Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/49f7fa60-cced-3dc5-99ae-6941116583df.roa
File:                     49f7fa60-cced-3dc5-99ae-6941116583df.roa (raw, json)
Hash identifier:          epP78WfzOxwL7X9szdcXmLXELBggO+9oOLTa11NFeFQ=
Subject key identifier:   F3:B6:6E:07:3B:C1:A4:75:53:63:10:F7:CD:1C:44:9A:FB:48:2A:FE
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F43285849D594E2215CFA100FC3334480
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/49f7fa60-cced-3dc5-99ae-6941116583df.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     12129
IP address blocks:        216.150.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:e2:21:5c:fa:10:0f:c3:33:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=6c5b97a7-df3c-4108-977f-db7d008d1760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:18:c1:be:27:2f:e2:69:68:ae:9b:f7:2e:6f:
                    0b:49:93:5c:8f:8b:91:78:14:77:60:5d:ac:70:c1:
                    d9:26:80:22:bd:7f:bb:6c:f7:ba:de:33:5e:77:7f:
                    ae:f6:c5:b3:b0:ba:da:dd:4e:ae:38:3a:fc:8a:1e:
                    38:08:bc:e8:c1:d7:cb:64:d3:0d:60:2e:91:4c:d3:
                    ca:3c:84:f1:59:ca:b1:f7:74:ba:00:e0:99:4b:af:
                    6f:ff:96:fc:a7:25:54:38:d6:b3:54:fa:e1:c0:9a:
                    27:e2:8a:a0:3b:26:3a:c9:c8:5c:6a:1c:ae:9a:fb:
                    01:e5:17:aa:e9:08:26:8f:9e:3e:a7:72:2d:d8:1b:
                    e6:13:32:19:6b:0d:a0:95:da:58:03:1a:2f:83:a7:
                    c4:c3:be:19:db:1a:3f:f9:64:f7:5b:b0:60:62:35:
                    f6:c9:61:1a:05:00:c3:15:40:96:2d:48:a6:41:ec:
                    a0:19:11:e0:7f:18:e5:e4:98:51:07:f3:39:46:01:
                    bb:07:d9:28:e5:03:a7:1b:8c:57:2b:48:8b:75:57:
                    33:2b:14:6d:a1:0e:6b:3b:16:c5:65:cc:c6:6b:a9:
                    65:fe:db:22:2a:4c:e7:b3:44:bc:68:2a:a4:e8:74:
                    d5:cd:74:c1:40:17:84:4d:11:51:fa:2a:e4:16:a1:
                    f6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B6:6E:07:3B:C1:A4:75:53:63:10:F7:CD:1C:44:9A:FB:48:2A:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/49f7fa60-cced-3dc5-99ae-6941116583df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.150.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:14:c1:30:36:7d:c2:80:cb:b6:f1:13:3c:a0:29:87:03:ba:
         45:c2:78:25:11:13:10:0f:80:21:b3:30:ea:b7:d0:c4:91:c2:
         6d:7a:13:0d:88:a5:46:ac:02:37:7f:36:e3:fd:06:1a:1b:ae:
         3c:cb:bd:df:09:32:b2:10:61:15:33:eb:6c:f1:4d:97:c4:65:
         e9:d5:6a:ff:ee:de:74:e8:b6:6c:ed:49:f1:eb:e4:7a:c8:b9:
         06:b7:5e:df:77:f8:f9:43:d7:cf:5a:95:ff:90:e9:dc:b4:04:
         6f:4f:67:d6:c8:58:9c:ef:9e:84:64:55:53:a2:bd:c9:06:0f:
         c2:83:eb:6b:7d:bf:bd:71:ed:75:25:2d:a0:e9:df:c8:c1:8b:
         0f:cf:11:d1:0c:21:a0:c4:46:8c:36:7d:c1:4a:c8:39:98:f8:
         1c:83:12:51:b2:fe:5b:ad:de:4f:b7:f6:a1:0e:3f:44:eb:22:
         a3:84:95:b4:f3:66:3a:57:8a:68:70:02:dc:2d:7c:11:e2:b3:
         c2:9c:6b:eb:10:11:8e:ce:62:40:c4:0e:03:0e:24:18:31:53:
         de:09:38:2b:b8:6f:3d:b5:d8:29:d9:de:c3:96:37:9d:6c:f8:
         02:23:68:d4:e6:81:82:f4:ec:59:dc:dd:67:79:71:0f:d5:26:
         92:91:7a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:20:45 2025 by rpki-client