Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d06db4bf-3c6d-32ab-84cb-4b6555d1cde7.roa
File:                     d06db4bf-3c6d-32ab-84cb-4b6555d1cde7.roa (raw, json)
Hash identifier:          IwkEdGIYLvfOIPFmqXpsId2WHIPASTD9re2QdR25zhs=
Subject key identifier:   A9:73:C4:36:D5:DF:E1:12:9E:CB:FC:44:7C:96:3B:C5:D2:3B:35:DA
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A050A7CC42B1E8F42721CF4C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d06db4bf-3c6d-32ab-84cb-4b6555d1cde7.roa
Signing time:             Fri 30 May 2025 01:00:48 +0000
ROA not before:           Fri 30 May 2025 01:00:48 +0000
ROA not after:            Thu 28 Aug 2025 01:00:48 +0000
asID:                     20473
IP address blocks:        216.122.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:05:0a:7c:c4:2b:1e:8f:42:72:1c:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 30 01:00:48 2025 GMT
            Not After : Aug 28 01:00:48 2025 GMT
        Subject: CN=e1758de5-8bd0-4065-8864-a4e467191e7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b0:14:df:08:79:e5:74:59:58:2b:50:34:aa:
                    ea:fe:24:ba:2e:58:e6:07:88:8f:b1:fd:e9:c3:c6:
                    5c:38:b5:3f:5f:37:c0:d4:e0:74:31:5e:94:1b:88:
                    14:f7:db:8f:c8:9d:10:05:e9:ca:99:94:5f:f1:1a:
                    7a:e4:5e:8e:ae:fd:53:28:d3:73:81:04:82:71:81:
                    84:8d:df:b2:fd:ec:79:fa:e1:0c:e1:66:d0:0e:1c:
                    60:f8:0b:39:07:cb:77:57:d5:7f:9c:3c:85:b9:ba:
                    3c:14:d1:ac:cc:10:93:9d:0d:20:f7:b0:c7:c7:7c:
                    ad:bc:48:8c:c0:8a:f8:e0:33:ba:90:5e:7b:b6:ee:
                    6a:15:b9:89:52:90:1b:3b:bc:98:e0:09:e0:b9:91:
                    77:c1:4a:ba:3c:32:90:04:1f:78:3f:a8:e2:25:97:
                    c8:cf:73:83:5a:71:63:f6:6a:ed:f8:0b:af:93:fd:
                    0b:c2:3d:24:c1:23:38:b9:69:ce:17:52:42:83:e1:
                    de:5e:f7:f1:7a:b6:ce:5b:7c:2b:d0:ec:fb:bb:ef:
                    78:f7:c9:2d:29:f5:58:ca:ff:32:e3:88:10:6d:77:
                    fd:58:17:26:bd:1e:5d:8d:f7:c5:70:07:b5:71:74:
                    07:d3:29:fa:8c:ac:5c:37:fc:d9:40:c1:ae:95:69:
                    7f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:73:C4:36:D5:DF:E1:12:9E:CB:FC:44:7C:96:3B:C5:D2:3B:35:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d06db4bf-3c6d-32ab-84cb-4b6555d1cde7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:4d:70:c8:8c:bc:27:ca:80:ab:2e:06:a5:8a:b7:e1:fa:15:
         30:b7:f8:fc:8c:1b:a1:2f:d2:ef:ee:12:ee:41:e3:eb:98:87:
         7b:dd:e2:83:69:3d:03:28:f0:81:5c:06:52:24:9f:66:7a:9d:
         4e:bf:c9:ee:6a:fd:f0:f0:76:6d:8c:b4:b7:be:2f:26:fb:4d:
         de:bb:4d:6e:24:3b:fa:e1:2b:8c:06:ff:a4:49:59:b1:28:99:
         ae:50:94:df:45:be:d2:9f:e1:52:29:38:a0:64:a4:09:33:f8:
         52:36:22:be:0a:f3:86:5e:a4:5c:7b:f5:7c:94:02:d1:64:56:
         9c:9d:79:84:01:32:91:be:31:4b:0c:5c:b7:86:28:60:ba:e1:
         33:8c:07:03:7d:f4:b1:0d:d7:00:03:93:67:cb:e5:f9:77:5d:
         72:13:50:3e:30:5c:bc:97:69:ed:8b:bb:1d:e8:fc:2c:c7:ee:
         bb:d2:48:b4:85:c1:56:7b:68:30:66:fe:44:81:a6:ae:e0:5b:
         26:09:c1:e4:cc:85:4a:d9:d0:97:b2:cc:0a:d1:90:20:8b:83:
         f9:36:66:78:54:8b:29:65:b4:2f:2a:73:c7:91:98:b4:5e:5d:
         35:e1:7e:b1:52:7d:82:2a:ec:b1:7c:90:7c:78:0d:03:8f:03:
         6b:41:11:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 18:00:24 2025 by rpki-client