Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/a4aca5d9-3b7d-3a64-9525-72750142f185.roa
File:                     a4aca5d9-3b7d-3a64-9525-72750142f185.roa (raw, json)
Hash identifier:          io8FSXPfNfWnoDXIdfznnlMAui3u2HHm/EryRbjXYug=
Subject key identifier:   9E:36:6E:69:C6:4E:BA:52:3A:D4:A7:CB:86:4C:EA:8E:FE:F5:F3:43
Certificate issuer:       /CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
Certificate serial:       010D0C9F43285849D594D04662A4E8EF768F1600
Authority key identifier: 58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/a4aca5d9-3b7d-3a64-9525-72750142f185.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     1299
IP address blocks:        216.144.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:d0:46:62:a4:e8:ef:76:8f:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=34bb2e5a-3018-4321-8561-50ed756c7e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:19:b4:09:ae:49:67:e7:ed:ef:83:9a:0e:16:
                    3f:e6:7a:35:d4:02:8f:9c:18:04:80:0b:56:5e:6a:
                    af:be:30:fc:e2:af:52:ed:93:73:f0:4a:bf:fc:09:
                    5d:bd:3b:a9:b3:5f:4d:2b:e6:68:ea:49:1c:23:b5:
                    de:9d:c7:ff:7c:78:5f:b9:6c:2a:c3:29:a8:7d:02:
                    e5:dc:db:1b:a3:96:53:de:35:08:7d:45:37:59:10:
                    ec:24:4b:5f:81:93:33:64:04:1c:71:f5:3a:53:be:
                    35:68:af:6c:07:ba:8f:75:c9:7a:ab:8d:65:59:4d:
                    16:54:cb:5f:ff:59:2d:90:68:3a:69:85:66:30:da:
                    66:4a:1e:0a:19:4d:79:a8:03:3c:d9:62:96:df:a0:
                    5c:da:4b:1f:e3:4c:cc:75:ea:63:b3:eb:46:a7:21:
                    2a:5e:96:b4:19:d5:69:36:d8:92:62:75:dd:75:4d:
                    00:6d:45:82:a8:b6:42:25:0c:5a:19:83:fd:dd:be:
                    29:3a:b1:86:7b:87:1c:ee:f0:31:11:a2:c8:85:b2:
                    af:e8:2c:6d:f9:36:3c:1e:db:de:d7:ba:6c:fa:30:
                    09:1c:09:3d:2d:39:e2:5e:d4:8b:fd:e0:6a:77:c4:
                    dd:86:ce:61:02:18:2f:6e:08:da:fb:30:f7:9e:f0:
                    20:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:36:6E:69:C6:4E:BA:52:3A:D4:A7:CB:86:4C:EA:8E:FE:F5:F3:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/a4aca5d9-3b7d-3a64-9525-72750142f185.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl

            X509v3 Authority Key Identifier:
                keyid:58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.144.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:20:0a:87:01:74:35:eb:16:18:c8:2b:ea:ed:cc:da:ef:4d:
         dd:d2:be:d7:dd:f7:63:a0:73:0b:41:a1:f6:80:20:22:2d:4a:
         d0:7a:e9:2e:21:78:c2:e4:22:3d:87:94:57:c2:a7:e3:84:7a:
         4b:66:1f:8a:02:77:20:2c:a8:cc:01:76:9a:4d:a1:d3:fd:e3:
         6e:75:7d:bd:93:4a:2c:eb:aa:ed:7e:a8:3d:c8:90:d0:31:19:
         ad:da:11:df:ef:ae:6c:3c:df:58:d2:e8:80:4e:d0:2c:df:fc:
         2e:74:d9:a0:12:15:e9:aa:76:93:0c:69:98:bc:a3:66:cd:80:
         2a:64:9b:1a:6d:64:d8:48:43:67:b4:11:a4:1f:09:d1:fe:60:
         fb:ef:e8:6d:b5:79:c8:c6:28:d9:32:f5:4b:41:53:67:38:56:
         af:89:34:d3:c6:3a:79:85:56:31:64:e1:e5:19:ca:be:74:ba:
         6e:7b:15:b5:61:3a:c5:6b:b5:a2:58:24:64:3f:00:a7:61:ec:
         47:82:10:4b:67:78:02:4e:a0:79:fd:bc:bb:07:11:a9:de:75:
         f4:bc:08:fa:3b:2d:49:2a:39:5e:c8:dc:08:e8:5f:f9:ad:bb:
         04:82:c3:0a:6a:d5:88:04:76:62:1f:a9:d3:37:bc:53:3a:3e:
         cd:37:49:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:02:25 2025 by rpki-client