Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/21129860-609f-3da1-9382-4974b5457f3f.roa
File:                     21129860-609f-3da1-9382-4974b5457f3f.roa (raw, json)
Hash identifier:          AwXe9Gj1rUktkvgD+1UqvqirGWI+O9I+I2wX96iPTDk=
Subject key identifier:   CC:3D:5C:F7:DA:ED:1E:5B:62:93:AE:7D:C3:66:BB:1F:22:93:84:09
Certificate issuer:       /CN=8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21
Certificate serial:       010D0C9F432858496FAF1491B41B33C96B5403C0
Authority key identifier: E0:74:39:2A:DB:94:E6:D4:23:34:5D:A9:61:BB:0F:28:E4:B2:76:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/21129860-609f-3da1-9382-4974b5457f3f.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     26284
IP address blocks:        216.250.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:af:14:91:b4:1b:33:c9:6b:54:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=0bd4a719-e191-45ad-a975-27f2c941de21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f5:2d:54:1a:72:15:45:dc:9c:21:a5:0b:82:
                    50:ee:a7:3d:91:57:cc:3d:ed:bd:56:e5:a1:e7:c3:
                    4f:5c:b6:d1:12:ed:cd:5c:c4:d9:7d:dc:50:20:86:
                    e2:58:a0:23:c1:e8:e2:3f:fc:5e:92:7c:b0:ce:07:
                    0a:79:c9:fa:26:a8:b2:d8:50:a5:9c:8b:c2:01:66:
                    38:2b:6e:9b:54:00:50:6e:83:a7:5d:7c:d0:af:11:
                    b2:df:da:b9:db:5b:ef:62:88:f6:1d:1e:39:95:ea:
                    32:74:18:2c:34:7c:39:61:02:75:23:f5:fd:4d:0b:
                    b9:54:74:b1:c5:d3:71:de:6f:21:0f:80:cd:d9:e2:
                    d3:a0:70:1d:1b:36:3a:2a:e1:6e:87:84:24:f9:68:
                    95:90:e7:96:48:13:f0:1c:50:8e:5a:79:14:91:28:
                    79:25:cf:49:40:03:92:96:09:64:27:07:89:f5:7d:
                    6d:29:fd:c5:b4:18:50:82:d9:4d:33:94:e8:12:82:
                    33:11:77:73:62:19:c4:9b:ab:d3:7a:b7:1c:21:77:
                    52:30:f7:8d:70:f1:e5:cd:a7:50:4d:6e:05:d5:d1:
                    87:82:19:ea:cd:b0:81:73:d0:97:5d:b2:01:fd:cc:
                    ad:e8:98:1a:62:2e:ce:e9:9a:27:7e:5d:74:67:fd:
                    36:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:3D:5C:F7:DA:ED:1E:5B:62:93:AE:7D:C3:66:BB:1F:22:93:84:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/21129860-609f-3da1-9382-4974b5457f3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.crl

            X509v3 Authority Key Identifier:
                keyid:E0:74:39:2A:DB:94:E6:D4:23:34:5D:A9:61:BB:0F:28:E4:B2:76:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.250.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:99:18:18:d9:34:f2:c5:bb:d4:53:e7:4b:e3:65:ed:fe:36:
         a3:65:7d:21:74:13:e8:5e:05:56:0a:e6:a5:6d:a2:d3:2c:96:
         65:46:c0:bc:fb:68:42:9d:4d:90:0d:00:7b:46:ab:16:47:24:
         d8:69:2d:b3:27:d0:53:1f:41:61:52:6f:74:75:ee:05:f2:21:
         3c:e3:f2:62:84:d9:11:28:99:d8:3a:3b:9c:63:ef:f3:1b:04:
         72:d6:da:26:e8:4b:ba:1e:54:af:b5:1b:31:17:a1:7f:b0:a6:
         1b:9e:a5:3c:20:a3:ef:7d:28:f3:60:09:76:42:2c:f0:83:60:
         09:89:5b:45:5c:e3:8e:5d:62:26:8a:b6:5c:78:9e:c1:3f:d1:
         99:dc:e1:d6:b1:4c:6d:e6:01:78:5c:16:c0:97:83:51:23:29:
         72:5d:05:da:44:54:ec:7d:20:08:6b:ac:11:96:3a:07:85:f0:
         28:03:db:e5:19:ed:9d:2a:b2:a3:1a:8b:f0:e6:95:2d:fd:28:
         53:80:34:47:72:36:dc:42:3f:7c:90:ed:31:f6:e4:fe:47:0b:
         18:76:26:60:53:fd:e3:75:85:d9:e0:82:a7:50:9d:08:a4:08:
         fa:e0:4c:a1:1d:8e:43:2d:ed:89:9f:cf:d8:90:7d:39:b1:67:
         ee:f0:96:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:05:18 2025 by rpki-client