Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c270b70e-14c9-3f76-bf91-207ed816af7f.roa
File:                     c270b70e-14c9-3f76-bf91-207ed816af7f.roa (raw, json)
Hash identifier:          60GijE6Zu1+gwll2G0T6HUbMyqwxCK+dRS6Yc6FH/+Y=
Subject key identifier:   8A:C2:5D:95:72:9E:32:19:E5:58:ED:6E:7E:F2:2E:A7:85:FB:2A:3A
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584A63F5BBD83C0E5A7A1BDC9D00
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c270b70e-14c9-3f76-bf91-207ed816af7f.roa
Signing time:             Thu 03 Jul 2025 01:00:48 +0000
ROA not before:           Thu 03 Jul 2025 01:00:48 +0000
ROA not after:            Wed 01 Oct 2025 01:00:48 +0000
asID:                     11233
IP address blocks:        216.110.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:63:f5:bb:d8:3c:0e:5a:7a:1b:dc:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jul  3 01:00:48 2025 GMT
            Not After : Oct  1 01:00:48 2025 GMT
        Subject: CN=931bbc01-d0a1-4a40-8c01-b9a3b9ca17a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b1:6d:da:44:bc:ea:00:cc:86:69:ca:ce:a2:
                    16:99:16:4b:04:dc:fc:91:e5:4a:5c:cb:77:c3:bf:
                    bb:fa:0a:41:05:ed:27:f2:fc:8f:75:50:49:3d:29:
                    75:e5:66:06:42:28:cb:ac:87:ef:e1:d7:23:f9:91:
                    71:b4:8c:8c:31:55:f2:2c:92:5b:ff:df:db:3f:55:
                    a4:59:28:6d:f8:de:ed:51:af:3b:6d:03:3a:d7:4b:
                    c1:be:b2:50:1a:0e:03:c2:77:8e:51:32:14:03:53:
                    7f:85:1f:55:17:2b:23:59:b8:ee:0b:9a:bb:74:04:
                    a5:76:21:75:b7:56:c0:fa:1e:ab:7c:49:aa:2d:fc:
                    2b:7d:dd:8c:c9:98:f2:8a:a6:bc:99:80:14:68:80:
                    b4:ba:3f:79:b8:31:cc:6b:05:2e:31:95:1e:e3:a4:
                    97:55:0e:9d:5b:9b:ba:0d:98:88:19:27:68:bd:a2:
                    99:d6:5a:11:10:f8:23:38:04:e5:11:83:e1:63:86:
                    2f:b7:ec:dc:73:2c:ce:80:4d:5d:01:9c:ec:5e:b3:
                    36:9e:05:b3:ce:57:f4:0e:64:b1:c9:36:22:80:9b:
                    87:c3:90:5f:58:ab:97:6e:ab:e8:2e:e0:62:31:a7:
                    75:d5:71:db:c5:3a:77:77:1d:51:a5:6a:df:9e:6f:
                    29:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C2:5D:95:72:9E:32:19:E5:58:ED:6E:7E:F2:2E:A7:85:FB:2A:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c270b70e-14c9-3f76-bf91-207ed816af7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.110.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:58:0e:e6:df:2e:d8:a1:98:ed:ce:37:a2:37:21:b5:ba:8d:
         25:c2:09:f8:32:90:7c:b5:4c:5d:85:96:e4:9a:41:dd:45:df:
         d1:2e:6f:0b:cf:c4:67:7d:98:42:c3:9a:e9:55:85:5e:d4:fb:
         bd:ab:4d:94:ac:75:06:ad:ec:ef:2f:1e:8d:da:b3:8e:a4:5a:
         3a:55:f8:d9:9e:ff:e9:75:78:e0:b2:4a:5d:fa:b3:9f:1c:c0:
         e3:b8:8b:d6:b4:03:03:7f:0b:3c:c1:a8:1b:0f:f7:a9:ad:2f:
         0a:1d:3b:fd:fe:7e:a4:4f:d6:50:6f:2e:90:c3:b9:df:c1:53:
         d9:39:b3:9f:fc:11:2e:bd:61:6f:a3:34:5c:16:5b:c8:63:ff:
         a7:db:69:71:89:9f:b0:c3:e4:b3:26:e9:82:02:3a:b6:93:22:
         37:ac:2f:ab:c9:3d:98:17:e6:19:9f:9e:59:bd:8a:d8:87:e9:
         32:66:d5:2d:56:20:87:5c:1a:01:ee:84:65:62:90:d2:6a:0e:
         85:ed:60:00:fd:80:22:bb:78:11:a6:7d:ab:cd:7f:aa:1e:6e:
         df:ce:0b:2d:98:0f:a6:df:b3:ea:4f:eb:da:79:99:0c:be:26:
         96:ac:ad:1a:91:40:2f:ba:41:13:94:65:72:70:07:ba:4f:fa:
         28:a2:b1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 14:43:11 2025 by rpki-client