bd:30:25:d0:c5:31:
         45:f7:e7:f5:d9:13:63:8b:8b:8e:47:42:40:1c:1e:48:b3:24:
         80:6d:0f:5b:e8:90:48:2f:1f:c5:10:43:7c:2d:ea:f9:4b:be:
         fb:a2:9d:b7:ba:77:1d:a9:90:6c:51:54:97:44:f4:d3:96:26:
         9d:57:81:a6:b3:6b:76:18:bd:c4:4b:2a:4d:49:8d:4c:ad:79:
         be:c3:b0:aa:a6:d4:54:bf:c3:65:5d:f6:bf:49:07:31:1f:ff:
         03:05:d4:8a:65:76:68:93:91:01:63:cc:9e:29:ef:0a:3e:d3:
         86:b5:e6:12:50:44:4c:36:bb:24:dd:c2:ed:db:c0:14:34:bd:
         7d:dd:66:74:7a:c9:20:35:cd:ac:4e:49:22:91:cf:72:0a:b9:
         a6:2f:e6:7e:ec:93:05:12:d7:43:17:32:d6:4b:b1:27:97:2a:
         93:52:f1:32:f2:3a:ce:8d:ae:74:cc:06:51:02:1e:4d:b5:d8:
         58:53:46:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 08:52:37 2025 by rpki-client