Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/a6427e1d-73b7-3bc2-ac5c-9bd397d29897.roa
File:                     a6427e1d-73b7-3bc2-ac5c-9bd397d29897.roa (raw, json)
Hash identifier:          IEsV/4BJdZySlnty6FYZ1qNOYHGfZ/hq5rPXmiWtrZY=
Subject key identifier:   EE:B6:2B:11:5F:D6:75:EB:99:61:0A:91:0C:D3:4A:1F:74:AE:81:48
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F43285849FB8624051A4FE3CE4793F380
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/a6427e1d-73b7-3bc2-ac5c-9bd397d29897.roa
Signing time:             Mon 26 May 2025 15:12:00 +0000
ROA not before:           Mon 26 May 2025 15:12:00 +0000
ROA not after:            Sun 24 Aug 2025 15:12:00 +0000
asID:                     23316
IP address blocks:        216.193.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fb:86:24:05:1a:4f:e3:ce:47:93:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: May 26 15:12:00 2025 GMT
            Not After : Aug 24 15:12:00 2025 GMT
        Subject: CN=1460e1fe-6991-4450-a179-b32bf5da04b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:63:2a:ac:ef:09:a5:11:40:6e:8c:5c:cf:51:
                    ec:83:38:be:0d:6b:92:23:1f:34:13:e6:46:6c:54:
                    37:e5:08:55:be:4f:e3:a9:92:4f:63:2a:ff:37:f8:
                    51:e8:95:eb:10:b5:69:ab:51:96:30:73:8f:7e:9b:
                    5d:68:47:fb:38:5a:8b:6d:d1:fa:21:48:30:c6:e1:
                    3c:f9:35:45:3e:ff:7f:ea:09:68:b5:ba:1d:d1:51:
                    7f:3f:5d:75:90:85:dc:ba:23:3b:e0:90:7f:14:24:
                    a7:34:18:1a:12:34:62:f7:7c:93:eb:ae:37:e0:3f:
                    54:2e:d1:65:18:f1:91:be:35:89:78:9e:b5:22:2e:
                    9d:b6:12:fa:a7:2c:8c:e4:9e:81:d0:c9:29:6e:1d:
                    bc:bd:09:61:ed:98:b3:4d:e3:57:f9:63:51:de:7d:
                    70:03:b4:2d:be:04:e6:cf:27:ad:30:d3:52:0e:fa:
                    65:6c:64:1d:9d:42:8d:81:dc:d9:51:73:dc:bf:9a:
                    70:fe:07:f6:d5:0c:a7:64:ea:49:59:61:52:22:de:
                    c1:63:bb:7f:1a:1d:47:e5:55:3d:ac:71:49:e5:a1:
                    76:98:49:f7:17:db:41:04:8a:50:3f:3c:9c:99:5d:
                    f7:e6:76:c4:16:2f:3a:6d:cf:c5:85:06:1c:c5:84:
                    08:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B6:2B:11:5F:D6:75:EB:99:61:0A:91:0C:D3:4A:1F:74:AE:81:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/a6427e1d-73b7-3bc2-ac5c-9bd397d29897.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.193.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:37:c2:ca:38:5b:ce:d5:04:0b:7a:fd:64:22:fa:d5:d1:17:
         2c:c8:a1:c9:97:88:17:bd:cb:fe:72:d7:a9:f9:dc:be:4d:18:
         56:20:73:27:77:08:f4:76:26:1b:94:4e:3b:33:cd:bc:f4:1e:
         e1:99:55:ce:b9:2e:48:b8:03:83:1f:85:5d:8f:2a:d0:a6:e9:
         39:01:eb:70:93:97:7d:4b:fc:37:08:d1:fc:d6:d6:aa:d1:48:
         e4:31:fc:3b:3f:9d:be:32:2e:67:17:f0:0f:a6:2a:b1:a1:43:
         fd:74:4e:74:a6:b6:96:02:05:6a:95:20:41:c4:3f:03:11:08:
         1a:21:74:31:29:46:c3:cd:00:8f:03:96:09:57:1c:aa:ed:31:
         3e:17:30:ba:05:d3:27:d5:42:18:75:9a:20:be:b8:95:3f:aa:
         6a:ec:db:e9:5a:da:e6:4c:db:50:79:6f:0e:a1:97:9f:21:f3:
         73:95:2c:3f:4d:16:ef:ca:4d:38:6c:45:3b:9d:dc:2a:11:14:
         91:2b:4f:c7:4c:ad:09:26:a4:2d:b3:35:c0:27:b9:7d:98:49:
         43:f5:0a:b6:15:53:ea:39:90:a0:d8:59:18:46:e3:cf:47:3f:
         64:1a:31:7f:b9:a0:08:14:e3:42:e2:8c:f1:34:f3:72:ff:88:
         42:28:6f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:23:29 2025 by rpki-client