Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/53b43a00-ba9d-3fbd-b183-d3bc921fdb09.roa
File:                     53b43a00-ba9d-3fbd-b183-d3bc921fdb09.roa (raw, json)
Hash identifier:          0928YEA1EVmbvuWF44nVuGh5bPaTr5NOZZ51SBG7fW8=
Subject key identifier:   03:6D:4C:9D:09:54:DE:72:F9:8D:E8:F2:1F:48:A1:D6:BB:8F:DA:FA
Certificate issuer:       /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial:       010D0C9F4328584ADA9BC74DD8A39773A339CA00
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/53b43a00-ba9d-3fbd-b183-d3bc921fdb09.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     394708
IP address blocks:        216.255.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:c7:4d:d8:a3:97:73:a3:39:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=b617603d-5e7e-4312-8303-75032fb7196e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:15:97:a3:47:0f:fc:2a:be:76:6c:22:4c:0d:
                    75:50:2f:0c:e9:28:ae:71:49:ad:fd:a7:22:aa:ef:
                    13:e3:09:65:0b:d0:f8:10:54:25:03:23:6c:85:b5:
                    fd:0c:25:d9:87:ff:6f:93:e4:68:1c:0b:db:93:02:
                    9d:cd:14:17:b5:78:72:ef:5a:52:8d:09:e8:e6:41:
                    b6:b7:98:9c:c8:47:52:98:3a:4b:1b:59:d5:a4:cf:
                    45:93:4d:6f:c0:66:ac:17:41:5c:60:97:36:c5:1c:
                    d7:58:36:1b:f3:00:5a:65:24:72:97:3d:37:8a:d5:
                    78:2c:f9:93:83:b1:56:84:3d:14:8d:db:1a:ac:0f:
                    9c:77:a4:6a:35:25:71:48:bf:72:2f:16:2b:5e:d6:
                    2d:09:30:43:8d:10:64:88:db:b0:b1:d8:fb:db:0c:
                    4d:29:18:09:ca:91:e6:bb:de:dd:c2:b1:01:54:6e:
                    1a:19:09:88:28:e1:85:2c:4e:0c:a4:d7:6d:ee:1f:
                    df:cc:3f:0b:da:ef:96:f4:d7:aa:8d:33:73:7b:c2:
                    32:ac:0a:3b:55:b8:a7:58:db:bf:e7:e4:bf:00:ef:
                    6c:55:ea:01:39:74:aa:7d:2c:68:cc:79:2f:95:24:
                    da:0c:ec:a4:c2:46:f1:c6:b5:88:62:9b:4c:de:f3:
                    7a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6D:4C:9D:09:54:DE:72:F9:8D:E8:F2:1F:48:A1:D6:BB:8F:DA:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/53b43a00-ba9d-3fbd-b183-d3bc921fdb09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl

            X509v3 Authority Key Identifier:
                keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.255.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:4c:ed:f1:f4:72:0b:21:11:4f:32:19:f2:2f:af:10:6b:6b:
         d3:b5:06:bd:9c:09:b4:1c:0d:81:57:ef:b1:72:63:4c:40:e4:
         07:35:dd:45:db:a1:df:c7:4a:d4:5c:eb:16:32:77:de:51:f1:
         91:6f:84:7c:77:0d:ba:b4:b2:77:e6:97:e9:90:b3:40:46:11:
         fd:9d:90:87:18:8a:ab:9a:58:ab:5c:79:9e:82:3b:17:31:c8:
         a4:fd:42:44:0b:77:8f:38:98:44:d5:1d:c0:41:cd:d0:5d:07:
         07:87:36:b1:31:37:bd:a9:28:f0:91:95:4c:bf:a1:47:e8:68:
         d3:60:3e:ea:f7:e4:16:cb:91:af:8e:ce:b0:fc:bb:b0:f8:99:
         c0:e2:03:d8:69:1b:49:12:e4:6a:90:83:f1:0d:94:96:f0:e8:
         b0:1f:32:f7:0c:3d:e6:50:8e:ff:f4:7a:3c:fe:cc:93:f9:7e:
         80:39:66:e7:8d:19:70:2b:47:22:37:16:e7:fb:f0:92:08:39:
         f5:17:13:92:f7:f5:ac:70:4c:8b:94:1c:78:ba:04:d5:00:d9:
         06:69:f7:cf:10:69:1e:4a:4f:eb:84:7e:5b:35:a5:cf:80:35:
         a8:40:76:82:31:8c:a3:6b:c9:28:e0:44:69:d0:5a:19:53:4f:
         bc:03:89:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 01:28:14 2025 by rpki-client