Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7e8e622c-e84d-3874-8ff5-cdc30d4f220e.roa
File:                     7e8e622c-e84d-3874-8ff5-cdc30d4f220e.roa (raw, json)
Hash identifier:          dMlJ0XHaOs99nIHUOY1OExBS293/px77pP+rcg/Bwsg=
Subject key identifier:   99:F3:71:40:14:A3:58:D6:9C:A4:F8:F3:63:67:25:51:4B:2F:8F:0C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849F2E54934AA6A597FBE17ACC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7e8e622c-e84d-3874-8ff5-cdc30d4f220e.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     20115
IP address blocks:        16.14.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:49:34:aa:6a:59:7f:be:17:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=9364b497-b624-4c8f-b56e-4aee53215ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2d:34:bf:64:c8:bf:11:c9:8e:8e:f5:75:a3:
                    c3:af:4f:a3:dd:f7:99:ea:0b:08:a6:5c:0c:a9:f0:
                    dd:2b:45:d0:2c:12:5f:3d:fd:35:9a:a8:06:8a:8c:
                    3c:be:cb:9d:7b:12:eb:66:47:fa:3e:36:88:a9:c3:
                    c7:77:90:d0:52:0a:fe:93:13:43:32:4e:f8:93:0e:
                    f5:dc:76:45:ad:2a:da:da:99:80:f4:4c:cf:f7:15:
                    44:5b:e2:4d:be:0a:cc:f9:7e:5e:02:89:2c:fd:31:
                    ed:ac:7d:87:66:11:d6:5e:01:08:a7:e6:7c:d0:76:
                    db:d8:32:c0:f0:7c:70:5d:14:e5:3c:d4:ce:fe:fe:
                    8a:ec:d7:e4:e2:59:a8:58:15:c8:e1:0f:26:3b:e2:
                    22:e3:ae:8a:00:fc:ff:7a:dd:0f:42:75:ed:bf:5d:
                    a6:6c:01:ae:c4:c5:3a:53:02:bd:ec:6f:52:3b:24:
                    73:14:d5:b9:0e:ea:95:85:ce:7a:dc:17:58:da:08:
                    51:f9:69:9f:07:75:8a:7d:69:fb:7e:27:f5:30:da:
                    89:f0:06:73:b6:2c:d0:d9:4e:d9:5c:c3:5d:9a:01:
                    0e:d4:7c:3a:89:db:a7:5b:40:f6:1e:aa:71:83:25:
                    11:e9:8f:dd:08:8c:51:58:d5:ce:8d:b2:90:c9:6e:
                    6e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F3:71:40:14:A3:58:D6:9C:A4:F8:F3:63:67:25:51:4B:2F:8F:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7e8e622c-e84d-3874-8ff5-cdc30d4f220e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.14.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:28:0f:44:e5:67:67:80:d8:42:7e:df:10:78:01:8d:29:f2:
         2a:f5:2f:a8:b6:1b:dd:b4:0e:4c:1f:c5:37:29:2f:1f:d6:2a:
         56:bf:03:72:9b:d9:c2:86:03:a6:99:21:df:53:af:bf:53:5d:
         d3:14:25:1b:58:76:50:6d:4e:6c:5c:a2:c5:2a:55:dc:c7:7b:
         9e:c2:9d:86:55:03:02:68:a1:71:60:1b:b3:34:af:cb:a2:4a:
         28:16:bb:92:4a:ce:82:99:de:e0:c2:88:5f:e0:7b:88:94:b0:
         75:8d:f4:54:57:68:50:40:79:92:7f:9c:99:70:d6:7e:07:a1:
         df:de:65:98:d1:bf:66:c0:6f:cf:57:e4:88:18:70:07:57:4a:
         15:d9:1b:86:5d:1b:71:9f:cb:0b:57:6a:5b:70:da:93:06:cc:
         99:df:ef:5a:ff:01:1f:5c:0a:6b:b9:53:2c:17:48:49:f6:9b:
         22:ec:46:7f:ef:31:4d:31:53:22:f4:22:41:98:9b:14:22:1d:
         36:92:b5:5c:e0:64:f9:31:89:fe:a3:26:32:28:5d:82:73:b3:
         60:11:c2:78:68:53:e0:26:6a:04:13:4c:c0:de:de:cd:a2:32:
         60:09:b3:48:28:3d:35:3b:76:b7:2f:25:7e:29:51:4d:8d:ec:
         08:37:d5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:14:36 2025 by rpki-client