Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/ec53920a-a403-3eb2-9f0f-ae8b9f6aa61c.roa
File:                     ec53920a-a403-3eb2-9f0f-ae8b9f6aa61c.roa (raw, json)
Hash identifier:          AlgE+ImaLWzgCAdTd+IOVO9p1rCLEMOj0p67K99/m48=
Subject key identifier:   F0:3E:CD:B2:E6:AC:AE:F0:FE:62:18:E3:89:5D:3E:37:C8:32:E3:4B
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F4328584A7350992DAC54AB478681B300
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/ec53920a-a403-3eb2-9f0f-ae8b9f6aa61c.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     4213
IP address blocks:        216.176.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:99:2d:ac:54:ab:47:86:81:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=52573613-7242-4ea7-a84a-e58562fb6831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:af:c2:d4:ac:b3:de:84:f5:3c:7b:27:2f:ef:
                    99:5a:37:cd:2a:96:3f:0c:40:27:55:54:cd:3c:91:
                    f2:08:bb:09:92:62:2d:e2:11:61:64:84:c0:89:2e:
                    6f:4a:db:7f:be:75:7c:e2:06:76:7b:96:19:77:4a:
                    a3:71:cb:a8:db:c3:53:34:30:20:5c:ac:f7:de:82:
                    47:21:22:c6:ec:f8:8b:40:f4:94:8f:9c:18:ff:9d:
                    ac:03:66:0c:20:96:45:62:16:69:ea:34:41:3f:c0:
                    5b:d2:0a:c3:1f:b9:12:66:f3:63:9e:8b:bd:8d:11:
                    17:d1:c4:ec:ec:24:63:df:0d:19:bf:0f:22:39:58:
                    94:df:a5:11:06:9a:c2:b2:29:27:49:ff:67:e0:8b:
                    74:e6:f4:0e:bc:81:a4:9e:29:b2:be:b4:51:4d:b8:
                    92:52:e5:b9:00:9e:6c:52:91:ef:14:29:54:7e:e2:
                    07:21:ad:ca:eb:93:f4:ab:37:f4:e6:22:f8:d8:68:
                    5e:c8:26:3b:91:c2:7c:cd:31:fa:3d:7c:8f:a9:68:
                    38:45:6a:ae:eb:01:45:44:c8:26:a4:28:33:3a:c2:
                    a6:97:66:6b:b4:5c:63:b5:3a:80:c0:d9:f1:78:0b:
                    7c:a2:82:aa:61:9b:5d:b8:83:84:3e:f6:50:5b:ea:
                    55:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:3E:CD:B2:E6:AC:AE:F0:FE:62:18:E3:89:5D:3E:37:C8:32:E3:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/ec53920a-a403-3eb2-9f0f-ae8b9f6aa61c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.176.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:0f:0f:19:a1:ed:0b:91:d1:69:ad:38:26:a7:ca:55:1f:29:
         08:12:f7:cd:5e:02:90:3f:a6:ad:c1:3d:28:eb:a2:4b:8a:03:
         47:61:01:01:87:6d:80:42:70:39:71:87:c1:c0:f1:5a:30:b3:
         6f:c7:bf:83:5f:df:76:26:83:61:fe:79:9a:70:d7:4a:c6:7c:
         a7:3c:a9:3e:c9:c9:4c:6e:b9:06:8b:d7:03:f9:f3:ae:a1:db:
         da:f2:20:8c:65:bb:fa:56:60:f1:2d:58:bb:0f:cf:02:b5:cf:
         a4:7a:51:0f:72:66:57:e2:68:ce:40:7a:fe:88:6a:5f:67:ea:
         de:b1:91:a9:40:40:82:63:87:a4:b0:2e:1a:5c:49:af:96:8d:
         ef:d9:e3:31:c1:a5:33:65:4a:e4:8d:03:99:0d:e1:a9:da:d1:
         b0:5c:28:b0:32:83:ed:82:98:ea:71:0b:dd:d0:8f:ee:b1:09:
         76:59:b5:0c:72:7d:37:df:fb:f8:dd:7a:c3:51:23:ed:8b:bc:
         39:18:43:c2:13:8d:49:53:5c:6f:b1:30:27:00:01:e5:19:10:
         5a:76:bd:ea:4d:b9:c8:bd:c6:9a:ff:aa:79:80:e2:1c:df:e6:
         ce:ad:f5:60:19:89:06:8c:ae:e9:36:e4:58:08:21:2e:94:6f:
         fd:cd:1c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 23:55:54 2025 by rpki-client