Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/9b19c2b8-548b-3717-b4c2-25f3fb650aa2.roa
File:                     9b19c2b8-548b-3717-b4c2-25f3fb650aa2.roa (raw, json)
Hash identifier:          nLYcOAWBp31O9VNbHUDhf2jUw+3qdmDyooiuH/mqlIE=
Subject key identifier:   85:77:F8:E3:46:EA:A1:E8:DC:F0:22:BC:1D:04:D3:AE:34:EF:F6:9B
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F432858492CAE87FEBDFB16368218D410
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/9b19c2b8-548b-3717-b4c2-25f3fb650aa2.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     60410
IP address blocks:        16.10.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:87:fe:bd:fb:16:36:82:18:d4:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=e00320a6-5398-484b-af6e-28618fa0c66d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:07:73:d6:a9:4e:91:08:a5:97:f1:2d:2f:5e:
                    6e:68:9c:b6:15:24:a8:eb:4d:9e:69:2f:9e:60:cd:
                    fc:d2:8c:7c:8a:04:86:57:b0:e8:26:db:1f:9d:d8:
                    b3:8c:ee:12:81:1c:55:21:73:d2:89:93:d9:34:5d:
                    c3:0e:d7:cc:ad:17:9b:8a:85:f9:fe:e9:7b:b4:12:
                    b0:ff:04:48:af:d8:be:f5:5b:85:00:c3:cd:e4:71:
                    10:9d:ab:ac:90:dc:59:74:ba:c0:82:19:70:78:f0:
                    9a:79:be:0b:4e:db:cc:d3:3c:0b:e1:71:ac:05:f5:
                    72:f1:91:f8:c0:ee:1d:a6:24:8a:32:d1:52:7a:f1:
                    c1:3e:98:60:b1:fa:c0:ca:6f:b5:9b:9a:10:f5:4e:
                    ba:9a:97:99:60:86:0e:7f:a0:21:2c:40:6d:e1:69:
                    06:1c:04:aa:0c:32:58:6b:32:cc:9b:8f:25:89:e5:
                    60:98:cc:7d:fd:d7:ba:da:c0:fc:e4:87:be:51:8d:
                    25:94:70:47:c1:92:f9:9d:eb:63:a3:05:1b:8d:63:
                    77:ab:76:11:d9:02:1b:48:a1:cd:47:39:68:cf:05:
                    29:69:8d:0d:b6:e2:ce:a9:fa:f5:0d:b1:a8:9a:2a:
                    ee:f2:55:46:6b:b9:f6:f7:25:78:6e:e5:91:87:49:
                    8d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:77:F8:E3:46:EA:A1:E8:DC:F0:22:BC:1D:04:D3:AE:34:EF:F6:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/9b19c2b8-548b-3717-b4c2-25f3fb650aa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.10.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:f6:c7:fe:90:71:85:54:77:e5:8b:89:fc:f1:46:9a:ab:f6:
         50:b9:5f:f5:66:97:da:b6:ac:e8:89:c3:7f:8e:a6:9d:d2:8a:
         23:42:8a:45:dc:09:5c:56:39:70:42:f3:46:9a:37:d7:f0:f0:
         56:1a:a3:ef:db:1d:df:eb:c3:1b:0b:4e:65:3f:0d:a3:63:66:
         0b:08:f7:7a:a6:c0:85:82:b8:3b:aa:31:59:ba:17:13:24:90:
         2f:dd:76:97:fe:4c:9d:59:09:38:43:1b:2e:ba:0b:c6:da:bf:
         a5:dd:03:08:36:38:d9:f8:c4:7d:90:3e:6b:0f:a6:1d:89:d5:
         96:d9:9b:82:6d:80:f8:1a:66:3d:a6:df:77:13:66:10:67:e3:
         88:26:0f:4f:e4:c6:11:02:0c:21:b5:01:ac:12:ce:8d:bb:85:
         0f:e6:d7:91:53:f1:fa:32:0d:2d:0a:2b:22:85:bd:2b:3d:ae:
         33:45:53:41:3a:17:c2:7b:d7:15:3c:3c:e7:a6:e3:27:4e:b3:
         3d:3d:57:1e:d7:ff:08:e0:73:dd:85:50:52:6d:0e:13:7d:56:
         98:71:f1:92:94:5e:e8:67:ea:b0:4f:ad:9c:43:3b:80:68:98:
         4b:ea:0e:d4:6f:5a:02:a9:64:98:27:59:c3:fe:81:35:a9:90:
         1d:d7:38:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:48 2025 by rpki-client