Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a211ca82-981c-32d0-8241-ba4946736b50.roa
File:                     a211ca82-981c-32d0-8241-ba4946736b50.roa (raw, json)
Hash identifier:          vJP0USFbzKtswUUGQZgWFTbrP9RyV60D7s2GgB+h714=
Subject key identifier:   D7:52:8A:6A:29:2A:EB:48:85:1B:E3:78:E5:10:63:C7:41:E6:36:A6
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F43285849D594E3C612FE0EFC4143AF80
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a211ca82-981c-32d0-8241-ba4946736b50.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     53345
IP address blocks:        205.252.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:e3:c6:12:fe:0e:fc:41:43:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=3fbcebe4-0c0f-4e33-bca8-51eefa04f8d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:82:d9:73:fe:5f:32:62:2e:61:ba:81:d9:30:
                    7f:0c:78:ff:21:9f:2a:3a:fe:92:11:0f:00:3f:57:
                    7c:d6:34:66:09:3b:96:68:10:d4:91:72:11:75:71:
                    74:e6:17:81:a3:ea:a2:1b:0b:70:4d:64:4b:c6:b8:
                    8b:f4:19:aa:dd:70:32:60:b7:2d:9a:0f:04:1f:a5:
                    63:fa:d7:9a:d3:b2:cc:68:de:1b:21:75:c0:76:9b:
                    4b:fe:e8:68:13:fd:c0:fe:e9:67:2c:45:3e:ad:9b:
                    8c:a9:f9:47:fc:ce:70:b9:50:7d:3e:b6:60:95:91:
                    07:8b:09:bf:9c:bb:b5:cb:94:0b:e1:e8:c9:b1:0f:
                    a7:e0:75:f1:b4:48:39:57:15:05:4a:15:e3:8b:d1:
                    4e:1e:2d:70:d1:7c:67:4b:ae:51:b3:5d:27:e3:f2:
                    28:55:e3:fe:2d:52:44:1a:4f:d2:bf:aa:50:62:78:
                    8b:12:19:19:0e:db:cc:a8:48:c2:34:7a:f1:e7:bb:
                    cc:df:86:cf:2b:84:8f:1b:9b:81:3e:59:c1:9c:fc:
                    52:64:5d:5a:10:81:90:76:54:ca:fe:b9:e6:2b:ab:
                    e4:2a:47:91:a2:a0:c0:ad:95:c2:c7:35:35:8f:fb:
                    7c:15:a4:c7:c3:c4:33:91:76:ae:c2:17:ff:f8:8a:
                    00:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:52:8A:6A:29:2A:EB:48:85:1B:E3:78:E5:10:63:C7:41:E6:36:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a211ca82-981c-32d0-8241-ba4946736b50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.252.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:6f:18:6a:5a:88:42:f8:8e:1b:1f:2d:8d:02:4d:2e:86:b5:
         ee:68:0f:35:c9:dd:c4:cd:fb:98:62:38:45:24:84:d6:9e:fb:
         b8:5d:da:96:11:cc:a5:9c:cf:a5:27:e2:da:b0:a2:ab:4b:82:
         bb:7f:b1:5c:63:1a:7b:57:fd:b4:bc:00:9c:3c:2f:50:d8:fb:
         b3:91:4c:35:51:5d:1d:7d:7a:54:b6:a5:22:8f:0c:0c:1c:24:
         d3:f5:a5:8f:ae:72:0c:4b:45:ef:05:f9:72:c2:d5:29:ba:74:
         e1:92:69:4e:e8:71:4b:a6:41:02:a5:e2:c8:0d:a2:84:79:d7:
         5e:ab:76:22:7a:ff:a5:83:91:74:f0:6a:f9:41:b7:7e:62:fc:
         db:9a:45:00:cd:57:10:bc:12:31:98:4f:b3:bc:37:ba:ad:d9:
         88:96:a0:19:dc:a9:ae:fc:aa:73:84:d1:43:8d:63:fa:11:33:
         2a:bc:9b:ca:da:7b:b6:a7:36:03:51:ba:33:22:75:54:71:3a:
         ed:eb:bd:f6:24:3b:6d:21:c3:25:7f:7b:0e:da:23:4a:f3:d6:
         03:35:99:04:27:48:29:ea:dd:9c:cc:3c:9e:81:3d:22:b8:83:
         66:1d:b6:4d:53:a8:b9:4a:3b:37:d5:f8:49:2c:73:1a:05:24:
         44:62:4a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:20:36 2025 by rpki-client