Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/560d9895-d1b4-35ae-84a0-8ffa14938611.roa
File:                     560d9895-d1b4-35ae-84a0-8ffa14938611.roa (raw, json)
Hash identifier:          0mRS7vFgLNG24HbBPN9boO3QUzGflcUSkiW3jii7KhI=
Subject key identifier:   F2:8E:92:45:EE:39:BB:7F:47:0E:42:40:B6:41:07:34:34:C3:5C:4E
Certificate issuer:       /CN=7d6bea32-db4c-4326-93a0-713364b8aa44
Certificate serial:       010D0C9F4328584A12FFDCFD12DA82F11A589900
Authority key identifier: D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/560d9895-d1b4-35ae-84a0-8ffa14938611.roa
Signing time:             Wed 04 Jun 2025 01:00:50 +0000
ROA not before:           Wed 04 Jun 2025 01:00:50 +0000
ROA not after:            Tue 02 Sep 2025 01:00:50 +0000
asID:                     22351
IP address blocks:        216.250.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:12:ff:dc:fd:12:da:82:f1:1a:58:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d6bea32-db4c-4326-93a0-713364b8aa44
        Validity
            Not Before: Jun  4 01:00:50 2025 GMT
            Not After : Sep  2 01:00:50 2025 GMT
        Subject: CN=877530f6-ecea-4524-8583-1ab5aec792a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b4:41:86:5a:df:ed:aa:46:f0:ae:a7:4e:1f:
                    1c:24:08:c7:29:83:bd:d5:de:90:4d:f8:a2:88:63:
                    6e:31:c7:6c:92:98:22:c3:f5:7e:c0:f1:74:10:66:
                    b5:25:68:a6:60:24:08:13:81:b4:65:95:b2:87:6b:
                    4e:44:ba:6c:a1:7c:33:97:64:81:1e:97:ea:ab:86:
                    61:4a:2e:fe:47:7f:5d:a4:76:f1:c3:29:58:1d:6c:
                    73:78:56:42:67:36:c3:59:23:47:74:a0:eb:22:6b:
                    1f:5c:d6:1b:82:a8:4c:21:4d:52:37:a4:be:bb:05:
                    c2:ca:49:9b:55:6a:c3:8d:f9:74:93:df:4e:b5:87:
                    6b:e1:5a:59:b2:46:a3:a3:a3:5a:02:8d:99:15:0b:
                    36:ff:00:e9:c5:13:fc:a3:7e:a0:d8:65:f5:0a:01:
                    eb:64:45:29:3c:97:fb:4e:45:97:60:cb:9f:3a:d7:
                    1a:3f:12:57:80:b2:ba:4e:de:28:aa:84:40:e9:03:
                    73:14:4e:b1:69:7a:e5:39:90:78:26:01:f7:63:60:
                    42:3e:56:00:2b:4e:21:5c:9a:aa:b8:29:14:1a:91:
                    22:54:55:37:3d:ea:f9:97:2c:45:e0:ad:15:6c:0a:
                    2c:2a:69:41:67:6d:52:7a:8a:3b:d8:2d:7e:a3:af:
                    a4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8E:92:45:EE:39:BB:7F:47:0E:42:40:B6:41:07:34:34:C3:5C:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/560d9895-d1b4-35ae-84a0-8ffa14938611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl

            X509v3 Authority Key Identifier:
                keyid:D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.250.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:4e:65:88:87:9c:f2:66:f3:da:62:f9:56:38:32:b6:6d:70:
         6d:41:e1:91:1c:b8:c8:7a:fb:a3:01:4a:7d:62:4e:0c:b5:9e:
         85:b5:86:53:c8:71:ff:54:2d:00:1d:0f:d3:41:6e:00:e6:0e:
         18:e6:cc:3f:8f:40:3f:29:f4:ef:c1:0a:da:13:fc:7d:e8:fc:
         d6:b5:80:34:58:60:4f:a4:1f:9d:bc:e6:e8:1c:ae:7a:7d:06:
         99:92:c6:c8:d4:05:88:eb:87:2a:ce:39:84:b3:01:24:71:ba:
         0d:ad:25:8f:3f:11:a8:79:2f:e2:3c:20:a1:d4:6a:b4:22:a2:
         cd:cd:cb:b4:c3:9c:54:ea:31:e1:79:f2:69:ab:84:27:04:cd:
         22:68:c5:b9:e7:4f:4d:cb:2d:14:73:5d:e6:79:26:87:e6:22:
         1f:4f:13:f8:ff:72:d7:c8:41:e8:f3:33:ac:a2:a4:b1:b9:30:
         f3:8a:57:06:7e:85:7f:e8:d0:f7:bf:f0:26:04:b7:3d:99:27:
         64:95:75:f6:cc:a9:b6:80:a2:b7:a7:bf:04:08:f3:6e:84:2f:
         dd:12:ba:3b:aa:42:3c:16:76:a3:2b:e4:f6:9d:56:fe:0a:9c:
         62:02:ba:24:5e:76:eb:a0:0d:31:51:d8:98:dc:0c:af:c0:a8:
         fb:f7:47:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:36:49 2025 by rpki-client