Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6b2dac81-bc57-30a5-be91-69ae0b9a6db9.roa
File:                     6b2dac81-bc57-30a5-be91-69ae0b9a6db9.roa (raw, json)
Hash identifier:          x8JsbKS1j1Fp5rcPB0V5mQr7YfWeIDyhjiPZfWClh0I=
Subject key identifier:   86:B5:77:41:DE:8C:08:DE:48:9F:FE:B3:05:4C:51:98:E3:BF:DA:B2
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584A03A549A05205CB4C070AB180
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6b2dac81-bc57-30a5-be91-69ae0b9a6db9.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     3356
IP address blocks:        216.24.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:49:a0:52:05:cb:4c:07:0a:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=0ad5ee23-d82a-443f-968b-5b480ae00c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fa:d4:74:aa:b7:52:22:04:f6:33:95:ec:85:
                    45:27:4c:21:47:fd:60:d3:df:fe:84:72:dd:cc:61:
                    54:5e:8e:e5:87:8a:0b:b4:46:8f:cf:e3:9d:f9:06:
                    7e:9a:0f:b4:79:88:1a:1f:e1:4c:f9:2c:7a:45:fb:
                    24:31:c6:ae:3f:ff:22:8e:cc:de:69:9d:0d:31:5d:
                    e2:61:41:0f:3e:2d:40:c5:6f:ef:70:57:7f:4d:22:
                    21:d4:9b:64:d3:1f:de:85:b8:31:74:db:6f:b1:89:
                    75:01:f6:d1:b6:f9:46:63:55:58:d3:70:e8:12:5d:
                    8a:e8:3b:87:f2:08:19:5d:94:f2:da:8b:d2:50:75:
                    6c:af:c0:2b:b1:d2:30:5e:1e:44:60:c2:18:e6:0e:
                    8f:ff:3a:6f:f2:32:ff:35:d2:c3:9c:b2:74:fe:a3:
                    78:f2:fe:4f:2b:f6:11:d3:6c:e8:32:a7:a8:6d:80:
                    a3:49:b5:3d:26:bc:2e:82:2a:bb:d9:45:18:40:c0:
                    cf:98:84:80:6b:a3:0b:ac:30:7e:17:3b:d0:31:0e:
                    e8:63:f0:21:99:42:0b:0d:74:6c:d0:36:f8:f7:be:
                    07:eb:93:83:5e:4e:3c:2a:cd:65:52:d8:e0:ca:e9:
                    d8:5e:86:36:bf:53:0c:6d:d8:b5:15:67:73:dd:df:
                    13:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B5:77:41:DE:8C:08:DE:48:9F:FE:B3:05:4C:51:98:E3:BF:DA:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6b2dac81-bc57-30a5-be91-69ae0b9a6db9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:88:b3:88:d9:dc:49:03:04:4c:58:c4:77:e5:3b:f7:1f:15:
         7b:87:8d:03:c1:39:1a:50:20:27:4f:c1:37:0a:19:2d:c6:44:
         95:10:21:12:8b:29:8d:e8:b6:fc:8f:ff:e9:af:7b:79:93:24:
         9b:92:43:06:94:d2:a7:13:2b:ba:6f:3b:e5:ef:af:8f:5e:17:
         34:16:03:89:e8:59:d8:37:62:6c:4d:d6:a5:86:fb:15:04:05:
         2b:f3:fa:23:eb:75:b8:4f:59:0f:42:bb:e3:07:12:0a:f4:23:
         de:85:7e:d7:b2:2e:e6:41:2e:20:f5:36:cb:2a:c0:7a:50:4a:
         69:23:01:54:3b:0d:03:ae:7a:78:69:6f:10:53:33:c8:b1:24:
         ce:bf:ab:a1:27:59:02:98:cf:90:31:a4:ee:36:bd:cd:19:fa:
         42:ef:77:80:40:8a:3a:af:45:05:4b:63:66:6f:bf:ad:3f:13:
         39:ff:56:67:08:17:c6:60:02:3d:93:0f:4d:06:0c:15:7f:0a:
         ad:94:6f:e8:8a:29:0a:f7:b6:47:97:5f:54:75:58:11:bf:05:
         ad:ce:ea:df:00:80:2a:b8:c7:5d:80:34:23:14:6f:b6:24:27:
         a7:08:98:04:da:c4:0b:27:28:ad:57:82:1f:76:70:2d:a4:b1:
         4c:4f:b8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:35:04 2025 by rpki-client