Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b/38ce2567-b60f-375f-9033-a23b9b107dff.roa
File:                     38ce2567-b60f-375f-9033-a23b9b107dff.roa (raw, json)
Hash identifier:          35EVGE58Rz2E/fh/w3x1I0blmmZaoVxvznT9zmBw9LM=
Subject key identifier:   EB:C5:EF:8A:56:CB:D9:CA:B8:9E:B6:F0:36:2E:9D:C3:B4:31:2D:66
Certificate issuer:       /CN=32bd304f-79c6-4794-b428-4ea9987e033b
Certificate serial:       010D0C9F4328584A23C01DC8014ECE4ED71533D0
Authority key identifier: B0:6F:A1:65:36:BE:13:17:11:AA:54:10:E4:BB:4D:52:DE:79:91:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b/38ce2567-b60f-375f-9033-a23b9b107dff.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     53891
IP address blocks:        216.25.44.0/22 maxlen: 24
                          216.25.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b/32bd304f-79c6-4794-b428-4ea9987e033b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b/32bd304f-79c6-4794-b428-4ea9987e033b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:1d:c8:01:4e:ce:4e:d7:15:33:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32bd304f-79c6-4794-b428-4ea9987e033b
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=9e5a24ce-3657-49ba-9581-72c7f54db6a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7e:82:52:ff:ce:bb:f0:24:ba:6a:59:66:49:
                    a6:33:cb:9d:2f:58:9c:ea:6b:15:d8:b0:b7:b8:b7:
                    10:06:3e:a6:c6:12:a6:30:55:45:11:80:1d:a6:98:
                    d8:bc:ee:8c:18:7c:8c:7a:35:8b:9e:bf:a3:ca:e6:
                    85:ea:6c:e1:52:be:92:81:73:bd:34:12:50:13:0f:
                    8a:b7:c6:65:90:3c:da:ce:ff:f6:af:08:b1:4d:f2:
                    eb:9f:8e:52:8b:c3:79:4c:7f:a1:0f:a5:8f:e3:95:
                    e3:ed:e2:41:13:c8:05:98:59:d6:51:10:e6:3b:d5:
                    32:ed:75:85:3d:18:07:5f:08:8c:cf:dc:58:9a:93:
                    3d:73:26:ff:fb:ad:24:80:1f:4a:ff:e0:bf:99:a2:
                    22:a6:bf:4a:28:71:f8:9d:ec:b5:c2:3c:8a:df:93:
                    26:2f:f3:ab:dd:26:09:11:e6:bc:aa:41:32:b1:34:
                    a0:a5:ac:a6:79:41:a3:fe:8e:70:b0:9d:f0:d6:dc:
                    31:73:8d:42:6f:95:a0:ca:a8:f5:f3:df:88:2a:5c:
                    9e:ac:06:a7:7a:e9:ca:29:5f:31:63:38:c4:8d:f5:
                    c7:ae:f1:ec:24:3e:d2:c6:92:9c:be:ba:f6:ca:51:
                    50:86:95:64:b2:d6:9e:d6:21:a0:04:1d:3f:bc:e0:
                    d5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C5:EF:8A:56:CB:D9:CA:B8:9E:B6:F0:36:2E:9D:C3:B4:31:2D:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b/38ce2567-b60f-375f-9033-a23b9b107dff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b/32bd304f-79c6-4794-b428-4ea9987e033b.crl

            X509v3 Authority Key Identifier:
                keyid:B0:6F:A1:65:36:BE:13:17:11:AA:54:10:E4:BB:4D:52:DE:79:91:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.25.44.0/22
                  216.25.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:8d:46:74:81:0b:3a:bf:cd:84:24:b8:60:b2:4c:c4:54:c5:
         42:50:be:52:46:86:75:a4:d7:6a:03:65:9b:7f:80:ee:a9:c6:
         01:5c:f7:43:c4:55:ff:33:81:5b:8b:1b:69:57:f1:7a:5e:fa:
         ba:30:41:c7:7b:88:5a:83:8d:dd:1a:ae:a6:38:83:94:c7:82:
         30:df:da:8b:6d:4f:6e:22:7c:c4:f0:06:ec:6b:05:cb:83:54:
         91:e2:8c:27:16:eb:67:92:51:6e:56:71:bb:da:47:3d:ca:09:
         a7:c3:d2:1b:c8:56:bb:20:71:83:f0:62:88:40:73:6c:ae:a3:
         50:35:2d:bf:d5:2d:41:6b:45:92:1b:f6:7d:25:31:37:a9:d4:
         79:2f:f6:01:d8:9e:c7:11:39:ef:ee:a1:1d:65:97:6b:06:83:
         fc:5b:ec:2f:c6:5d:2c:dc:d3:21:96:7c:fd:6f:33:76:01:dd:
         82:c3:18:99:11:d3:9f:1e:ff:5b:76:18:c8:37:ee:fa:bb:dd:
         74:59:60:0f:f4:45:87:ca:23:61:8c:c6:33:e9:fe:de:f4:2a:
         5a:42:1b:46:78:33:3a:a1:90:6f:77:80:50:fa:46:36:00:b2:
         54:a0:14:96:4a:c9:b2:cb:bf:e8:d1:5b:84:0f:ab:c6:56:51:
         be:1e:9a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:03:32 2025 by rpki-client