Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e4b01834-8b58-3933-9837-0bd7809c602d.roa
File:                     e4b01834-8b58-3933-9837-0bd7809c602d.roa (raw, json)
Hash identifier:          MTIqx0pmUW71wBZ8i5eH6Hq9IuVdGWXM4b/GfQLw7u8=
Subject key identifier:   50:97:2B:C5:34:DB:32:5B:60:94:CA:2E:F8:F6:B2:E8:3F:EA:0D:0E
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A7A4B3747CE2B5B176FF7C280
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e4b01834-8b58-3933-9837-0bd7809c602d.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     852
IP address blocks:        172.218.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:37:47:ce:2b:5b:17:6f:f7:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=dafe556e-9ce8-4ded-9c84-be8aeaa3c78e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b2:75:d5:ec:15:22:00:9a:a5:2d:a2:77:81:
                    e3:3d:39:93:f3:b1:72:cf:b1:30:28:1a:df:ed:a3:
                    4c:5f:39:34:6e:63:8c:e8:35:50:e5:55:12:5a:89:
                    70:0f:0a:7c:a8:65:0d:21:61:28:34:a3:9d:20:91:
                    86:25:f4:40:0f:21:98:d0:b5:42:24:71:5e:1f:d2:
                    98:42:e3:7c:51:10:77:36:ea:08:6e:f2:40:b1:5c:
                    fb:ed:0a:83:c9:33:03:fa:13:82:0c:7e:49:d0:65:
                    5d:2e:58:20:93:4e:70:d3:e8:12:63:8a:68:d5:e4:
                    16:de:46:ff:27:d5:ff:3e:87:f7:2b:df:66:f8:04:
                    ef:ae:74:30:07:0f:94:48:24:c3:03:b1:d9:68:4d:
                    2a:d2:1d:3e:92:90:9c:df:bc:59:89:ba:24:3a:d9:
                    a0:be:f1:7c:3f:a2:24:e8:f6:2b:c0:9a:cc:8b:79:
                    b4:96:dc:c2:cd:2c:1f:39:98:64:eb:ca:12:30:6f:
                    98:8c:1b:cc:35:36:31:be:85:09:33:92:d7:68:a4:
                    c5:90:56:1f:b2:56:9a:7d:07:d3:5b:17:1a:73:20:
                    65:98:45:eb:92:71:9a:03:95:83:b9:45:9c:a4:f7:
                    d4:96:a4:d1:29:3c:a4:cb:f7:4b:2d:2a:83:92:35:
                    bb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:97:2B:C5:34:DB:32:5B:60:94:CA:2E:F8:F6:B2:E8:3F:EA:0D:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e4b01834-8b58-3933-9837-0bd7809c602d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.218.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:6b:ff:5a:0c:22:e7:28:7d:64:2b:9c:45:55:8b:c9:13:6c:
         90:25:c6:1c:97:66:f3:b6:d6:02:ce:dc:18:af:cd:b3:69:c7:
         ae:0c:46:c2:de:a0:14:56:17:22:9a:d9:75:aa:1d:f6:90:cf:
         69:97:1c:aa:e8:0d:12:81:29:80:8e:86:e6:2d:75:b6:33:d5:
         b0:9d:24:53:c3:19:8b:e6:88:85:a2:28:10:ef:35:c4:40:58:
         b3:7d:48:6b:85:a6:eb:b8:e4:1d:c1:4d:31:02:7f:5a:c2:c5:
         09:48:84:dc:b7:04:cc:83:8a:41:25:08:45:5a:ca:bc:1a:bd:
         eb:0d:5f:e4:67:e9:cf:d8:21:5a:09:80:8b:7e:8d:49:aa:62:
         cb:a4:9d:46:61:f7:18:02:f9:04:df:13:1e:07:b1:5b:cb:d6:
         76:ad:3f:96:06:68:2c:af:db:8a:fe:0a:26:ea:1a:04:c8:92:
         2d:f5:34:e0:a1:bc:8a:46:f0:0b:56:00:ef:f8:2d:e8:f3:11:
         c9:a9:92:84:66:66:2b:2d:ab:27:76:c6:a6:23:68:e8:57:64:
         c4:92:7b:f0:df:22:73:ab:95:67:54:1d:ba:37:05:ba:c2:f6:
         a2:2b:a2:a0:df:71:c8:a2:66:21:a7:1a:ff:c1:70:54:04:04:
         5e:3b:5b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:39:01 2025 by rpki-client