Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/7021ab6a-6e3a-39c4-8a00-51e6e77a0aab.roa
File:                     7021ab6a-6e3a-39c4-8a00-51e6e77a0aab.roa (raw, json)
Hash identifier:          rRMgF9/M9uaNS49+BmG6FK39sOYQJIqsht69TWopnSs=
Subject key identifier:   2A:11:81:71:CD:DD:B5:F0:DC:CE:74:4C:E7:CC:67:F6:76:BC:E3:97
Certificate issuer:       /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial:       010D0C9F43285849E7BA733E5CDD8D6122D19240
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/7021ab6a-6e3a-39c4-8a00-51e6e77a0aab.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     16509
IP address blocks:        65.37.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:73:3e:5c:dd:8d:61:22:d1:92:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=191f8019-9b9d-4316-8bff-0ea028e89946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:de:91:50:07:c5:c5:a2:36:54:ef:a1:51:dc:
                    b8:33:07:20:d9:d5:d7:97:61:1f:8a:70:c3:0d:9a:
                    0c:d9:27:67:54:4e:be:4f:e4:0e:4c:36:86:0f:66:
                    ff:0b:21:a7:2d:31:93:08:df:89:05:28:11:ac:21:
                    56:fc:2d:a2:cb:88:55:5a:cb:85:65:a0:a1:ad:f7:
                    e9:14:53:8c:ea:f5:08:4e:45:cd:cb:67:67:86:69:
                    1c:21:83:ae:9c:6c:eb:97:42:90:c9:09:6f:67:95:
                    54:55:80:aa:ef:96:21:bc:99:f0:20:53:3d:74:57:
                    69:ce:f5:56:60:0c:e8:7a:cc:d7:be:68:b6:33:b7:
                    d1:c4:69:f1:83:5f:82:62:f9:5a:bd:26:c9:32:dd:
                    f6:a3:93:8b:bf:a7:6e:20:2d:b0:9b:27:1c:9f:6d:
                    2a:e9:28:c8:f4:c1:b0:a0:d4:a7:5c:6c:66:99:3d:
                    7e:c6:f2:d7:f9:ea:d2:23:af:04:6c:0c:9e:35:a6:
                    a7:06:99:5b:50:94:a4:14:fa:b9:a1:08:6f:e7:d9:
                    b9:ac:cc:8e:1e:30:4e:08:a8:d3:c3:00:5e:7e:e5:
                    08:4e:f0:e5:cb:fe:5c:ec:b1:71:8f:e1:1b:1c:15:
                    a8:f3:0d:22:3b:3f:bc:08:ce:dc:cb:de:55:25:cd:
                    3e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:11:81:71:CD:DD:B5:F0:DC:CE:74:4C:E7:CC:67:F6:76:BC:E3:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/7021ab6a-6e3a-39c4-8a00-51e6e77a0aab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.37.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:ef:d6:3e:95:1a:dd:ff:a3:db:27:43:80:4a:f5:a6:bb:55:
         f5:5e:76:d9:26:95:df:1e:b6:bd:85:a5:4e:59:ff:01:67:86:
         3c:2c:8a:ae:78:28:73:60:0e:8f:23:93:bb:00:3c:eb:af:bd:
         0f:63:5b:ee:00:e8:3b:56:81:02:2d:ae:e4:52:51:89:e2:9e:
         5e:94:bc:b5:1f:6e:2d:58:14:0d:6d:42:d9:9f:d3:a4:74:79:
         cd:40:99:fb:ab:46:8f:e0:4b:49:59:0d:91:fe:a6:d9:71:54:
         72:da:61:ac:8f:43:e6:f3:f4:ef:7a:21:18:00:19:b3:56:fe:
         62:4a:74:2f:f0:e8:53:10:13:5f:ff:ce:b8:b0:71:57:32:ab:
         bf:e8:28:13:e7:46:98:e8:d4:03:70:62:1f:81:55:4a:7b:dc:
         b1:78:37:d0:bb:6e:cf:03:ea:8e:ec:af:be:33:35:c2:21:4c:
         31:7a:c4:0b:36:84:6d:aa:f4:a6:91:53:e9:82:05:1b:7b:f4:
         ac:a0:60:c5:43:6b:f7:ef:f0:b1:f9:6c:7b:1f:96:44:56:0d:
         51:09:d8:dc:54:4f:26:63:4e:20:ae:2e:bd:9d:bb:2a:7a:6f:
         88:92:c8:37:79:7c:f9:82:e4:f3:7f:ae:56:ee:9e:13:ca:66:
         14:ff:6e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:21:15 2025 by rpki-client