Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/342e01d8-199d-3c33-b2e9-aa985dc80d7f.roa
File:                     342e01d8-199d-3c33-b2e9-aa985dc80d7f.roa (raw, json)
Hash identifier:          Ds7puqhbgU1GM475pMwB7L1Fssm3hD6Q0soVjvRVSnQ=
Subject key identifier:   C3:C9:7D:16:48:14:73:93:85:55:63:A9:E0:4B:9B:90:78:F3:53:04
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849AFE498E87ADB3AC9DA2A8340
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/342e01d8-199d-3c33-b2e9-aa985dc80d7f.roa
Signing time:             Tue 29 Apr 2025 13:00:52 +0000
ROA not before:           Tue 29 Apr 2025 13:00:52 +0000
ROA not after:            Mon 28 Jul 2025 13:00:52 +0000
asID:                     46188
IP address blocks:        216.66.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:af:e4:98:e8:7a:db:3a:c9:da:2a:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 29 13:00:52 2025 GMT
            Not After : Jul 28 13:00:52 2025 GMT
        Subject: CN=8575f0ac-ad10-407f-be76-5e21a635e3a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e2:82:c1:a8:68:de:13:2f:12:e3:71:83:38:
                    8a:af:cc:55:bb:6b:59:93:ae:d6:03:4c:91:c8:86:
                    6d:20:a6:b0:93:29:39:ae:de:e6:e3:50:85:8a:83:
                    cb:bd:30:64:20:aa:6c:a8:63:01:d1:b3:88:7c:88:
                    a0:ae:0b:4a:66:c7:8d:0d:7f:67:66:82:c8:62:43:
                    c9:85:41:09:17:c4:3b:33:c8:3c:cb:2d:bf:d9:e3:
                    11:68:31:ba:f4:ea:de:37:29:dc:c9:b2:ac:95:3c:
                    44:e3:7e:d6:e0:c6:fd:7e:4d:68:2c:f5:92:b3:ea:
                    62:14:b1:be:85:ad:9b:1e:84:e8:39:56:dd:0e:2c:
                    a2:a1:d6:d2:3d:71:4c:81:0a:1f:0c:ec:5c:91:f8:
                    e4:b4:3f:a5:51:78:b7:74:cf:e5:de:c1:0f:be:13:
                    20:ed:fa:db:32:4e:d5:5d:8b:ae:3b:0c:b3:20:55:
                    83:a0:e0:be:c5:3d:c1:a1:6c:bf:28:91:f5:54:2d:
                    70:99:a7:65:01:2c:8e:56:fd:9c:33:63:1f:ee:28:
                    73:b4:9f:6a:5c:42:57:b0:13:14:b7:5c:55:91:ca:
                    d3:f4:3e:e6:b5:e1:61:9b:75:76:40:33:92:60:85:
                    7d:45:ae:fa:4b:59:6a:ef:04:06:6c:03:59:e9:70:
                    d6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C9:7D:16:48:14:73:93:85:55:63:A9:E0:4B:9B:90:78:F3:53:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/342e01d8-199d-3c33-b2e9-aa985dc80d7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:63:6e:d0:7b:ce:9e:12:9b:1b:8a:53:31:a8:d2:d7:d8:24:
         d4:f1:76:90:7a:8d:79:db:e8:3d:ee:46:b2:bd:d1:1e:00:2b:
         a8:fe:d7:87:c3:ca:ad:32:b8:47:37:ce:0c:97:20:23:63:76:
         cb:a8:81:ef:2f:2f:d8:65:e0:6d:c5:fc:e2:b9:6c:62:75:65:
         7f:60:8f:32:78:f8:38:53:88:0a:ca:8c:56:b7:02:dc:04:5f:
         75:a7:af:63:23:5d:18:a0:8a:9e:67:98:a9:77:d4:cb:1c:6a:
         f8:75:ce:20:e9:7a:02:4e:1e:fc:51:5a:2c:73:77:e6:04:5f:
         3a:07:58:12:a7:d9:01:a7:65:5d:9b:b2:38:53:9e:98:cf:37:
         98:bf:4b:46:5c:52:e8:e0:fd:73:8f:85:16:02:63:5a:3a:41:
         72:ff:f7:0c:e1:f3:ea:9a:f8:87:7e:b0:76:01:07:f3:44:14:
         20:ab:93:71:98:92:69:71:04:3b:0d:48:c2:d8:20:79:37:8c:
         63:31:60:44:dd:b8:31:dd:2b:9b:d2:51:a3:18:9e:48:cc:f8:
         93:a9:53:80:fc:97:b1:7b:1a:8a:6c:e8:13:d2:15:1e:ce:76:
         27:24:e2:f2:e2:35:58:1c:b0:08:4a:9b:6d:a0:6a:3a:a5:d1:
         88:81:94:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:19:19 2025 by rpki-client