Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0852727b-d03d-312d-bb64-c77098602914.roa
File:                     0852727b-d03d-312d-bb64-c77098602914.roa (raw, json)
Hash identifier:          b3Eu+HB8tdheNXH0RuAqYFdxMOrvJcc6NGHKY4B0e/8=
Subject key identifier:   AA:15:6A:C0:4D:14:2D:DC:20:FD:F3:22:B7:60:77:93:06:ED:EE:F2
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849F9DFCEF0DFFA6A679BD8F600
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0852727b-d03d-312d-bb64-c77098602914.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     15290
IP address blocks:        216.123.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:ce:f0:df:fa:6a:67:9b:d8:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=37a93cfe-f565-405f-a499-95b5fd77e204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b2:5b:c3:b3:08:8e:38:59:fe:c6:9e:d5:69:
                    c0:65:87:f4:17:5a:d5:84:40:fc:ba:64:a0:3c:77:
                    6a:1d:ca:d4:23:53:cf:ca:c1:73:8a:1a:4d:de:1a:
                    e2:14:9f:b3:c0:91:cd:cc:f3:b3:29:bb:4d:75:0e:
                    1c:23:2a:1c:bb:e7:5f:7f:cc:51:fe:ab:4d:0a:02:
                    ac:49:61:37:3c:d0:80:02:5b:18:ba:89:88:67:80:
                    b7:63:f8:f6:62:3c:b1:50:3f:04:59:04:10:ce:6a:
                    d6:53:e4:90:15:3a:0c:29:7f:a5:d1:39:84:e5:ba:
                    89:51:ca:65:75:3a:55:34:08:eb:27:fa:e3:b5:43:
                    7c:7c:a2:db:db:65:19:bb:b5:56:8b:b8:14:f9:33:
                    ab:15:e9:a7:08:3d:49:e0:4f:83:a0:ca:21:6a:db:
                    13:57:2a:cd:d1:68:cb:61:2f:b0:a5:0d:a7:46:1e:
                    da:dd:54:11:64:56:48:6f:b5:47:63:81:f0:5c:27:
                    ef:27:61:cf:9c:7c:ff:49:ae:a7:d2:88:34:1f:c5:
                    55:f0:e1:3f:37:e3:9c:41:bd:bf:23:02:ff:c5:3e:
                    e9:c9:04:39:3a:22:04:36:a3:b1:ff:d3:4a:f8:fb:
                    31:2a:e4:80:7d:33:e3:99:6c:2f:01:5c:85:29:55:
                    03:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:15:6A:C0:4D:14:2D:DC:20:FD:F3:22:B7:60:77:93:06:ED:EE:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0852727b-d03d-312d-bb64-c77098602914.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.123.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:84:42:86:16:a0:26:d7:a8:53:14:41:b9:c1:c5:d0:ce:bb:
         7e:50:77:b6:53:bd:27:0b:ea:5f:4b:b2:44:2d:7e:04:39:38:
         38:02:58:a4:63:ae:ab:3c:14:95:41:39:b9:4f:54:c1:4e:01:
         72:4b:4d:a5:63:05:c6:cc:15:51:c5:5e:53:cf:fa:b7:7c:8d:
         24:8d:f8:36:ec:b0:fb:20:f9:5c:6c:65:69:bc:0d:4b:47:5f:
         a5:b8:6b:81:ca:2b:17:62:2e:60:10:e8:30:c9:32:ef:bf:3d:
         41:87:70:d7:6e:d9:2c:ce:7b:c1:2b:38:7b:ff:66:88:ce:6b:
         c4:cb:44:c2:d5:44:84:e1:dc:43:31:98:bc:c4:18:f1:22:af:
         87:8e:82:70:dc:b8:0a:ff:6c:44:6c:f5:39:95:f3:88:2e:2e:
         a7:2e:27:a0:06:a0:fa:62:d4:3c:9a:60:3e:d7:b4:14:9c:cc:
         f1:05:85:fd:c3:0a:47:e3:6f:f6:16:e6:6b:cf:9d:e6:ed:a1:
         45:5a:63:84:c2:61:41:b1:47:a2:c8:a0:84:94:bf:82:94:96:
         ca:67:80:20:c3:64:29:48:47:f7:7f:1c:d0:d8:03:07:19:71:
         4a:2a:57:a0:83:b8:80:d6:19:62:8f:80:64:94:fc:fa:c5:dd:
         4b:38:dc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:46:24 2025 by rpki-client