Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/9ea9ad86-5212-3fb0-b1d4-ea7aa18a5efe.roa
File:                     9ea9ad86-5212-3fb0-b1d4-ea7aa18a5efe.roa (raw, json)
Hash identifier:          r0C22eTggPfCdqSBHO2IJ7dzDP+AY4ZzWKuwQs2HHjY=
Subject key identifier:   7E:21:6F:88:B6:13:58:B0:50:67:B6:AE:DA:77:7D:13:EF:78:89:DE
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328584A119AB781365E30DB140CB780
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/9ea9ad86-5212-3fb0-b1d4-ea7aa18a5efe.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     6079
IP address blocks:        216.220.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:b7:81:36:5e:30:db:14:0c:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=113f5eef-a854-4757-8857-772e5947c3c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:96:d6:aa:9d:e5:7a:17:b3:77:43:6d:e0:99:
                    b7:40:ec:9f:44:bd:8d:f0:d8:45:d4:f4:a6:2a:96:
                    ba:91:f3:3c:aa:f0:68:8c:c2:37:da:70:bd:c9:d8:
                    86:88:8a:dd:d7:79:22:8b:f3:7a:59:13:04:a7:d1:
                    5e:a3:20:7e:d2:25:30:88:4b:1e:14:12:08:42:c7:
                    70:23:7e:c5:a0:b8:76:60:a8:4c:77:b9:0b:cd:52:
                    a2:18:aa:83:26:0c:64:7a:1d:ff:c8:ac:61:93:20:
                    a6:6e:86:7a:79:c2:2a:ed:74:ad:0b:36:ba:4f:9d:
                    ef:cb:2a:b3:a8:34:06:5c:24:ca:e5:54:6e:5d:6f:
                    39:7d:1e:ac:32:d3:83:d4:9c:ee:a0:d5:ac:ab:8b:
                    8e:47:9a:5e:a8:ce:0a:16:4a:5a:09:0b:e4:73:53:
                    ac:aa:8c:80:e1:e7:b0:f0:7b:2f:98:9d:8a:a7:f8:
                    a0:57:3b:64:a7:d8:0b:23:45:d0:b1:4e:f0:f3:11:
                    32:b9:04:c7:72:3a:90:49:6e:3b:77:79:3e:7b:52:
                    06:38:70:18:12:d8:67:09:66:51:c1:e1:5c:68:24:
                    a2:96:4f:5f:12:ca:8a:11:2c:d1:fd:80:dc:bd:6e:
                    f9:df:99:9a:50:33:89:9e:19:a4:8d:d9:91:e2:8d:
                    d0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:21:6F:88:B6:13:58:B0:50:67:B6:AE:DA:77:7D:13:EF:78:89:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/9ea9ad86-5212-3fb0-b1d4-ea7aa18a5efe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.220.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:2d:07:7d:d4:16:ab:5c:dd:e2:70:57:4e:b4:2c:eb:ed:c6:
         bc:0c:b8:1c:3b:19:58:3d:2f:7d:06:1b:2f:24:1b:34:71:06:
         01:5b:1f:69:01:a3:90:9a:1b:cf:87:fd:5c:a6:89:ed:12:33:
         75:77:13:49:9b:4b:ed:4f:d8:11:17:f7:95:21:c1:9d:d4:75:
         89:4d:4d:07:3d:c8:75:ce:58:bb:ba:a6:f7:ce:53:b3:9f:11:
         99:ef:89:68:e4:24:e6:fd:ac:86:53:dd:53:1a:91:f2:61:ce:
         f8:31:5d:08:a7:ec:8d:5f:50:e4:d7:f0:cc:5b:4f:69:88:e3:
         fd:26:71:21:c2:83:d5:b9:3b:79:52:55:24:8d:62:c9:57:eb:
         b2:04:f2:b6:8a:ef:fe:93:d1:fd:6e:15:8e:c9:da:73:5e:e9:
         9d:a0:9b:3b:38:49:71:08:0d:67:26:a6:e8:4f:b0:ff:89:ab:
         1c:72:a2:06:89:da:77:e2:a5:85:a1:7e:4a:f5:c7:b1:18:d0:
         96:15:b9:ca:33:a0:55:67:9f:aa:c2:5c:6c:f3:7d:87:80:f7:
         cb:10:78:be:30:67:85:56:cd:46:7b:9f:4b:d9:83:17:06:c8:
         75:ab:38:53:63:d7:e0:32:9f:79:12:b0:e4:81:76:e1:91:e6:
         8b:15:83:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:35:14 2025 by rpki-client