Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d820bfa6-d9b8-3502-943e-af359fe603a5.roa
File:                     d820bfa6-d9b8-3502-943e-af359fe603a5.roa (raw, json)
Hash identifier:          gTCtcVbzPqHz3wbZ93fc1t2soe2vS9TdpBhg7ZJJO+0=
Subject key identifier:   66:17:08:BC:C7:FC:67:74:E3:A9:38:3A:11:32:F8:C5:F8:25:2C:5D
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584919418EB9165FA79EEC635700
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d820bfa6-d9b8-3502-943e-af359fe603a5.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     11359
IP address blocks:        216.222.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:8e:b9:16:5f:a7:9e:ec:63:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=2db358fb-e740-44ad-91d7-30b36b8d1afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:78:33:9c:69:10:27:e3:68:c9:42:28:7b:61:
                    43:ff:52:4a:39:2c:92:3e:9a:67:88:0a:65:94:06:
                    c2:86:28:4b:ed:d8:b4:48:70:62:00:59:da:44:d4:
                    2c:a0:aa:c3:c6:79:17:84:24:81:0f:6e:4a:c7:c0:
                    db:32:7e:b2:45:74:f0:a3:3e:cd:a7:64:dd:7d:e7:
                    02:a8:ab:84:d5:09:f6:aa:a9:41:aa:b4:b1:13:53:
                    d7:8e:fa:ca:a7:37:bf:eb:9d:5c:7f:62:4c:3c:c9:
                    c5:0f:29:68:0d:4d:f5:d0:8c:8a:a1:f7:2d:c9:43:
                    ca:a9:c0:a0:8e:c7:de:25:a0:a4:b8:ba:20:ed:78:
                    47:48:cb:04:a9:2f:1c:90:76:70:cb:d9:8f:fc:2b:
                    77:8b:1e:b1:a4:53:f3:1e:69:63:16:a4:8b:0f:3c:
                    16:09:87:cc:c0:e0:08:2b:e8:48:2e:05:4d:5b:66:
                    cc:b1:bf:17:98:75:de:fd:9c:b1:7c:ec:94:b6:0a:
                    26:d5:85:92:51:9c:59:32:81:be:08:71:d6:8d:3b:
                    3b:7b:89:7a:d3:de:31:86:5c:f6:e3:fe:18:ec:df:
                    ad:53:ae:e9:55:5e:6a:23:c4:13:83:c7:21:60:3a:
                    a8:70:68:39:37:c4:7a:a8:b3:ba:e7:23:53:3d:21:
                    9c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:17:08:BC:C7:FC:67:74:E3:A9:38:3A:11:32:F8:C5:F8:25:2C:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d820bfa6-d9b8-3502-943e-af359fe603a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.222.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:a8:13:8a:f9:f4:ad:d4:91:2b:84:ee:39:86:18:93:c1:05:
         88:7d:c0:9d:7e:14:91:64:71:5c:16:33:f9:31:0c:81:0f:7d:
         a0:21:d7:89:fe:a5:50:f1:40:48:f8:b4:f3:06:89:dc:b1:55:
         29:bc:88:a6:9c:cb:e3:6f:b3:ce:ab:26:4c:0c:2a:c6:a9:7f:
         46:93:57:a5:83:0f:44:7d:8b:c9:6f:58:19:52:e4:81:af:f9:
         fe:15:85:bc:aa:d8:bb:51:16:a5:f5:60:9c:ba:54:7b:81:e8:
         f4:de:ad:5b:29:31:05:cb:5b:68:c3:e9:30:4e:0e:4f:f5:40:
         d9:aa:77:4d:e5:07:ea:4f:72:ed:da:2f:f3:33:03:40:2f:64:
         eb:fb:22:96:60:4f:a9:5d:cc:88:5c:f6:f2:ec:98:e9:8c:96:
         aa:9f:76:57:14:e6:5b:c8:20:12:71:b6:c3:07:46:69:6e:5c:
         80:24:81:88:05:ff:9e:00:d4:06:35:15:0b:a6:31:1b:0c:95:
         40:ef:b1:34:b1:b5:1d:d7:18:20:1f:50:6c:1e:44:6a:2e:01:
         14:16:50:d3:97:8e:94:ac:92:3b:61:a5:64:21:ec:e3:74:c0:
         63:12:d5:00:61:02:12:e0:b5:80:61:a5:2e:b7:0c:d8:a2:50:
         8d:95:8e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:48 2025 by rpki-client