Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/6a1cffb8-82d6-321b-90a8-f30d3e16e8b5.roa
File:                     6a1cffb8-82d6-321b-90a8-f30d3e16e8b5.roa (raw, json)
Hash identifier:          jiRsNSg4RJPVd9/gyo1LB8/uA7TbBEgmRoqGwxGKSik=
Subject key identifier:   55:E5:72:84:FA:80:DE:FE:B8:C6:31:05:08:20:C8:AC:62:62:30:E5
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285848FBF12F550E52358D0D634140
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/6a1cffb8-82d6-321b-90a8-f30d3e16e8b5.roa
Signing time:             Mon 24 Feb 2025 02:00:38 +0000
ROA not before:           Mon 24 Feb 2025 02:00:38 +0000
ROA not after:            Sun 25 May 2025 01:00:38 +0000
asID:                     6461
IP address blocks:        216.222.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fb:f1:2f:55:0e:52:35:8d:0d:63:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Feb 24 02:00:38 2025 GMT
            Not After : May 25 01:00:38 2025 GMT
        Subject: CN=9a6436dc-21bb-4b54-985b-41d2d2b9c4ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b3:2b:99:6a:ba:a2:02:74:4b:7e:37:e2:31:
                    72:4f:e5:3f:3b:9d:7f:04:bd:92:5c:c6:d0:6e:de:
                    85:36:06:c6:a7:5f:62:ba:04:b3:f2:49:10:7f:e6:
                    1c:86:31:b0:10:29:67:3f:b0:f3:69:d2:89:72:7c:
                    3d:14:7b:87:8a:ad:31:0a:b8:1c:1b:5a:56:9d:ff:
                    ac:fe:1c:5a:62:94:25:e1:a2:e4:8f:16:84:b8:08:
                    a3:a0:ec:f6:2b:61:9b:84:3e:12:d7:18:bd:2f:f0:
                    39:2b:7f:22:d0:12:62:a2:c5:83:93:41:65:6b:81:
                    5f:95:f0:bf:8b:39:c4:f6:ff:91:14:71:08:a6:be:
                    3a:00:18:e2:95:48:cf:1f:4d:95:3f:86:fa:f6:20:
                    3f:90:96:be:da:41:c2:32:57:8a:e1:4b:9b:4e:a9:
                    2f:13:2a:c5:ed:a9:32:dd:66:db:58:52:3d:60:f6:
                    17:a7:bd:23:11:f1:7a:60:03:b9:6e:f6:75:5c:a6:
                    e6:0a:2c:7b:e9:6f:c3:47:5c:f6:ea:8f:6a:da:75:
                    08:84:e9:5f:04:d6:a1:33:48:38:7f:6c:e6:61:f6:
                    97:ac:55:ad:2d:62:02:6a:05:35:10:b5:76:8d:c7:
                    66:7c:5a:7d:e7:2c:22:27:64:16:a4:a2:2a:fe:80:
                    87:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E5:72:84:FA:80:DE:FE:B8:C6:31:05:08:20:C8:AC:62:62:30:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/6a1cffb8-82d6-321b-90a8-f30d3e16e8b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.222.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:23:26:25:10:f4:16:43:4c:64:23:e3:6a:3b:93:4c:7d:74:
         47:8f:ae:6c:b0:a6:7d:67:37:f5:05:0c:95:5b:cd:4f:82:2c:
         37:ad:7d:2c:25:89:3e:04:9a:36:e4:7a:fb:00:1e:c6:16:16:
         fd:9c:d9:e2:88:44:a8:e9:3d:7c:b1:5d:71:9f:63:5c:42:fa:
         e5:41:71:23:2d:55:4d:64:25:fe:85:32:07:59:d8:c5:12:fc:
         64:9b:b6:13:45:96:82:7c:25:cb:d9:95:68:51:25:9e:82:a4:
         0c:6e:90:16:74:29:9e:2d:48:0b:fe:9a:4b:f4:2c:97:6d:cb:
         68:a3:01:14:41:55:7a:3e:93:ce:07:31:11:8b:44:01:1d:b6:
         e8:a0:d0:45:8b:36:a4:38:ff:bd:dd:13:37:e1:ec:ba:3e:da:
         49:05:a9:a7:ec:8c:3d:d7:18:5b:a9:c7:2b:63:f7:5d:b9:62:
         5e:02:89:d4:9c:fb:38:42:dd:de:1a:de:bc:56:b1:ab:6d:3b:
         1a:fd:41:2d:c4:77:8f:c5:0b:dd:e0:75:78:aa:da:85:5d:dc:
         dd:ee:12:77:ad:1e:1b:ad:29:3d:00:8e:01:2f:7e:b3:2b:ab:
         e2:3b:bc:53:80:6d:30:36:ce:dc:42:30:ea:b8:11:7d:c8:2c:
         bb:3a:a9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:38:13 2025 by rpki-client