Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/0316894d-22d1-3c70-864c-1c0181c2247a.roa
File:                     0316894d-22d1-3c70-864c-1c0181c2247a.roa (raw, json)
Hash identifier:          WKSI4KT2OgV3IbbCPJ4WZs73itnLHZUZcb0lqg2tLBc=
Subject key identifier:   97:33:57:18:8E:CB:33:D1:C4:C2:A4:AC:E9:FA:7A:B5:42:E0:FD:DC
Certificate issuer:       /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
Certificate serial:       010D0C9F4328584A5D7866E14C097412B9229F78
Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/0316894d-22d1-3c70-864c-1c0181c2247a.roa
Signing time:             Mon 30 Jun 2025 17:13:32 +0000
ROA not before:           Mon 30 Jun 2025 17:13:32 +0000
ROA not after:            Sun 28 Sep 2025 17:13:32 +0000
asID:                     152672
IP address blocks:        216.105.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5d:78:66:e1:4c:09:74:12:b9:22:9f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
        Validity
            Not Before: Jun 30 17:13:32 2025 GMT
            Not After : Sep 28 17:13:32 2025 GMT
        Subject: CN=d4163b8b-62fd-44a9-994a-2d0a6b83b52f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ab:92:0e:8a:84:f1:c7:b8:f3:9f:ad:25:71:
                    d4:f7:93:93:8e:37:11:0c:0d:41:d2:a7:b6:e6:af:
                    b4:17:f2:ac:72:56:13:9e:97:3b:02:8a:92:25:a6:
                    e3:c1:c3:9e:ff:de:df:6a:68:c3:7a:bd:52:29:75:
                    0c:07:96:e2:4f:cc:41:3a:9f:e4:8d:f9:81:bc:e4:
                    2a:22:f9:3c:d9:e7:e4:ff:ec:c4:fd:f7:cf:22:0f:
                    3f:4e:4a:da:86:b8:30:8a:a3:37:d5:ee:15:8c:60:
                    fc:4e:f9:a6:a6:5c:e8:9a:e1:a9:96:6c:ce:a4:25:
                    fa:92:aa:46:2f:06:2a:a1:14:79:a1:75:93:0d:7b:
                    3d:ea:6a:7a:83:37:6c:ad:f8:b6:b5:79:17:be:9a:
                    13:cf:cd:30:ae:94:56:28:94:11:0c:07:fb:bb:90:
                    c1:d0:be:3d:7f:30:b7:24:cc:2f:77:7c:4c:1e:2c:
                    1a:8e:b6:81:fb:4f:31:b1:82:13:d7:76:c5:6e:02:
                    d6:af:0f:e5:ee:f9:53:cb:9c:43:e8:8a:e1:f5:9a:
                    40:f2:ce:9c:cd:0c:4a:a1:c2:79:51:a2:ed:43:bd:
                    c2:a9:7d:7b:8b:e6:e3:41:94:a6:95:14:79:38:df:
                    6b:41:88:96:6a:b4:d8:fa:71:03:ba:d8:a3:13:c4:
                    23:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:33:57:18:8E:CB:33:D1:C4:C2:A4:AC:E9:FA:7A:B5:42:E0:FD:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/0316894d-22d1-3c70-864c-1c0181c2247a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl

            X509v3 Authority Key Identifier:
                keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.105.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:ba:8c:ad:29:bf:4e:a0:86:8e:69:d3:16:e8:04:85:25:e8:
         b1:11:0d:05:5a:76:c8:56:a6:19:d4:66:b2:ff:51:6e:2f:5f:
         fc:39:46:04:bd:3f:ef:80:2e:d9:15:9b:7a:79:fd:1e:80:65:
         d5:76:d9:44:c5:e9:da:5b:94:7e:fa:01:42:60:17:32:e7:4d:
         2d:c2:90:ef:0a:8c:3c:e3:3a:d3:cb:56:d6:53:2f:77:09:81:
         13:1a:b0:50:74:b8:1c:7a:77:98:fc:93:d5:a3:40:c4:f3:1b:
         d2:c8:b5:7c:10:7b:95:0d:8f:94:3a:2d:0e:9e:7b:63:17:b7:
         10:47:71:2d:24:40:3e:8b:35:39:5c:ee:49:1e:8b:c6:ba:10:
         7a:7a:38:e1:44:98:4a:8d:ea:02:65:40:de:b8:05:a3:b4:ee:
         ec:4d:cd:ba:15:49:cb:a1:89:c0:64:f1:39:52:2e:a3:8b:00:
         58:a8:f9:ed:01:52:8b:21:cd:43:18:9d:a8:1f:27:49:45:b2:
         46:17:c3:86:f1:83:ac:bc:69:69:e0:d9:6a:60:f3:91:d3:45:
         2d:f0:d7:40:fa:d1:4d:cc:2f:90:30:7e:f8:c1:5b:4e:b9:d3:
         ce:39:0a:f0:fb:5b:eb:42:13:c5:ec:16:5c:fb:31:30:cd:86:
         51:43:06:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:47:10 2025 by rpki-client