Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b9aef03b-7bfc-3202-80c3-9063e4edf486.roa
File:                     b9aef03b-7bfc-3202-80c3-9063e4edf486.roa (raw, json)
Hash identifier:          wUFHsdKMqD9nvDYsIkfzsSrpu7Zub7QdHQRA2Mci/vg=
Subject key identifier:   8A:D2:7C:87:E7:79:05:D1:D1:1F:6B:FE:BB:80:F2:24:C7:EF:9F:30
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FBDFF737D8504794DFE40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b9aef03b-7bfc-3202-80c3-9063e4edf486.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     63186
IP address blocks:        216.218.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:bd:ff:73:7d:85:04:79:4d:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=45429b7f-649a-4b17-873d-af3a9ee88b37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:55:76:b4:0b:5c:71:81:64:48:7e:49:88:da:
                    b0:8d:e7:cf:0e:6c:39:3c:77:74:a3:e5:10:5b:0c:
                    5e:b8:bd:1b:ed:0b:26:25:27:5a:87:32:e0:1b:53:
                    af:0d:96:b7:dc:6b:d8:4d:b1:1f:ec:2f:dd:9d:70:
                    2d:d7:ec:13:e7:4c:15:92:fb:02:0c:48:68:9e:52:
                    42:e5:40:2e:bb:f1:1d:35:e8:78:eb:83:2b:73:2a:
                    9a:88:81:bd:e4:0c:25:21:a3:0f:27:96:52:f6:07:
                    b8:6f:b0:71:30:c0:2f:0c:ca:ed:b3:2f:82:67:7a:
                    e1:5f:2f:49:d9:97:71:4f:24:d3:4b:96:86:a7:35:
                    01:d8:46:83:cb:0b:f2:f4:fa:56:2a:59:81:36:5e:
                    58:6a:77:df:b3:8d:e1:e1:d0:80:f1:ed:1f:91:ea:
                    98:21:e5:49:57:d5:2c:5d:98:0c:71:b9:6b:f6:1a:
                    57:ae:54:0d:bb:45:57:20:8a:91:23:4f:57:34:86:
                    f0:8a:88:e2:a8:b6:93:b7:a1:86:f1:8a:00:c3:0c:
                    8b:37:70:36:75:62:4a:77:3a:4b:1a:f2:f7:3d:e9:
                    43:10:3c:e9:f3:bd:23:b0:64:a5:59:26:bc:63:8a:
                    a8:c8:95:1f:45:ba:1a:78:e7:b7:8c:17:3c:bc:c0:
                    f0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D2:7C:87:E7:79:05:D1:D1:1F:6B:FE:BB:80:F2:24:C7:EF:9F:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b9aef03b-7bfc-3202-80c3-9063e4edf486.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.218.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:3d:19:2b:a4:fb:89:2e:e2:e0:53:8a:95:bd:1c:cf:ee:8f:
         ec:b4:c4:49:90:b4:fa:26:89:10:8a:87:6b:75:fe:01:e2:04:
         cb:07:b7:2c:65:d8:37:b2:3f:6c:99:45:a2:7b:67:db:64:f2:
         b2:0d:14:3b:5e:99:22:66:4d:da:13:95:37:ca:f7:84:bb:19:
         66:92:44:45:af:92:cb:11:de:84:d2:eb:71:59:1c:b2:64:7e:
         44:fa:1a:df:c3:b4:2f:61:19:37:f5:94:db:42:6a:b9:be:ff:
         9f:dd:62:18:87:34:f0:e3:ed:9f:ec:85:ca:cb:63:90:67:01:
         27:7d:22:c4:b9:b0:66:61:c5:af:5d:dd:6a:de:30:0d:85:71:
         1d:44:00:af:3a:c0:3e:e4:27:1a:45:67:ec:40:ba:03:b9:d3:
         47:5d:8c:56:8b:22:c6:fb:9a:1c:b6:ac:74:75:57:fe:5b:d2:
         34:6d:e6:de:29:b8:de:3f:2f:3b:89:a7:20:2b:bf:e1:d9:b5:
         8c:4b:3c:fd:e4:b0:50:8f:dc:d6:64:c7:7c:67:1e:b7:cd:7d:
         26:31:f6:34:76:7d:2a:56:36:0c:7a:fd:bb:21:6a:ff:6a:c7:
         67:89:09:ec:15:01:af:73:76:91:36:30:73:ad:2b:54:7d:58:
         e5:51:cf:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:51:09 2025 by rpki-client