Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/17a3fcba-33aa-3b78-a608-0eecf0c2eecd.roa
File:                     17a3fcba-33aa-3b78-a608-0eecf0c2eecd.roa (raw, json)
Hash identifier:          cjFdYft+pov/kGXY5m/cLlgCu9RsX28TMFnY/iszS24=
Subject key identifier:   A2:60:35:B7:DE:BD:35:7C:BD:A3:26:2C:70:BA:6B:05:61:DB:28:CA
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F43285849EA85241947ABCA6B4843C580
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/17a3fcba-33aa-3b78-a608-0eecf0c2eecd.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     14618
IP address blocks:        216.115.219.0/24 maxlen: 24
                          216.115.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:24:19:47:ab:ca:6b:48:43:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=7bbf5a1b-8e87-4b67-9fbe-8736a334ffa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d4:a0:83:5b:ad:9e:d5:15:4c:c5:8c:75:d4:
                    55:1a:fe:ac:b3:96:e1:5b:53:fe:84:a4:4d:40:5c:
                    05:08:ef:b7:df:a2:3e:b5:1d:ce:8b:db:6b:b1:0b:
                    07:9f:b8:d4:cb:40:ad:d5:cc:d4:cc:92:74:5c:a5:
                    da:8b:6d:21:13:53:1d:ab:11:5a:20:ba:51:45:bb:
                    a9:20:68:68:84:4d:99:fc:28:77:0b:38:99:f8:06:
                    eb:67:9e:09:6d:eb:15:f2:aa:ad:d4:61:3d:c8:41:
                    66:81:3f:27:cc:9f:f7:90:b0:e2:4d:73:86:c0:4a:
                    57:4a:b6:ad:fa:5f:91:8b:14:11:58:50:1a:68:ab:
                    55:e9:0d:d6:39:60:f7:92:4a:a5:3e:62:15:0f:b9:
                    ad:ed:78:e6:e6:3a:32:2f:f5:83:91:33:86:d8:23:
                    fe:01:23:d7:2e:fa:c7:44:24:5e:01:09:a0:50:cc:
                    31:17:de:da:6b:73:98:14:58:b5:ec:06:5d:b0:10:
                    b6:f4:9c:08:87:72:de:1c:1a:16:92:05:9e:99:b3:
                    53:b0:e1:ea:da:cd:51:e1:33:3a:68:bc:79:bb:cb:
                    d9:9f:b0:38:4a:9b:ce:d3:01:87:13:de:d8:eb:18:
                    e6:72:e9:37:a4:3f:cb:b5:e3:a6:e8:df:a7:4c:2b:
                    2c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:60:35:B7:DE:BD:35:7C:BD:A3:26:2C:70:BA:6B:05:61:DB:28:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/17a3fcba-33aa-3b78-a608-0eecf0c2eecd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.115.219.0-216.115.220.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:37:99:2b:2a:4c:d9:ae:54:15:6d:88:6e:5b:ac:3d:0d:83:
         95:46:a4:40:af:08:96:bc:18:4f:b7:e6:30:d8:1a:54:16:98:
         6d:b4:c8:9e:e9:38:ba:e6:61:19:89:9d:49:6e:77:4d:b9:d7:
         f8:5c:3a:7b:55:bc:ab:1d:c2:ec:1c:2c:30:1b:c8:85:60:3d:
         f5:4f:79:67:d6:87:6b:3f:69:67:f9:c8:4b:23:1b:d9:45:95:
         56:77:fc:6e:4d:84:66:2f:9a:bb:7e:87:5c:1e:13:47:8b:e2:
         26:8e:2a:69:03:b7:b4:46:58:ce:72:9e:e2:f6:81:ef:54:3b:
         73:89:6b:52:7d:ac:10:4d:72:a7:2b:a7:36:21:67:db:20:fb:
         8f:c1:ef:9b:22:57:ab:e4:0d:b5:18:1d:cc:c5:6a:28:d9:1e:
         34:a3:64:6f:3c:38:e7:b5:e9:37:b6:1f:b9:fc:e3:81:a0:7a:
         df:45:a0:6f:77:bb:c7:b2:48:fb:2f:ea:95:6c:6c:50:a6:10:
         06:c5:4a:6a:ea:df:8b:6b:42:59:83:4b:a4:89:a9:92:24:2e:
         64:83:07:4b:31:5e:67:eb:86:a9:64:f3:82:80:d9:15:c4:88:
         92:27:15:37:20:02:54:ec:5e:ec:2d:3a:ea:62:b6:4f:a7:f4:
         0e:ae:af:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:35:10 2025 by rpki-client