Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/7f659af6-1d84-34e3-9205-6190389bd336.roa
File:                     7f659af6-1d84-34e3-9205-6190389bd336.roa (raw, json)
Hash identifier:          6G5UiAyj0yBlraXZB396DWfZenCY5JDvw2NtqveEhiQ=
Subject key identifier:   16:80:A7:36:94:4D:21:33:86:D0:FC:7B:6B:75:77:7E:4C:3E:3A:91
Certificate issuer:       /CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b
Certificate serial:       010D0C9F4328584A66C0743D965310D1DC2B4100
Authority key identifier: 90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/7f659af6-1d84-34e3-9205-6190389bd336.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        216.205.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:74:3d:96:53:10:d1:dc:2b:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=d9a8e020-6e36-44ef-a44b-12ed109d63b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:67:36:a8:7a:cf:fb:3d:c2:06:24:ad:d5:a4:
                    0a:16:dd:b1:d1:e3:f8:60:82:a6:d2:b6:d0:09:d6:
                    1c:32:48:f3:86:5c:2a:dd:46:38:ea:1e:c2:51:32:
                    30:d6:bf:60:48:e4:01:0e:92:92:ca:48:0c:44:14:
                    22:3c:8d:ce:43:af:53:77:b7:f7:30:ef:55:1d:07:
                    df:62:fd:20:af:87:ac:6b:34:57:5a:4f:11:10:15:
                    af:6a:84:c2:e6:fc:65:46:9e:cd:39:ed:71:d4:d6:
                    83:5f:f5:88:fb:ba:9b:fb:ac:78:4a:5a:48:f5:d0:
                    9d:a6:46:47:6f:55:bd:6d:a8:c9:f7:df:d6:d6:8b:
                    25:10:4c:91:9d:18:bd:d8:d0:6a:28:53:81:1c:65:
                    5f:c5:2e:ed:e3:27:7b:41:dd:75:5f:67:83:51:aa:
                    8e:66:e0:54:a5:36:11:f0:3b:c0:1e:10:23:d4:40:
                    18:36:37:d6:a3:bd:7d:41:3a:ba:07:f5:20:a7:be:
                    5e:75:78:8a:a9:98:73:f3:4f:1d:81:38:6e:65:e9:
                    c2:5e:42:df:12:df:b1:a7:2e:1e:4d:fd:92:ed:0c:
                    35:7c:06:44:d0:f2:1e:62:7f:dd:c2:f2:fe:9b:2a:
                    96:dc:08:a0:16:fc:51:b6:9d:0f:62:86:ba:ef:95:
                    4b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:80:A7:36:94:4D:21:33:86:D0:FC:7B:6B:75:77:7E:4C:3E:3A:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/7f659af6-1d84-34e3-9205-6190389bd336.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl

            X509v3 Authority Key Identifier:
                keyid:90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.205.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:fc:95:c4:41:c3:98:37:74:0d:36:ec:c4:ea:53:40:42:3f:
         0e:51:e7:56:00:7c:f3:11:13:61:94:80:bc:0d:fa:19:99:9b:
         34:f3:bf:db:72:1e:9d:ab:22:62:92:fc:25:93:ce:39:12:0e:
         b9:30:be:56:65:7a:67:84:c8:3e:a7:e9:ac:6f:60:65:11:5f:
         32:de:a8:9f:8e:cc:6a:c1:6f:60:bf:d4:6e:29:37:05:57:3f:
         0c:ca:7a:b9:3f:32:83:a9:87:04:64:fd:56:38:e7:03:a8:88:
         93:5c:f8:ee:bf:87:50:2a:08:59:ba:1c:d4:d3:8d:d9:1b:42:
         55:a2:5d:d4:e1:bb:b3:24:31:a7:dd:3c:f5:c8:21:44:76:1b:
         23:2c:25:cb:7c:a0:09:24:b5:86:6c:b9:25:78:03:79:92:96:
         27:7b:68:4b:f0:3a:74:d4:e1:02:c0:a0:93:b5:ff:54:06:af:
         59:f0:89:66:3e:48:59:1b:cb:14:10:49:3e:02:ff:1c:59:8e:
         39:eb:c8:cd:7e:ad:8a:49:21:13:d5:cf:d6:60:5e:b7:c7:c9:
         f1:d8:37:f3:b1:8b:7e:1b:59:ec:53:91:2b:de:6c:81:d8:1a:
         fa:a4:b9:99:cf:de:ba:e3:5f:69:60:22:ae:62:53:d0:b3:5b:
         10:c9:6d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 09:27:43 2025 by rpki-client