Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/6277458b-05d1-3931-a84c-6efb845266a0.roa
File:                     6277458b-05d1-3931-a84c-6efb845266a0.roa (raw, json)
Hash identifier:          gjJlMmF3OZ2OMvN+Uth+bHM8tpB8c5BKE2T3/1O/gus=
Subject key identifier:   A1:3E:16:7D:63:99:05:44:7F:1A:B9:95:41:7B:A2:C6:2A:7F:23:87
Certificate issuer:       /CN=85154141-f81d-4a16-94db-ba21a7f28a12
Certificate serial:       010D0C9F4328584A612B1D30B29DCD94B50FDB00
Authority key identifier: 48:96:90:9B:A0:3F:3D:5F:94:38:41:EE:F9:06:4E:49:64:43:3B:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/6277458b-05d1-3931-a84c-6efb845266a0.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     5650
IP address blocks:        216.38.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/85154141-f81d-4a16-94db-ba21a7f28a12.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/85154141-f81d-4a16-94db-ba21a7f28a12.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:1d:30:b2:9d:cd:94:b5:0f:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85154141-f81d-4a16-94db-ba21a7f28a12
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=aae95298-4e78-44b4-96df-6e24ddac9eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3a:76:cd:ab:80:85:a3:02:e1:bb:e8:6f:f4:
                    dd:fe:c8:03:a7:ad:34:7c:32:e9:cf:40:c1:ee:e2:
                    2a:01:14:0e:b4:ce:bf:37:be:92:85:8a:31:70:96:
                    f1:4e:b6:00:99:2b:bc:a6:46:2a:82:aa:5f:8c:4d:
                    5a:c5:13:34:4e:1e:60:42:bb:99:44:ac:9b:6c:d9:
                    13:1f:49:2a:cf:4c:6d:ec:1d:7d:29:b6:1e:5a:72:
                    e0:48:b6:b8:04:80:34:50:a4:bc:94:9a:6e:b1:bf:
                    83:9b:bc:d9:74:01:4e:ad:fb:1e:82:c4:a6:f6:3f:
                    c9:5f:06:91:1d:8c:69:e4:b7:66:4d:3d:a7:51:2f:
                    91:04:68:ab:39:18:85:76:9e:4f:51:fe:ac:48:95:
                    00:ce:40:fa:45:4d:7b:3f:7e:45:98:cf:a5:dc:f8:
                    4e:6b:dc:4a:9d:75:7d:67:63:44:43:f2:c2:aa:88:
                    1d:55:8d:bd:d0:d2:85:d2:6e:c1:95:f0:12:b8:fa:
                    35:a1:15:27:87:c4:fd:9a:bb:71:f8:50:83:38:e8:
                    7c:05:12:ba:75:e0:6f:e2:08:58:bd:08:d6:9f:49:
                    9f:cc:76:3d:a8:69:11:ba:cc:a6:13:62:7f:66:4b:
                    82:ae:cd:82:17:88:b8:52:63:1f:09:cc:0a:02:61:
                    68:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:3E:16:7D:63:99:05:44:7F:1A:B9:95:41:7B:A2:C6:2A:7F:23:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/6277458b-05d1-3931-a84c-6efb845266a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/85154141-f81d-4a16-94db-ba21a7f28a12.crl

            X509v3 Authority Key Identifier:
                keyid:48:96:90:9B:A0:3F:3D:5F:94:38:41:EE:F9:06:4E:49:64:43:3B:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:ae:56:01:f3:ec:9c:03:07:46:18:24:8a:2d:64:63:6f:07:
         c2:91:de:7b:1a:5f:c5:13:d0:77:3e:18:1b:2e:81:84:73:af:
         05:4f:ef:0c:68:9b:76:75:01:4a:4d:59:1b:15:98:7b:03:a1:
         45:9f:7d:07:ce:b9:ae:7a:ff:0f:59:6d:e9:1d:3c:57:21:8b:
         68:02:86:20:82:49:08:61:a6:fb:12:68:89:9f:61:fb:c0:19:
         4c:2c:e1:b7:6b:b9:21:0b:13:48:7b:24:61:7e:53:af:90:6e:
         f8:6f:06:36:06:8c:ab:2a:8f:60:9f:5b:81:5e:e5:5a:f7:80:
         95:3e:b2:d3:cc:3c:5c:ff:2b:fa:c9:9e:60:53:7a:fa:2d:c2:
         bd:6e:4d:11:ff:77:58:a1:12:ab:95:7f:74:87:b3:ba:c8:9b:
         35:29:f7:81:85:2c:8f:e7:81:78:5b:36:32:9f:c6:9e:d5:c6:
         a5:72:ed:51:6d:39:66:e4:1d:9c:41:68:ae:80:7b:59:30:75:
         ab:81:0b:d2:58:8d:98:21:11:f5:ec:c4:d3:90:3f:8b:8a:93:
         b2:78:6a:b5:6e:4e:10:8a:25:48:34:56:84:67:dd:5b:a2:73:
         49:b3:66:bb:07:0e:15:81:4e:e2:b4:70:87:df:81:5e:d2:cb:
         30:ae:39:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:16:25 2025 by rpki-client