Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b403c8ea-a70b-341f-8978-295e407e31cc.roa
File:                     b403c8ea-a70b-341f-8978-295e407e31cc.roa (raw, json)
Hash identifier:          YhCU1VdoBwgLP3wnLTcYph+Ychxj83s/D3Ch5lBmzjo=
Subject key identifier:   6D:DD:40:B4:9A:D4:BE:94:FC:B0:1E:AF:F5:23:11:84:95:50:83:4F
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285849D85FA22EF164A2DEF0CB9500
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b403c8ea-a70b-341f-8978-295e407e31cc.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     25899
IP address blocks:        216.110.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:a2:2e:f1:64:a2:de:f0:cb:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=1f8da499-b742-4ff2-90ec-1c04b06801be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:df:30:fc:7e:e8:d8:8b:21:02:17:d3:77:f9:
                    c1:10:13:24:80:f8:f6:e4:30:45:2b:b7:32:fc:ca:
                    26:93:8e:f4:dc:cf:36:a3:64:f0:10:a9:ea:3e:0b:
                    e2:08:5b:60:cf:8c:49:5a:9c:04:c1:93:5c:33:20:
                    58:2a:2e:4e:a1:e6:cc:d8:74:34:7c:e2:15:7b:d7:
                    ef:cd:34:19:e9:9f:35:58:3b:53:cc:30:62:81:85:
                    60:60:80:3d:ad:1e:6d:a7:22:6f:dd:2c:97:a9:fe:
                    cf:7a:4f:e1:a3:c7:38:fe:86:56:0d:7e:30:7b:f1:
                    f2:37:03:e2:4e:ca:c9:ec:ea:0a:bb:9c:c6:d1:3e:
                    e9:15:47:e3:a6:64:2c:39:f1:21:06:12:fe:5f:40:
                    5c:d5:c9:0d:41:87:8d:1c:9c:7e:6a:8d:5f:f1:6b:
                    dc:59:21:18:6f:a9:14:52:49:4a:b4:1f:ca:ef:b2:
                    a6:15:5a:0b:65:d2:d2:b2:47:57:ac:0a:31:2b:2e:
                    e2:7c:cb:a8:22:a9:42:a0:03:e2:b4:ef:95:27:c3:
                    46:43:b6:ed:6f:12:b8:f4:f2:75:0f:7f:72:f3:a0:
                    b8:1c:85:5d:d2:b7:45:c4:6c:a6:e0:cb:33:db:6a:
                    a2:05:3d:70:48:5f:6c:14:b9:0f:ae:43:43:b7:23:
                    99:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:DD:40:B4:9A:D4:BE:94:FC:B0:1E:AF:F5:23:11:84:95:50:83:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b403c8ea-a70b-341f-8978-295e407e31cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.110.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:4b:33:9b:56:32:7d:61:7d:3a:ee:36:c8:fa:f1:67:39:4e:
         98:21:4f:32:6c:c8:7a:6c:2d:81:78:47:3a:2b:95:02:5d:85:
         19:f4:e1:e5:77:ac:4f:51:10:ef:6a:70:7e:2a:b9:1f:9a:a0:
         85:fb:88:28:e6:44:c7:06:8c:75:5a:eb:91:66:f7:fb:2a:0c:
         cb:48:61:08:f6:3f:23:36:8e:60:50:d0:ee:6c:f3:60:8a:de:
         48:68:b3:84:b0:11:88:52:c7:73:e5:77:f8:4f:7c:a5:08:37:
         50:4d:97:12:40:32:79:27:ae:5f:b2:b4:c2:c7:d1:04:d7:c4:
         49:66:a4:9d:5b:ec:e5:90:92:5c:c7:20:61:e7:ce:7b:3a:1d:
         51:51:a4:99:0e:b2:52:29:d9:be:6f:37:2c:de:bf:b0:78:2d:
         bc:a5:a3:3d:e8:32:69:b6:50:bc:51:ca:34:27:3c:d4:46:ce:
         87:04:e3:d4:f5:84:a7:ba:e2:3e:18:df:7f:23:a3:e9:3b:20:
         ef:13:47:76:eb:d2:04:77:67:94:69:70:5c:f4:c2:f3:bf:0d:
         c7:01:b0:6c:3b:dc:29:95:82:a0:d9:11:66:4f:59:1a:ed:29:
         7e:9e:d9:90:83:ef:d6:92:93:98:01:dd:a2:2f:01:54:f4:1d:
         83:0c:db:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:48:33 2025 by rpki-client