Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/e91ea21b-a36f-3462-a96e-eee068ddb1a2.roa
File:                     e91ea21b-a36f-3462-a96e-eee068ddb1a2.roa (raw, json)
Hash identifier:          AXM2Uuzq4JWtoB0vvO5K6qAW675TkbGpddCGwJBQE5s=
Subject key identifier:   EB:72:E1:EB:26:50:2E:9F:F6:85:A8:90:99:7D:0D:D4:D7:1A:BF:0D
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F4328584A00DAC9989C206A5F8808E380
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/e91ea21b-a36f-3462-a96e-eee068ddb1a2.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     6461
IP address blocks:        216.129.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:c9:98:9c:20:6a:5f:88:08:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=e4f8811b-fb2e-4010-90f8-45c1fd3942e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:31:bc:d6:80:5f:1c:93:4a:29:47:cd:d6:7b:
                    e0:8c:e6:3a:42:7a:bc:79:92:f8:81:57:70:ee:00:
                    fb:9f:ee:dd:d6:e4:6f:a2:37:b0:e3:64:f9:34:54:
                    f5:18:d5:e2:fa:06:ec:3c:b5:22:e7:2b:2c:38:0e:
                    00:0e:c6:c3:b2:46:dc:cf:27:77:a4:fd:e9:78:ea:
                    7f:62:74:ca:53:75:af:73:80:03:69:21:8f:28:a3:
                    42:f0:73:8c:eb:ce:af:fd:8e:ac:7d:07:da:47:f0:
                    ed:0b:a2:de:98:11:e0:44:66:c8:f8:89:02:47:17:
                    ce:86:b6:59:d5:dd:d8:b1:0e:f2:5a:0f:bf:73:af:
                    70:a0:c2:1b:d0:29:f6:2f:07:68:ef:6f:5d:81:5f:
                    ea:1e:5a:09:39:38:36:33:55:bc:90:ac:93:86:78:
                    06:40:5f:40:07:bd:c3:6a:32:5c:80:ce:c6:61:9f:
                    a4:3a:00:52:a7:1c:34:6f:a4:dc:07:cc:6a:2a:a3:
                    7d:dd:13:64:ac:7b:f6:22:3f:13:e4:25:ed:d3:07:
                    77:5b:9d:d9:bf:bf:e3:64:15:af:75:94:74:2f:70:
                    57:ee:39:fa:da:05:e4:fa:f8:ec:af:eb:c0:c5:21:
                    ff:4e:59:a6:4f:b3:4f:88:8f:50:5b:e2:02:54:65:
                    cd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:72:E1:EB:26:50:2E:9F:F6:85:A8:90:99:7D:0D:D4:D7:1A:BF:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/e91ea21b-a36f-3462-a96e-eee068ddb1a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.129.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:fd:c6:f7:1e:28:23:32:3d:7e:38:86:77:fb:60:ca:fe:10:
         97:a7:33:cb:06:3d:1f:4d:9b:37:b4:70:8b:8f:80:b9:39:57:
         eb:05:fa:13:f7:0d:52:8b:1b:f5:a8:a2:60:8c:95:f5:90:4c:
         fb:b7:1b:37:7f:46:13:78:81:e4:1c:86:52:96:cc:2b:93:f8:
         83:da:8e:1d:b1:89:9e:47:b2:08:9d:3e:e0:a8:5e:37:21:a2:
         3c:89:64:dc:0b:99:7b:1b:98:72:87:82:b2:d4:82:46:88:0e:
         09:55:8b:3f:d0:62:b3:8e:4d:9d:0e:11:e3:cd:6a:c4:44:54:
         b0:db:bd:76:10:02:be:5c:ff:a5:47:c1:70:f7:5b:bb:ca:34:
         6d:d9:4a:fa:3b:78:ce:21:f7:b7:27:b9:3d:55:fd:b6:97:24:
         14:c2:f1:0d:c7:89:f7:f4:be:2f:bc:c4:0f:8b:c5:ce:6a:8e:
         3a:fe:2c:cb:26:cd:48:7f:f1:14:ec:5b:8b:da:17:c9:79:84:
         b5:80:6f:d6:e9:78:76:c1:f1:6a:e8:53:b9:b3:31:f5:67:99:
         1c:a1:56:7f:c2:1b:1c:f0:b7:f1:cf:b8:5c:65:5a:fe:4a:0b:
         7e:16:6a:0a:b1:38:73:98:00:b2:8c:47:34:10:ee:50:56:de:
         70:35:95:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:08:37 2025 by rpki-client