Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/9b19c2b8-548b-3717-b4c2-25f3fb650aa2.roa
File:                     9b19c2b8-548b-3717-b4c2-25f3fb650aa2.roa (raw, json)
Hash identifier:          dwdGHyum4O1K3e1DCrG1d+Uk0i7KnRr9KTq136HMSPk=
Subject key identifier:   E0:E4:8B:B0:57:1F:F7:96:60:D2:0C:AF:F0:6D:81:C1:58:49:FF:3E
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584A0C055C73B8CC3A4492952A40
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/9b19c2b8-548b-3717-b4c2-25f3fb650aa2.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     60410
IP address blocks:        16.10.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:5c:73:b8:cc:3a:44:92:95:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=eee7a363-5f14-4ef5-9dd1-67c363f003d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:56:c3:4b:5a:1d:c0:55:0f:8c:b6:8b:93:af:
                    e2:e7:d2:ff:5e:ea:9d:33:f7:9a:2e:a3:95:3e:bc:
                    31:4b:cf:68:59:64:29:80:1e:62:05:5f:5f:2e:43:
                    07:71:47:93:73:b5:1a:88:f7:1c:af:95:fc:06:af:
                    31:8c:b4:30:01:e1:89:ff:19:f2:3e:4a:df:b3:e2:
                    5f:53:3e:d0:7b:31:46:d5:f0:18:6b:b6:0d:12:dd:
                    79:b9:31:63:0d:fa:00:13:48:97:60:49:7e:1c:f9:
                    df:73:8f:01:41:65:a7:1f:71:ab:39:0e:13:d2:65:
                    aa:e4:b2:15:42:e5:30:08:52:f0:4d:b6:cd:7a:f7:
                    da:dd:20:7c:60:cb:79:72:d7:23:9c:29:04:ed:40:
                    8e:56:56:0c:40:81:96:56:31:3a:ff:ea:cb:d8:85:
                    1d:af:aa:34:52:ba:83:1f:62:9e:9b:db:64:e8:15:
                    0a:ad:23:af:e1:5c:2f:c2:70:74:48:ee:99:10:20:
                    8d:86:38:1d:b5:a5:f4:06:c8:0e:25:66:d1:42:f2:
                    68:8a:df:93:e7:c1:d2:c2:b6:c4:5d:83:bc:90:dc:
                    14:0d:28:08:2f:e0:72:14:ba:40:b8:5a:7d:89:8d:
                    74:62:0a:52:ec:cd:66:5a:09:f7:90:11:7b:ef:f0:
                    21:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E4:8B:B0:57:1F:F7:96:60:D2:0C:AF:F0:6D:81:C1:58:49:FF:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/9b19c2b8-548b-3717-b4c2-25f3fb650aa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.10.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:b9:50:b0:08:e3:85:7a:10:c2:02:4f:64:db:e8:e3:d7:e3:
         0a:8d:70:f0:d2:07:21:27:34:1b:48:a1:b1:8e:b4:8a:62:fe:
         5f:d3:67:d4:57:30:a6:19:0a:0b:f1:37:0e:f3:1a:52:0b:15:
         85:9f:a5:c7:eb:3f:a5:c2:a6:85:1c:1d:7f:ca:20:ef:e8:ba:
         e5:6d:83:0e:7a:49:24:4c:b8:8b:f7:df:4e:0a:f1:ea:25:dd:
         a7:fd:43:84:52:7d:21:18:d7:06:a7:95:ba:e2:39:b0:f5:2d:
         3c:52:68:6e:16:b5:dc:6e:a6:35:1f:ae:89:8a:e8:69:e4:f3:
         01:f7:5a:68:08:2f:6a:6c:6d:40:10:be:16:f1:e3:d3:5d:b3:
         28:0a:7a:fd:55:bb:68:c9:e0:ac:58:45:db:2d:a9:18:9c:f5:
         6a:a9:45:90:15:ea:f8:bc:6a:af:8e:37:83:55:19:f9:4c:04:
         29:94:16:64:51:a3:7d:95:dd:64:9e:e5:bc:0b:3a:cb:47:59:
         f8:fd:1e:aa:a0:56:d7:93:2e:d6:18:ff:a8:19:50:57:a4:3d:
         34:c6:c0:04:4c:62:81:06:67:e1:46:e5:c9:f3:9b:54:be:cf:
         5c:48:be:cc:a9:29:eb:b4:95:8b:bd:70:38:a1:37:14:ea:58:
         56:1f:9a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:04:25 2025 by rpki-client