Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/6ec4b6bf-d53f-3877-b36e-f669576d8063.roa
File:                     6ec4b6bf-d53f-3877-b36e-f669576d8063.roa (raw, json)
Hash identifier:          B+S/qr/Ov5fxQM6Etx4l7eS1AnZTNP/92krCLJAUZ4Q=
Subject key identifier:   92:66:58:8D:00:4E:EF:EC:58:87:4D:9A:28:28:C5:10:D6:76:FF:B2
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584A348021EED47C09089D206040
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/6ec4b6bf-d53f-3877-b36e-f669576d8063.roa
Signing time:             Mon 16 Jun 2025 01:00:49 +0000
ROA not before:           Mon 16 Jun 2025 01:00:49 +0000
ROA not after:            Sun 14 Sep 2025 01:00:49 +0000
asID:                     6128
IP address blocks:        216.97.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:34:80:21:ee:d4:7c:09:08:9d:20:60:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Jun 16 01:00:49 2025 GMT
            Not After : Sep 14 01:00:49 2025 GMT
        Subject: CN=21645742-1438-47d1-9203-32ff17938967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:75:8b:f9:bf:29:7e:c2:d5:c7:44:d2:ae:00:
                    c6:be:31:5d:2a:eb:70:f9:33:e5:61:c8:a4:1c:4d:
                    c7:a9:f5:17:16:73:f9:cb:f6:8a:83:d1:1f:e3:9a:
                    8c:67:f3:8f:76:45:72:96:f4:9b:19:5f:d5:51:ca:
                    2e:a1:57:9a:32:36:ec:2c:ad:80:2b:69:0f:ea:04:
                    6e:22:83:a7:c5:00:95:c3:b7:69:ad:09:04:a6:3b:
                    c6:75:75:59:9e:1d:b7:9e:56:ed:35:b3:33:6d:cd:
                    a4:f0:a3:60:f5:0d:d8:68:a5:29:ae:24:bc:e0:0e:
                    64:e7:39:05:62:cc:30:9f:7b:83:6d:7e:d2:df:80:
                    40:6d:aa:30:9f:b4:42:61:49:c3:35:b8:bc:47:d3:
                    ba:59:b4:af:58:70:3e:6d:3f:66:79:2a:b4:17:7f:
                    f3:b8:42:77:a4:2c:99:d3:cd:b3:53:0c:db:d4:34:
                    84:c0:df:f1:9c:99:10:60:af:88:12:19:f2:96:cc:
                    7b:1b:c6:c3:e3:c5:42:a8:c2:19:51:11:f0:a2:1f:
                    97:d2:39:11:36:43:19:0e:47:f9:5b:8c:a7:f1:51:
                    b8:74:eb:c2:82:dc:08:d7:df:f1:b8:7c:6b:07:85:
                    b1:c2:b4:21:25:4a:61:94:0e:e0:58:50:6e:d2:8b:
                    c5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:66:58:8D:00:4E:EF:EC:58:87:4D:9A:28:28:C5:10:D6:76:FF:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/6ec4b6bf-d53f-3877-b36e-f669576d8063.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:2c:11:d8:d0:fc:be:b4:9d:2b:97:43:ba:51:77:57:bf:cb:
         1b:d7:c9:56:fd:20:86:35:c6:11:52:94:a6:73:49:fe:55:1b:
         58:0b:83:05:b9:43:82:78:ff:65:69:cb:fa:58:b1:8d:ee:d7:
         70:ba:c8:38:2f:2c:46:7b:26:dc:e9:2a:09:68:40:91:64:3b:
         b4:40:2b:cc:c8:22:f9:a2:18:81:dc:94:3c:b1:35:8f:cf:77:
         eb:5e:57:26:93:de:74:e9:42:bf:4e:cf:a0:d9:ac:97:f4:45:
         23:9d:97:1a:29:d6:20:0f:47:82:75:d7:20:17:00:40:2a:b8:
         3d:4c:fd:01:65:07:a2:03:d0:53:2d:32:a9:0a:75:73:c7:5b:
         c9:d8:fe:e3:0f:20:89:23:0b:ce:f2:fe:fb:ed:12:1b:45:92:
         b5:2a:b4:93:9c:c4:a8:c6:38:b5:7d:8a:f8:3a:e7:49:b9:fc:
         74:2b:fb:d7:c3:9d:b9:e3:3c:0e:6c:9e:e9:11:24:19:da:7e:
         4f:cf:32:d9:8b:7c:b1:ea:cc:10:1b:22:e0:0a:3c:35:2a:47:
         43:a2:56:ae:9f:78:aa:52:d1:60:0b:74:13:55:70:0a:1d:6e:
         6e:5b:18:80:db:6b:2b:de:c6:f9:c8:f6:50:fb:fa:3c:0a:a6:
         8a:9d:a1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:54:22 2025 by rpki-client