Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/00c85fc7-65ee-32df-848b-4d150039de4d.roa
File:                     00c85fc7-65ee-32df-848b-4d150039de4d.roa (raw, json)
Hash identifier:          ihQwK0WVT1tSQ3c/SItbF3b4Gg06KhhCTkLme5siiSc=
Subject key identifier:   B9:9F:E8:04:D5:FC:32:A4:E8:B1:48:B8:64:C5:6F:DC:BF:FC:C3:0B
Certificate issuer:       /CN=28d0c262-8ea2-444a-ab1e-6d07c3483e45
Certificate serial:       010D0C9F43285849203C16220996611FBFC6E960
Authority key identifier: 7B:FD:21:C3:F3:A0:5F:FC:74:CB:DE:A6:8F:D9:34:04:EC:8B:08:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/00c85fc7-65ee-32df-848b-4d150039de4d.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     7018
IP address blocks:        216.169.100.0/24 maxlen: 24
                          216.169.101.0/24 maxlen: 24
                          216.169.103.0/24 maxlen: 24
                          216.169.104.0/24 maxlen: 24
                          216.169.105.0/24 maxlen: 24
                          216.169.107.0/24 maxlen: 24
                          216.169.108.0/24 maxlen: 24
                          216.169.109.0/24 maxlen: 24
                          216.169.110.0/24 maxlen: 24
                          216.169.112.0/24 maxlen: 24
                          216.169.113.0/24 maxlen: 24
                          216.169.114.0/24 maxlen: 24
                          216.169.115.0/24 maxlen: 24
                          216.169.116.0/24 maxlen: 24
                          216.169.117.0/24 maxlen: 24
                          216.169.118.0/24 maxlen: 24
                          216.169.119.0/24 maxlen: 24
                          216.169.120.0/24 maxlen: 24
                          216.169.122.0/24 maxlen: 24
                          216.169.123.0/24 maxlen: 24
                          216.169.124.0/24 maxlen: 24
                          216.169.125.0/24 maxlen: 24
                          216.169.126.0/24 maxlen: 24
                          216.169.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:16:22:09:96:61:1f:bf:c6:e9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28d0c262-8ea2-444a-ab1e-6d07c3483e45
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=6e73b269-648f-4d5e-8230-b633a9103895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:db:bb:11:dc:4d:84:99:04:e0:e7:0a:61:7c:
                    49:9e:98:da:ed:27:31:ba:fb:cf:20:26:c5:f5:b1:
                    6c:1d:62:65:de:89:ba:93:b5:d9:cf:58:ba:39:bf:
                    00:98:a0:d0:9f:04:4a:d9:04:6f:97:b4:c6:25:89:
                    8e:7f:a5:fe:43:51:c2:84:8a:0f:0b:9f:b8:95:df:
                    c6:9a:2f:d5:31:0d:36:cb:db:2e:13:ff:76:97:4b:
                    5b:a3:5f:6a:50:70:be:3a:36:18:8f:56:3c:8f:22:
                    6a:02:e7:d6:a5:00:c4:96:0b:57:15:f1:9b:b7:2f:
                    b0:8e:9f:e8:03:8d:a9:85:d0:8d:c4:7f:97:2c:d7:
                    a5:c9:af:4f:4f:2c:7c:9f:ad:3d:85:4c:b1:d5:a2:
                    27:51:ed:27:09:bd:6a:10:f0:77:98:b0:6d:58:f2:
                    b2:aa:69:3d:08:f7:09:d6:a8:af:87:bd:66:1e:a2:
                    32:d0:98:e5:cf:2c:15:dd:fb:d2:a3:73:df:c5:48:
                    96:9a:85:36:2d:f9:16:8c:6c:94:bb:0e:fa:30:0a:
                    64:dc:e0:80:f8:1d:cf:0f:b7:85:ec:a4:a1:3f:67:
                    d1:17:89:95:38:6a:b6:1f:7c:88:39:91:c3:47:f7:
                    96:ae:05:2a:d6:23:1b:00:24:c2:35:92:18:f5:d1:
                    ad:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9F:E8:04:D5:FC:32:A4:E8:B1:48:B8:64:C5:6F:DC:BF:FC:C3:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/00c85fc7-65ee-32df-848b-4d150039de4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.crl

            X509v3 Authority Key Identifier:
                keyid:7B:FD:21:C3:F3:A0:5F:FC:74:CB:DE:A6:8F:D9:34:04:EC:8B:08:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.169.100.0/23
                  216.169.103.0-216.169.105.255
                  216.169.107.0-216.169.110.255
                  216.169.112.0-216.169.120.255
                  216.169.122.0-216.169.127.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:86:eb:5c:88:e6:05:2c:12:5a:f3:7d:b6:8c:fc:50:6e:fc:
         cc:83:d2:01:90:0a:3e:2a:a7:31:1d:45:cb:da:23:c9:d3:15:
         02:9a:99:bf:e7:30:4e:1a:3a:80:48:25:2d:ec:15:09:b0:83:
         b2:c6:6d:ef:32:ea:7a:f9:59:76:24:39:22:c5:55:36:87:88:
         29:01:b0:0e:9c:98:aa:81:8f:b7:d7:02:7c:cf:10:a5:55:7f:
         6b:6f:be:1d:af:79:7c:0a:23:b7:33:61:3f:5a:38:38:c9:ae:
         17:d0:a1:78:f6:c3:02:b6:51:e1:aa:a6:e8:f9:00:e1:80:12:
         99:02:b5:6f:87:33:18:f7:b4:3f:e8:4d:42:01:88:02:f4:3a:
         bb:55:52:81:e1:dd:06:1c:14:90:32:a2:f9:d5:03:4e:0e:ea:
         cc:1f:22:8d:9b:1f:5c:51:69:dd:66:7d:4a:a8:90:b5:63:c3:
         d3:ab:17:41:93:9e:0f:08:3c:81:04:36:9e:4f:b5:7a:00:45:
         d9:50:3d:f7:3c:a7:27:56:39:cb:a9:65:3d:59:e0:d8:72:42:
         f3:1e:a8:ec:d7:f8:40:ce:7c:8e:cf:ce:4a:0b:a2:92:59:ed:
         fe:cb:74:4e:af:11:d7:79:36:23:fe:e6:75:c0:01:46:6f:1b:
         92:4c:0d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:24:07 2025 by rpki-client