Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/fc936a75-72c0-395c-a61c-d20afdd52258.roa
File:                     fc936a75-72c0-395c-a61c-d20afdd52258.roa (raw, json)
Hash identifier:          3Vq3epT41qQ6xN3XHOa41F/hqMc/eDT9ceQmgkda4zA=
Subject key identifier:   36:1D:97:23:A2:C6:EC:C3:43:AC:CD:61:F2:BE:8E:91:13:8E:C3:A5
Certificate issuer:       /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Certificate serial:       010D0C9F4328584A58CB0623377DE8FF2849F300
Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/fc936a75-72c0-395c-a61c-d20afdd52258.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     398420
IP address blocks:        216.246.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:cb:06:23:37:7d:e8:ff:28:49:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=e94d3bb0-2618-4b1a-a11a-acf291c1d0ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c2:05:dc:d2:d1:24:8c:17:b9:e8:4e:63:e5:
                    90:71:21:e8:46:cb:17:fd:f9:aa:84:9b:ce:28:b3:
                    9e:a1:87:65:50:f8:a3:d6:b0:16:0b:89:a6:8b:2e:
                    5a:ab:15:71:b8:9d:62:f3:41:9b:5b:8c:aa:ea:dd:
                    17:15:60:bb:e6:2f:6e:82:b4:cb:bf:5f:f6:a8:be:
                    42:cc:46:0c:bb:4f:45:67:df:b4:36:fe:6c:12:df:
                    6e:55:1e:5d:58:2b:29:99:f9:52:58:54:64:9a:f9:
                    48:f1:45:b7:c5:0c:2d:83:c9:a0:6a:04:03:07:30:
                    ee:2c:ae:1f:66:05:74:a2:df:8f:5c:d8:93:4d:91:
                    5f:19:74:d0:43:f9:86:b6:56:fa:ab:28:89:93:9e:
                    f9:77:60:bb:a2:02:0d:b3:a4:84:3d:82:53:1a:8e:
                    e9:35:4c:58:e9:bf:b9:95:79:26:d4:ca:65:0a:f0:
                    f6:f5:a5:45:8c:ae:ed:eb:0c:39:55:5a:2b:6c:95:
                    77:f9:57:6f:5b:10:aa:a9:5a:8a:d1:91:cb:30:e6:
                    09:d5:e2:4f:88:3b:69:77:59:59:c0:6e:98:79:56:
                    1a:d5:04:a7:85:86:76:e5:4a:ad:ba:02:0f:ec:1c:
                    2f:e9:81:9f:c2:f0:eb:41:da:64:e1:43:ea:c6:95:
                    19:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:1D:97:23:A2:C6:EC:C3:43:AC:CD:61:F2:BE:8E:91:13:8E:C3:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/fc936a75-72c0-395c-a61c-d20afdd52258.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl

            X509v3 Authority Key Identifier:
                keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:70:76:57:54:3c:35:01:ce:c3:33:14:8d:b3:46:4f:aa:f1:
         21:85:5b:10:c8:9d:49:a6:b0:16:27:5f:ad:b6:f7:01:b2:04:
         62:b2:ec:1e:14:d5:24:8c:e9:ae:41:98:f2:bc:32:88:90:47:
         8f:85:c3:00:f0:d3:a1:bf:2e:30:68:4b:3b:8c:7c:82:b0:bb:
         d1:0e:4c:7e:78:0e:de:2d:21:5b:b1:01:c8:dc:d9:2b:18:a4:
         96:89:38:17:e0:d8:3b:c9:33:a8:f1:41:04:91:9f:8b:0d:0b:
         e0:37:87:80:c2:91:f2:da:78:07:8f:31:4b:40:7e:42:a2:d3:
         1e:2e:f3:89:56:4b:82:e0:aa:6d:2e:dc:2e:4e:31:d2:82:de:
         f8:9c:ce:10:ac:04:70:12:b0:b9:f4:2e:b8:68:7b:96:1c:74:
         72:f5:4f:de:6a:23:8f:d8:3a:0d:7e:ff:bb:b1:0f:46:8d:67:
         35:74:65:60:2e:5f:7e:e9:0b:e0:9d:fd:e8:07:8a:f8:b4:b4:
         68:74:4e:64:ff:d4:35:4a:51:51:c5:6a:0c:2a:a8:e3:0f:bd:
         bc:85:95:bb:54:78:a5:31:b3:13:18:5b:8a:fa:9f:89:1b:eb:
         30:de:7d:25:78:fb:6a:6b:c9:01:3b:bc:97:a2:78:bc:23:4c:
         f8:34:25:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:11:35 2025 by rpki-client