Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/928928a1-f7ec-3890-ba27-f9b9292717a9.roa
File:                     928928a1-f7ec-3890-ba27-f9b9292717a9.roa (raw, json)
Hash identifier:          o56Jp/IlYCDuSwJ1quoEL8AQJ8732eUfykVV10Rra9Y=
Subject key identifier:   53:79:49:8F:C2:D2:09:77:BF:B0:FD:03:88:A8:CE:B6:13:AE:58:4F
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584A63F5BBEB2F8EC718D73C9284
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/928928a1-f7ec-3890-ba27-f9b9292717a9.roa
Signing time:             Thu 03 Jul 2025 01:00:48 +0000
ROA not before:           Thu 03 Jul 2025 01:00:48 +0000
ROA not after:            Wed 01 Oct 2025 01:00:48 +0000
asID:                     11233
IP address blocks:        216.110.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:63:f5:bb:eb:2f:8e:c7:18:d7:3c:92:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jul  3 01:00:48 2025 GMT
            Not After : Oct  1 01:00:48 2025 GMT
        Subject: CN=8359e264-3b60-466a-91c7-cbff2ac50bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:52:56:0c:ea:cd:fd:fd:52:34:b1:58:cc:63:
                    80:1a:e3:ee:8e:0e:45:1f:2b:84:88:28:fd:c7:94:
                    d1:4a:67:9d:c1:ed:e0:11:7a:83:db:45:a7:7d:4c:
                    3a:0c:5e:94:e6:12:02:db:58:04:29:33:a9:f1:96:
                    7d:b6:bf:c6:e7:7d:59:d5:9c:a5:9d:b0:b5:b4:89:
                    62:88:cb:2f:a1:d3:a3:dc:4f:7c:66:47:c3:98:50:
                    48:df:bf:08:6b:f5:38:4c:ae:45:4f:f4:3b:6e:90:
                    cf:3d:f5:fc:2c:8d:47:93:b5:90:59:97:ec:9c:d8:
                    e4:12:95:90:62:f6:7b:ae:d0:03:65:39:40:3d:ea:
                    7e:7a:c1:d3:a5:c1:a5:4e:c9:d3:01:e0:b6:35:98:
                    46:0e:77:b8:4e:a6:f5:08:f3:85:fc:5a:5a:db:1c:
                    84:05:f6:f1:74:90:0b:86:b4:07:d1:62:a3:14:7c:
                    66:0b:d6:35:9d:ee:56:7f:c5:98:e9:3f:b2:88:52:
                    94:8d:2e:35:70:55:ec:55:a6:23:91:fa:aa:2a:ed:
                    d9:e3:52:4b:9b:f6:27:28:0f:2f:07:b7:e6:4b:b7:
                    47:6c:b9:1c:fa:87:9f:ac:81:42:51:30:1a:d5:44:
                    80:72:cb:39:2d:53:1f:5c:03:7e:57:50:0a:4e:37:
                    c2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:79:49:8F:C2:D2:09:77:BF:B0:FD:03:88:A8:CE:B6:13:AE:58:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/928928a1-f7ec-3890-ba27-f9b9292717a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.110.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:d0:2b:e9:15:13:a6:8e:3c:90:00:2a:f0:9d:f1:2e:77:28:
         53:1d:42:97:cc:08:06:f0:dd:a7:3f:57:44:d1:d3:a5:aa:0f:
         a1:2f:59:be:d3:89:a3:f3:19:f9:fe:99:5e:bb:fd:05:94:64:
         d5:3e:8d:b6:a7:01:4a:6b:11:4e:47:f5:7d:ed:cb:85:79:b7:
         10:c5:a0:28:6c:99:f1:b8:1f:63:46:2f:62:d4:3a:5b:8e:0a:
         07:c5:33:1e:3a:6c:41:ee:1b:55:0a:9e:44:45:2e:e8:a3:c2:
         cc:9f:50:d0:71:f9:1f:5d:e3:6d:a9:f3:60:c2:a5:03:10:9c:
         4e:e8:a0:3d:98:d6:ee:77:0c:fb:b1:0c:69:5f:46:5e:49:97:
         99:0f:8b:b2:86:66:27:89:a4:c9:46:34:57:1c:8c:93:a6:94:
         8e:44:f1:aa:50:c4:34:bc:01:ac:61:d3:95:da:2c:b7:93:08:
         c2:5c:f7:b4:b9:44:9b:a0:a5:d2:9f:68:aa:99:bc:2a:18:d4:
         9d:46:00:93:4f:87:fa:9b:27:5d:4d:b2:78:32:55:3e:b3:b0:
         17:be:75:4f:a5:3c:1d:82:4f:f7:fc:dd:f6:29:45:84:c2:ae:
         5b:2e:28:c7:a7:8f:88:49:72:73:c5:ae:d7:3c:14:66:27:32:
         da:85:78:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 16:05:30 2025 by rpki-client