Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/b89278a3-74c9-3ec5-a92f-44d3676f6324.roa
File:                     b89278a3-74c9-3ec5-a92f-44d3676f6324.roa (raw, json)
Hash identifier:          u0qT396TnDg3lZoFTJEqxZx0X6cxJN44IrbONBlswck=
Subject key identifier:   B7:5E:BA:A1:1D:7A:2D:35:E0:5C:66:16:50:22:84:22:03:6D:80:69
Certificate issuer:       /CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d
Certificate serial:       010D0C9F43285849E7BA802E0CD08EF7E6EFC260
Authority key identifier: 6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/b89278a3-74c9-3ec5-a92f-44d3676f6324.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     53991
IP address blocks:        216.245.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:80:2e:0c:d0:8e:f7:e6:ef:c2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=3ea64e8d-f734-4665-8fab-f38de22c79d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:11:07:74:72:01:4f:53:6e:ff:fe:7d:67:bd:
                    b2:cf:3a:a7:d8:52:ae:1a:8a:64:c5:76:b9:9d:ea:
                    96:71:7b:cd:5e:28:0e:47:ab:f8:f8:78:62:22:ae:
                    4d:b5:0c:71:df:43:38:f3:a2:2d:f0:24:ff:57:5a:
                    a4:a3:aa:0d:69:fa:97:2b:36:a9:7b:1b:e1:3e:5e:
                    3f:69:d4:da:38:08:51:c0:7a:07:0c:0d:56:1c:7b:
                    8e:7b:4e:b6:c6:a0:0e:0d:0b:cb:39:7b:e9:d8:a4:
                    2e:d6:99:eb:85:2f:08:11:69:fa:6e:bb:1c:a9:65:
                    5b:33:2d:cc:09:98:72:01:f2:a0:68:64:65:9a:c1:
                    14:96:e7:5a:2a:7f:16:8a:c7:7c:10:3a:3e:0a:1a:
                    98:09:58:38:ce:24:11:a3:ac:5a:95:18:48:13:5e:
                    a3:b6:bc:18:cc:78:fb:89:95:03:c6:29:6d:f8:d8:
                    a3:6b:10:7b:49:70:7a:24:ae:c1:51:ff:10:11:11:
                    bc:4c:1c:c7:20:05:da:4d:7b:b7:0c:d3:9d:ee:6b:
                    f8:a2:3f:62:ea:f1:f5:d3:fc:9f:6e:44:a2:69:ab:
                    fb:ff:a6:37:5e:4a:48:43:17:02:a6:99:75:a1:e0:
                    8a:dc:fd:63:d8:b1:53:fd:dc:48:58:2d:67:fc:89:
                    15:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:5E:BA:A1:1D:7A:2D:35:E0:5C:66:16:50:22:84:22:03:6D:80:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/b89278a3-74c9-3ec5-a92f-44d3676f6324.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl

            X509v3 Authority Key Identifier:
                keyid:6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.245.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:b7:d4:06:14:a4:88:35:a5:ca:7e:4d:3f:33:b6:ee:60:1b:
         69:79:eb:ec:13:df:37:15:62:3c:13:95:ce:c2:a0:15:66:3b:
         ba:be:90:1c:3c:fb:1c:b7:48:64:84:b5:5f:e4:7a:80:d8:8c:
         9e:b9:f6:65:2b:32:82:dd:99:08:88:47:10:a7:19:4f:5f:23:
         cc:be:3c:26:e9:40:d8:4c:dc:58:6d:8f:3b:d0:ff:9d:db:db:
         ce:81:f2:38:37:d6:04:83:11:8f:1b:82:f0:85:ab:7e:ee:c4:
         7b:c6:6a:8d:4e:ce:e8:b9:d2:b9:5c:7b:87:58:12:c3:ae:bd:
         44:0c:4c:fd:25:ac:0e:87:df:66:0d:5b:23:9a:56:33:25:da:
         10:21:e3:53:98:db:c0:f3:6c:63:2a:6b:46:73:95:15:36:4c:
         c2:46:c1:26:6a:0b:98:b7:96:4d:6d:82:f1:04:8d:c6:3f:72:
         75:57:1a:f8:08:6c:a4:04:3f:6a:7b:fc:f1:7e:93:b4:bf:e1:
         21:1b:02:d9:9a:95:3f:09:08:61:17:f4:d6:d4:78:ae:e6:46:
         e0:0f:64:7a:96:f3:3a:71:6c:5e:b9:43:2f:4f:2c:aa:ca:c2:
         d6:90:a9:52:22:53:c8:9e:86:1a:e0:44:cf:ac:03:07:2f:59:
         dd:bf:b2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:14:34 2025 by rpki-client