Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/06b897cd-c149-375a-a100-7b8ecde282a5.roa
File:                     06b897cd-c149-375a-a100-7b8ecde282a5.roa (raw, json)
Hash identifier:          yyXw7MrFz+x6IafgCxgKz/RF5XooJ8N/7RF6YywhZa0=
Subject key identifier:   39:42:CF:B0:41:09:C0:05:A1:BB:EA:A1:3E:AD:8F:86:14:C8:FB:3B
Certificate issuer:       /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
Certificate serial:       010D0C9F43285849D42FA889BAF87A1942A9E500
Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/06b897cd-c149-375a-a100-7b8ecde282a5.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     13984
IP address blocks:        216.213.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:a8:89:ba:f8:7a:19:42:a9:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=9ed1078c-9619-4500-8ad7-50543b191a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:51:20:14:d1:50:93:93:94:62:dc:0b:6a:d3:
                    f9:a7:8a:67:50:4d:db:d5:2f:6e:28:64:75:66:fc:
                    d2:4b:27:6a:6c:21:ec:39:b1:25:af:8e:57:72:6c:
                    59:e4:5b:93:0e:86:b4:6d:f9:d2:23:ab:55:08:12:
                    12:c4:3c:00:00:73:1a:d2:83:f4:b9:6f:24:e9:fb:
                    6c:56:9b:65:60:98:89:97:ec:63:db:83:fa:25:a4:
                    1b:de:64:eb:26:88:90:3e:85:81:35:2f:09:75:e7:
                    5f:ec:9c:62:50:3e:d5:76:a5:84:bd:6a:cf:c2:95:
                    bf:8c:1d:7d:37:a2:85:59:76:1b:a4:40:2e:7c:23:
                    97:bb:9d:51:48:37:25:e7:1e:f6:94:62:c3:60:63:
                    08:4f:4f:48:55:38:84:25:a5:e3:64:08:fd:6e:8b:
                    ca:fe:88:9f:6e:0e:f0:a6:c5:7f:7a:75:1d:92:70:
                    20:af:9b:e5:44:62:21:03:51:da:40:0e:c8:0a:e4:
                    08:4f:5f:53:7e:fc:c1:50:5c:4d:89:57:c2:1e:b3:
                    c5:77:64:3b:39:0a:b2:61:5b:5c:04:4a:2f:34:d5:
                    17:6e:2e:d3:5d:5f:2e:ab:c0:22:26:a6:a8:73:3c:
                    68:15:b8:8d:ee:4b:e1:88:c6:1e:30:f5:e6:2c:98:
                    00:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:42:CF:B0:41:09:C0:05:A1:BB:EA:A1:3E:AD:8F:86:14:C8:FB:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/06b897cd-c149-375a-a100-7b8ecde282a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.213.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:fc:e8:75:87:b0:c0:c2:45:a0:9c:68:35:5e:b1:bf:e7:7f:
         27:a7:da:83:84:1a:05:4f:0f:97:2c:ee:0e:e3:c1:9a:ee:05:
         15:c6:5e:5d:aa:df:b5:d2:7a:c4:4d:7b:94:bc:68:57:cd:64:
         a8:2c:a9:fe:a5:55:e9:6e:ec:a4:2f:4c:a2:47:9d:af:b4:a9:
         2a:56:04:33:3a:fe:ad:aa:10:26:28:40:5f:a4:16:21:9f:64:
         90:9c:b4:6e:b6:69:0c:72:85:cd:5a:92:62:d1:9c:76:95:92:
         3d:3e:be:79:95:b1:05:1f:35:3c:13:de:16:ff:63:ba:a8:f7:
         50:8a:06:35:ac:2b:c9:82:4b:dd:29:9c:b6:d5:b5:c6:ee:3f:
         f9:fd:74:31:bf:c8:05:7c:00:e9:18:a0:6a:ab:76:37:03:e0:
         f7:5d:69:a4:7e:e9:05:9b:35:04:ac:27:c1:fd:3e:42:59:a1:
         33:5c:6d:7e:fd:da:e2:61:5d:7d:08:7a:93:32:a9:4a:38:2d:
         f2:bb:2b:1d:83:d9:c2:b6:ae:d1:ce:b7:af:a9:ae:03:23:f1:
         4c:71:c5:6f:1a:1d:e9:00:3b:4e:6d:95:c4:14:9f:ba:e7:76:
         50:9f:a6:a7:4e:b4:b3:02:49:76:6e:bb:f5:92:dd:74:5a:17:
         67:df:f1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:23:23 2025 by rpki-client