Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/24464489-5d7c-3c5a-98f3-22f732005dc1.roa
File:                     24464489-5d7c-3c5a-98f3-22f732005dc1.roa (raw, json)
Hash identifier:          Zd64kxF+bt1PveImGmut7iKM6jfA2La7coA8QhkEdcs=
Subject key identifier:   99:E1:37:A1:3A:B0:41:80:9E:34:7E:50:4F:49:FB:92:D1:32:27:1F
Certificate issuer:       /CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47
Certificate serial:       010D0C9F43285849E6FF5985EFAEA872BEF02680
Authority key identifier: 3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/24464489-5d7c-3c5a-98f3-22f732005dc1.roa
Signing time:             Mon 19 May 2025 06:44:15 +0000
ROA not before:           Mon 19 May 2025 06:44:15 +0000
ROA not after:            Sun 17 Aug 2025 06:44:15 +0000
asID:                     16509
IP address blocks:        157.239.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:ff:59:85:ef:ae:a8:72:be:f0:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47
        Validity
            Not Before: May 19 06:44:15 2025 GMT
            Not After : Aug 17 06:44:15 2025 GMT
        Subject: CN=a14103c1-d3ea-4574-82ce-2a2aba90b7f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:68:f2:d6:c3:0e:f8:1c:9a:55:4d:6d:d7:3a:
                    a4:1b:9c:02:f2:7e:39:a5:23:70:26:54:b9:9a:8b:
                    4f:fc:da:b9:39:0e:91:93:33:83:48:b8:ac:02:4f:
                    6d:88:eb:d6:b0:e5:b0:e5:f9:cb:89:67:24:78:85:
                    9e:0d:1a:e0:17:b2:d0:0d:d3:dd:fb:8a:83:a8:85:
                    69:c6:4a:77:2c:ee:a6:9d:04:76:2a:5f:bb:16:00:
                    2e:ff:bf:b5:62:62:18:0e:c9:ab:1c:99:4d:1f:13:
                    40:0b:c2:a3:09:ac:30:29:86:b0:57:d9:a9:b3:22:
                    34:95:82:8d:38:ec:52:b0:9d:d3:7e:87:3a:04:d2:
                    b1:11:9f:4f:4f:d2:2b:b1:68:f5:57:0f:5a:59:15:
                    c1:4f:0b:32:db:d9:70:fc:a5:2a:16:bb:6b:c0:7b:
                    a1:d8:be:a4:6d:02:43:bd:86:f9:1b:17:bc:9f:e9:
                    c8:61:09:50:1e:c4:ec:1b:78:f5:c3:39:02:cf:39:
                    14:70:2d:9d:6c:da:79:c9:c9:f6:85:a3:14:25:12:
                    2d:4b:b9:5e:8a:c0:48:a5:0e:90:73:99:bd:b4:f4:
                    61:03:0a:96:fc:2c:23:3a:c5:e9:cd:3a:01:24:83:
                    31:84:67:0f:b4:c3:73:3d:db:f3:7b:3d:a6:a1:37:
                    3c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E1:37:A1:3A:B0:41:80:9E:34:7E:50:4F:49:FB:92:D1:32:27:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/24464489-5d7c-3c5a-98f3-22f732005dc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl

            X509v3 Authority Key Identifier:
                keyid:3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.239.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:7b:c1:68:07:4f:b1:9d:d2:59:95:33:70:9d:b8:ab:12:bd:
         9e:76:4e:20:c9:d2:7e:b5:be:c5:e9:0f:31:fd:55:76:46:21:
         cb:54:2c:9d:3d:eb:64:15:4a:68:e6:6f:16:17:f2:96:d4:95:
         f4:f1:75:36:55:1c:12:b2:da:53:f2:59:72:d1:f4:0a:1f:4f:
         3c:a8:89:b4:e8:33:dc:35:1d:e9:50:a1:a5:67:93:af:a1:59:
         ac:ea:bc:6e:7b:7b:0b:40:aa:ae:8e:8e:d3:1d:1d:d7:df:5d:
         6d:2d:4d:7c:69:d4:ff:66:6c:df:e9:3c:09:b8:41:0d:c7:ad:
         19:31:7a:d5:22:3c:3f:27:c6:35:d9:75:c0:09:d5:65:d5:1c:
         41:c7:aa:f8:c2:b6:4e:d3:4a:55:38:e6:21:7d:90:d6:d2:e8:
         95:86:0a:d8:19:73:28:a1:28:b4:2f:28:22:a8:72:e4:a5:4b:
         ee:2e:24:ec:5f:63:1b:db:1f:d3:dc:cf:c5:fd:9d:ad:ef:cc:
         fe:08:8f:97:da:7e:83:4f:15:44:cf:3e:f9:61:11:d3:83:00:
         83:a1:6a:58:ba:2b:35:e7:8b:6b:1f:ac:f0:29:eb:97:27:23:
         26:47:ae:b4:14:98:af:ee:54:4c:c0:1d:c6:df:4e:89:50:6f:
         2d:46:80:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:57:53 2025 by rpki-client