Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/09721c6a-44cc-39ee-b648-6f47e10cc058.roa
File:                     09721c6a-44cc-39ee-b648-6f47e10cc058.roa (raw, json)
Hash identifier:          RTfzfsLiq4NwHq3k9W5HRodeEzdu9JK+p+OtQkWs7nA=
Subject key identifier:   82:8D:7B:29:13:13:FA:79:FF:57:7D:04:4C:60:5E:E6:C2:19:E8:B0
Certificate issuer:       /CN=5eb81838-6cf7-4c1f-bf73-eeec087e471a
Certificate serial:       010D0C9F43285849393E7830C12900D285611400
Authority key identifier: 5D:78:96:26:CA:98:F9:F4:59:0D:D1:D9:DA:BA:10:1C:3F:FE:B7:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/09721c6a-44cc-39ee-b648-6f47e10cc058.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     393227
IP address blocks:        199.16.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/5eb81838-6cf7-4c1f-bf73-eeec087e471a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/5eb81838-6cf7-4c1f-bf73-eeec087e471a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:78:30:c1:29:00:d2:85:61:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eb81838-6cf7-4c1f-bf73-eeec087e471a
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=ab96698e-cef7-46e0-8ab2-205105b649c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4f:dc:71:fd:99:74:78:69:5d:8d:48:25:4c:
                    69:68:56:f8:f8:00:37:ed:52:90:63:fa:d9:65:cd:
                    79:53:fe:f1:00:c1:8e:4e:46:03:5f:4d:d8:5b:a9:
                    47:6e:09:a8:d8:05:db:17:ca:b5:ca:72:21:19:bf:
                    04:e5:6f:38:41:42:42:c2:53:8c:12:55:1d:82:28:
                    fd:62:14:20:bc:bb:66:1e:48:d3:c6:f8:e9:0b:26:
                    7b:00:50:af:39:dc:5f:cf:0b:0c:77:3e:78:f0:fb:
                    97:2f:60:4d:85:ca:dc:f3:e8:d8:14:87:1f:be:bf:
                    06:b2:db:13:a6:57:41:8b:95:f5:72:02:60:4a:92:
                    15:6b:f8:01:fb:a1:ea:b7:83:d2:67:af:b7:b7:15:
                    15:16:3d:2c:2f:e7:e8:11:16:eb:4a:bb:5b:e6:c6:
                    b0:41:f7:14:65:f7:18:43:93:d9:7e:39:46:6a:77:
                    c9:c8:5d:b7:a7:08:71:c5:4f:da:f3:ca:ea:5c:bd:
                    81:84:48:53:f1:63:d7:84:a2:3b:bf:d2:de:0a:b6:
                    0f:b5:92:45:f2:b6:a2:cb:fa:57:e7:53:7c:87:43:
                    1f:0a:f1:5b:2d:09:a4:58:0a:b1:e3:b5:dd:28:63:
                    87:47:53:67:7b:aa:09:67:e3:39:81:26:ef:23:cd:
                    7d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:8D:7B:29:13:13:FA:79:FF:57:7D:04:4C:60:5E:E6:C2:19:E8:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/09721c6a-44cc-39ee-b648-6f47e10cc058.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/5eb81838-6cf7-4c1f-bf73-eeec087e471a.crl

            X509v3 Authority Key Identifier:
                keyid:5D:78:96:26:CA:98:F9:F4:59:0D:D1:D9:DA:BA:10:1C:3F:FE:B7:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.16.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:07:93:ed:39:48:c2:39:82:e6:55:df:f7:b1:04:78:89:61:
         0b:d6:31:4c:3e:18:02:ba:f4:6f:d0:d3:9c:72:e2:10:13:a5:
         e9:a6:20:6a:81:b9:11:c6:dd:ea:2c:10:db:2f:9e:f7:4b:e6:
         0c:de:26:0b:3e:74:1a:7f:02:b6:77:b9:a0:7a:17:d2:ee:43:
         b2:0f:ab:29:7b:dd:b5:67:c8:7d:1f:0e:5c:21:e9:38:9c:d5:
         db:d2:df:41:88:55:d4:06:1b:5f:3e:2b:39:e7:07:04:f9:00:
         63:39:6c:ad:e5:bf:5e:d1:68:ab:ef:98:c7:00:cd:14:2d:c6:
         e9:4b:0f:ae:4c:c4:d2:16:3b:dd:94:77:17:d1:c7:7c:a5:a2:
         52:df:9f:52:3d:45:ed:47:ad:44:63:f7:76:a4:7e:f6:33:a0:
         1e:b3:14:69:0d:82:64:d0:04:19:1a:d4:d7:b9:e1:a1:6c:e7:
         46:b6:26:7a:a0:9d:93:de:84:4c:44:46:0e:63:9f:8e:28:92:
         25:26:9a:73:3e:17:93:90:07:da:0a:2d:c2:4f:25:76:bc:21:
         83:63:ab:f1:ca:9a:64:d7:ab:8e:6b:76:fa:8f:ab:e8:0e:bf:
         2c:1d:c4:26:88:3f:ee:27:b9:54:96:dd:78:e0:bc:32:07:dc:
         c5:40:70:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:55:44 2025 by rpki-client