Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/0dac1b9e-e005-3716-ba57-667e5c48f339.roa
File:                     0dac1b9e-e005-3716-ba57-667e5c48f339.roa (raw, json)
Hash identifier:          D30z2pklsaQEWS6D65tuLPhOfojEBz/LTyxJmxN/yLY=
Subject key identifier:   24:1E:B4:7D:89:8B:CF:5D:9A:A2:1F:68:9E:0F:47:A5:C3:94:74:78
Certificate issuer:       /CN=00b089f9-bcf9-4483-badb-c4cf8ca6f9e1
Certificate serial:       010D0C9F4328584947340073AF9C7662321BE300
Authority key identifier: 63:78:09:E9:4C:B7:72:04:58:F4:A5:9E:8F:7B:B4:91:9A:DF:36:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/0dac1b9e-e005-3716-ba57-667e5c48f339.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     27370
IP address blocks:        216.163.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:34:00:73:af:9c:76:62:32:1b:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00b089f9-bcf9-4483-badb-c4cf8ca6f9e1
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=586f891d-78f4-47f2-9aa4-817524fc3b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ac:cc:35:cc:24:9a:d4:95:05:8d:70:11:de:
                    c0:aa:f2:6e:ec:55:00:4a:1e:56:c7:67:c3:35:38:
                    7c:1b:01:4f:92:51:dd:14:ee:02:55:31:f2:40:2e:
                    a1:dc:53:41:57:92:57:e4:c4:f6:c3:fd:2f:8e:ec:
                    62:25:e3:89:fe:57:84:d9:e9:0e:e4:ee:35:9c:f5:
                    25:e5:50:0d:61:41:6c:0c:f9:a3:81:e6:b9:80:df:
                    c5:fd:33:0b:ed:42:48:05:1a:b7:a9:41:4a:23:cc:
                    72:07:19:64:f6:01:19:1a:37:af:75:16:8a:b7:02:
                    98:cd:42:2e:ca:18:72:20:b3:1c:0b:a7:25:a5:8e:
                    b3:34:34:a4:d3:d2:a3:7e:df:cd:17:d0:cd:e9:03:
                    12:a1:52:e3:84:ec:1c:a1:50:b0:39:a9:7c:3c:c5:
                    72:dc:3d:70:d2:d3:b1:bd:03:fc:7c:7e:d5:a2:46:
                    31:85:4b:2b:82:5d:39:a5:9c:75:73:46:d4:42:71:
                    7e:49:09:f3:95:15:8d:89:d6:7b:56:30:40:3a:c8:
                    77:f7:b0:5c:11:b8:2b:ca:72:b4:93:2c:f1:65:e3:
                    67:ac:84:8c:9f:7b:e5:c5:ec:6d:be:4d:6c:b1:7d:
                    0e:be:85:dc:61:2a:51:4b:61:78:c8:af:09:57:e6:
                    1c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1E:B4:7D:89:8B:CF:5D:9A:A2:1F:68:9E:0F:47:A5:C3:94:74:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/0dac1b9e-e005-3716-ba57-667e5c48f339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.crl

            X509v3 Authority Key Identifier:
                keyid:63:78:09:E9:4C:B7:72:04:58:F4:A5:9E:8F:7B:B4:91:9A:DF:36:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.163.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:35:45:00:49:5b:7d:12:d2:e9:12:cd:d8:50:89:2f:00:1a:
         63:f5:47:22:3d:5c:21:b9:28:b9:a8:95:a4:00:11:fd:26:d3:
         cb:b5:26:dd:37:a6:8a:90:3a:3d:b1:2f:dd:a4:34:a2:6a:4e:
         5b:0b:dd:d0:e9:3c:e2:67:86:93:0d:b8:8e:7a:80:c6:09:8b:
         cd:03:89:ab:0f:ed:29:85:50:8d:49:87:c5:c7:c5:3d:3a:9f:
         4d:0a:24:78:cb:75:0f:12:c9:32:5b:2c:65:8c:47:9e:7d:ca:
         15:76:12:f8:09:95:04:d7:22:c5:f5:8d:1a:0c:9f:70:9e:a1:
         fe:75:a9:5c:36:b6:98:a4:2d:b3:fc:6f:c2:73:9c:23:bc:de:
         a7:f0:94:19:f5:cc:53:bf:eb:e4:36:52:df:19:7a:25:91:7d:
         dd:c2:21:36:63:7f:23:3e:55:af:04:83:7c:6a:5a:dd:53:ea:
         af:31:96:3b:57:22:19:b8:67:d7:e3:99:64:69:73:99:2d:67:
         cf:ec:56:33:05:76:93:f4:44:cd:29:e7:a7:5b:34:5b:02:d2:
         62:46:41:13:49:15:f0:62:de:a6:1b:b0:40:a0:db:34:f0:26:
         1c:c8:83:ea:78:02:00:9c:3d:76:0f:da:8c:d9:01:cf:fc:ba:
         d2:9e:1d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:36:59 2025 by rpki-client