Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/3cbe784b-a4fd-3ec5-bcca-2037706eae92.roa
File:                     3cbe784b-a4fd-3ec5-bcca-2037706eae92.roa (raw, json)
Hash identifier:          RooI8BTJyFIPtJBONKRkOgkC3r3aDaSJsxZ3BKYfj6g=
Subject key identifier:   D3:C0:64:61:E4:4D:E2:4D:6E:7B:79:1A:0B:D3:69:D6:E3:AD:93:0E
Certificate issuer:       /CN=1eceffa4-1513-452e-91b8-8d0a0b51f920
Certificate serial:       010D0C9F4328584A0C055A902FD2AB682321C300
Authority key identifier: CE:4F:2D:49:31:F6:60:51:61:7F:25:7F:31:32:1C:1E:96:CB:7C:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/3cbe784b-a4fd-3ec5-bcca-2037706eae92.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     18780
IP address blocks:        216.71.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/1eceffa4-1513-452e-91b8-8d0a0b51f920.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/1eceffa4-1513-452e-91b8-8d0a0b51f920.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:5a:90:2f:d2:ab:68:23:21:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1eceffa4-1513-452e-91b8-8d0a0b51f920
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=b0fbf474-f503-4bdb-acd4-ab1d049edb6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:37:3a:35:11:57:61:3c:02:60:7c:1c:dc:52:
                    ca:fe:47:95:e0:f7:e0:a7:0b:d2:54:f6:f1:ae:e4:
                    c2:1c:69:50:1c:49:7d:6c:67:34:4e:59:38:f3:52:
                    7f:2f:21:bf:18:91:2a:88:83:65:c5:df:d2:58:ee:
                    ec:52:a1:5c:dc:50:6e:19:de:5c:3a:e0:6f:0e:40:
                    21:90:c7:9a:88:7d:53:84:fb:30:7e:9c:d5:a2:4c:
                    97:31:0e:fa:af:d1:d4:ce:96:0a:13:da:e9:71:93:
                    fe:92:7a:ad:af:bb:92:21:36:47:29:8f:c3:3f:55:
                    35:33:d5:6d:78:e8:cd:cc:2b:95:26:0b:52:1c:c1:
                    b3:27:d4:17:6c:0f:38:23:20:b9:a9:34:c2:3b:8b:
                    16:c2:55:1b:2e:75:af:2f:e7:89:e4:b3:33:f6:02:
                    5a:e6:b3:00:10:e1:0a:7e:15:70:8b:9c:b8:7a:86:
                    65:03:74:61:59:61:17:dd:6a:06:61:e6:2b:9a:81:
                    d4:d3:79:cb:ba:4d:53:77:e8:c0:08:63:a9:ab:d0:
                    e2:00:db:69:82:0e:4e:bf:dd:76:82:37:5a:e6:e5:
                    bf:06:aa:4b:7e:d8:e0:a2:42:1b:29:49:8e:4b:1a:
                    c5:db:34:6d:dd:8d:50:52:dd:dd:8c:a1:df:aa:e5:
                    b9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C0:64:61:E4:4D:E2:4D:6E:7B:79:1A:0B:D3:69:D6:E3:AD:93:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/3cbe784b-a4fd-3ec5-bcca-2037706eae92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/1eceffa4-1513-452e-91b8-8d0a0b51f920.crl

            X509v3 Authority Key Identifier:
                keyid:CE:4F:2D:49:31:F6:60:51:61:7F:25:7F:31:32:1C:1E:96:CB:7C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.71.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:c0:03:a9:99:f1:66:6a:22:ec:13:25:37:23:df:30:5c:39:
         6d:e3:7a:24:d7:f7:c0:20:10:d6:24:2c:3a:05:15:af:79:d9:
         a9:99:5c:63:3a:4a:6d:41:bb:f8:ea:39:13:d8:9c:0a:d6:04:
         66:95:8c:a7:49:02:eb:95:aa:f3:c7:89:3c:45:06:de:48:88:
         8d:60:0e:56:0d:ea:1e:aa:1d:2e:0c:cd:af:2a:ac:a3:02:d0:
         1b:c9:52:f2:d6:2d:48:1c:db:03:c2:b0:37:d6:34:52:7f:0b:
         5a:f8:74:f0:71:12:59:22:f7:e0:79:35:73:1d:da:f7:44:39:
         97:0d:24:c5:d5:de:8e:b7:7c:69:f7:22:cc:83:58:cd:f6:d7:
         b9:02:a5:9b:4a:80:0b:e9:ad:04:d2:19:29:d3:aa:e3:84:af:
         a3:4f:4b:ce:e4:c0:93:7b:ed:f3:a9:92:95:cf:82:1f:18:c4:
         84:1b:49:f8:7b:0b:b5:f0:5b:2f:5d:77:20:4e:5b:47:5c:16:
         f6:33:22:8a:cc:96:fd:7b:52:da:2b:aa:44:47:33:31:39:41:
         56:5a:44:b1:7c:66:3c:31:cd:e7:08:2a:7d:ef:59:19:e6:2b:
         02:ed:2f:2e:c2:a2:9e:3a:95:67:6d:92:4b:70:4c:4c:28:3d:
         62:86:35:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:15:26 2025 by rpki-client