Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/5b1aa190-79dc-3047-a857-d82573847989.roa
File:                     5b1aa190-79dc-3047-a857-d82573847989.roa (raw, json)
Hash identifier:          mvobjbenisrvyFJy9yfHlS3sGpJeyvxPOhreQou4/gQ=
Subject key identifier:   63:EF:4C:01:9B:EB:74:CC:9C:37:1C:76:63:C1:38:31:10:DC:A3:6F
Certificate issuer:       /CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
Certificate serial:       010D0C9F4328584A348017289FCB5537D4CE7600
Authority key identifier: 9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/5b1aa190-79dc-3047-a857-d82573847989.roa
Signing time:             Mon 16 Jun 2025 01:00:49 +0000
ROA not before:           Mon 16 Jun 2025 01:00:49 +0000
ROA not after:            Sun 14 Sep 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        216.24.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:34:80:17:28:9f:cb:55:37:d4:ce:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
        Validity
            Not Before: Jun 16 01:00:49 2025 GMT
            Not After : Sep 14 01:00:49 2025 GMT
        Subject: CN=9c236835-0f76-487b-9286-9c9c107a47b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:75:a7:16:71:38:eb:e9:46:90:5a:20:69:8f:
                    a3:1a:a8:59:8d:a4:b2:ec:9a:d2:ef:d2:56:1d:16:
                    c0:c9:e1:48:0f:c7:f8:33:38:dd:0a:23:75:fe:b5:
                    e3:8b:81:93:47:10:4d:bc:16:16:8d:25:57:43:ff:
                    aa:67:ba:b3:88:d9:01:83:96:bd:d1:92:41:85:7d:
                    e7:14:64:4f:73:3f:35:88:e2:76:03:26:98:52:32:
                    9b:a5:16:fc:31:18:b1:ea:2d:aa:2d:af:9f:be:2e:
                    fd:e5:55:5d:22:7d:7a:51:0f:a3:4b:40:7e:3b:00:
                    76:0e:80:fb:4d:6e:25:34:a4:51:03:2a:1f:e7:18:
                    c4:f9:e2:86:c1:3d:b1:14:eb:8c:29:37:8d:7e:d1:
                    82:e3:1b:20:59:a0:cc:37:09:08:d3:b6:fb:c0:fe:
                    e2:dc:2f:6c:65:4b:8f:de:de:bc:09:0b:4a:ec:34:
                    e4:7b:ad:e8:b2:fa:ea:f8:c8:9e:03:71:92:76:81:
                    10:fa:b8:e7:84:2b:29:4b:65:1d:db:f7:bd:97:8b:
                    6e:1b:6f:aa:8c:c4:6d:6a:21:ff:5d:33:f7:b9:2f:
                    2e:4f:23:56:5d:83:2c:f5:66:9a:1c:3d:31:11:c0:
                    55:b1:dc:c5:e6:16:95:e4:04:ae:13:e5:20:a0:69:
                    11:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:EF:4C:01:9B:EB:74:CC:9C:37:1C:76:63:C1:38:31:10:DC:A3:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/5b1aa190-79dc-3047-a857-d82573847989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl

            X509v3 Authority Key Identifier:
                keyid:9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:8e:eb:6e:b4:98:0c:8c:e5:92:57:26:7e:4b:9a:da:08:af:
         99:37:6a:19:c5:42:76:45:7f:fb:2a:2a:63:c3:5f:f6:76:20:
         64:46:b7:ad:39:58:d0:bb:c8:06:90:77:0f:62:e0:ae:9c:ba:
         3e:2c:4f:eb:03:d8:b4:c2:d8:e9:f3:b9:38:78:8b:cc:9b:04:
         a7:d9:76:6d:6d:ac:f7:ca:44:c4:17:3e:94:1d:c8:11:3a:23:
         34:19:ba:7f:d0:c4:ef:42:de:03:06:91:34:1e:5f:8c:45:12:
         66:24:16:37:2a:a9:c5:43:66:58:17:41:00:66:f0:c1:f5:4f:
         9c:3d:f2:0a:68:79:7d:54:3c:cd:1a:27:fc:0b:24:94:49:de:
         4e:e1:af:80:fb:bf:05:91:f7:50:6c:6f:c1:3c:1b:ea:e2:58:
         49:69:12:b1:14:29:f8:9d:da:f4:5a:b3:a7:16:a1:54:89:c6:
         78:fa:04:e4:b6:ab:72:5e:b7:1a:2a:ad:cc:1c:92:47:fb:2b:
         de:8d:f3:e7:d5:ac:ba:6a:ab:cb:94:b8:c0:bd:c2:5f:5a:ff:
         ac:22:f5:68:11:54:3b:5f:60:89:d6:27:73:5d:12:43:b4:3e:
         c8:ff:d9:eb:12:45:69:55:9f:2c:f1:2e:e4:57:7e:69:32:72:
         d8:5e:a0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 06:06:33 2025 by rpki-client