Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/4d61b739-1b41-3732-9d1f-021c5f422c4a.roa
File:                     4d61b739-1b41-3732-9d1f-021c5f422c4a.roa (raw, json)
Hash identifier:          425w+2VaQqcHfVnvTyNRPwAmgilueMVjMhCuTCXKGn0=
Subject key identifier:   8D:58:6D:D2:BB:DB:1B:82:89:D2:8D:B7:6A:EF:B2:78:F2:53:79:04
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F4328584A0C056DDCDD9688838D782140
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/4d61b739-1b41-3732-9d1f-021c5f422c4a.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     211373
IP address blocks:        216.224.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:6d:dc:dd:96:88:83:8d:78:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=05b4fe24-4238-43ad-bb3d-891b37f65906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5e:a9:40:88:f9:80:9c:cb:8f:1d:32:89:40:
                    e7:2c:43:69:83:a1:f5:44:c3:1b:3f:54:12:06:91:
                    a5:74:d4:99:6b:7b:50:2b:81:dd:a3:a9:fe:89:11:
                    85:61:5e:7c:3f:c6:c5:c7:66:d8:03:ca:f6:9d:85:
                    35:a0:12:c8:63:62:ba:be:cf:1f:91:3b:fc:e5:31:
                    d2:66:08:ad:0f:f0:50:a4:63:b2:e8:cb:06:52:8a:
                    2c:ef:03:6c:f8:19:36:3d:ca:2d:e9:3e:f7:99:14:
                    4b:76:8a:e2:73:f9:ae:e7:cf:19:e8:bb:3c:cc:16:
                    55:7f:86:1f:fc:8c:ea:6a:00:0c:36:53:3e:4c:45:
                    1e:0f:7b:42:a2:f6:95:38:48:43:68:ad:0a:14:92:
                    f1:12:21:5a:7b:e7:7f:4a:94:0c:40:db:f2:a4:68:
                    59:8f:92:15:f7:25:6a:86:10:03:c9:bd:72:94:01:
                    f9:f5:28:16:66:a8:dd:45:9a:d7:6f:f0:56:8d:a5:
                    3e:80:5c:7a:97:40:6b:e5:ab:e6:c0:3a:0f:0e:0a:
                    e1:8e:a5:c8:3f:3c:d4:d8:bc:1c:a7:0f:0d:4d:53:
                    7a:89:a1:68:90:8f:55:2b:3d:60:72:ac:42:f2:d9:
                    8f:6a:61:f3:68:02:9e:58:00:23:b4:52:df:d8:ed:
                    93:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:58:6D:D2:BB:DB:1B:82:89:D2:8D:B7:6A:EF:B2:78:F2:53:79:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/4d61b739-1b41-3732-9d1f-021c5f422c4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.224.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:70:68:ee:f6:96:03:b7:88:ea:2c:76:a8:aa:89:ca:8f:60:
         7e:a9:90:a6:b0:2b:35:c3:ac:9b:93:27:6c:4d:08:1a:af:81:
         1c:17:57:10:dd:91:28:40:fd:5d:fa:d5:ee:63:33:f5:39:66:
         8c:15:4c:b2:b6:8d:4a:c3:92:e1:a4:65:54:8d:22:ab:38:e3:
         a7:71:b5:65:df:96:c8:1c:99:04:fe:91:0b:95:23:7d:21:af:
         ea:83:e6:38:bf:54:92:30:64:3c:4b:39:4e:26:d2:b4:41:d4:
         5a:b7:9e:1f:35:e0:30:fd:fd:8c:67:13:4a:12:c8:fb:b3:1e:
         72:2a:d9:6a:60:08:f2:ef:81:97:59:20:8c:07:db:ba:5a:fa:
         59:99:ce:b6:9e:ea:5a:ae:b0:f7:9b:e6:fb:0e:f4:66:64:56:
         83:2c:58:89:80:d0:11:05:d1:dd:f6:18:78:cb:37:bf:95:4b:
         2b:0f:e4:e6:19:04:3a:47:4c:72:57:c0:39:43:8f:45:ef:71:
         60:16:ce:99:fc:ba:20:a4:ae:ed:bd:03:6b:af:5b:3a:c2:97:
         80:0d:cb:7c:c9:a5:ea:fc:ec:50:2f:53:87:4e:c9:3e:6b:5d:
         52:83:36:2c:99:a7:0b:90:2a:3c:22:68:67:5c:a1:0c:de:55:
         de:66:9b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:23:56 2025 by rpki-client