Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/0ef7caad-6f44-3d4a-9455-44979931e524.roa
File:                     0ef7caad-6f44-3d4a-9455-44979931e524.roa (raw, json)
Hash identifier:          6BgJrHfrlxIW53S6xSo6mEjiyOrjXD5vWgGUib11k+k=
Subject key identifier:   20:74:60:F1:7D:64:82:09:A9:E9:D8:11:0F:96:01:76:CC:37:F6:CB
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584A5DF7E6FA27A60B19FCC18500
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/0ef7caad-6f44-3d4a-9455-44979931e524.roa
Signing time:             Mon 30 Jun 2025 21:30:26 +0000
ROA not before:           Mon 30 Jun 2025 21:30:26 +0000
ROA not after:            Sun 28 Sep 2025 21:30:26 +0000
asID:                     7018
IP address blocks:        216.180.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5d:f7:e6:fa:27:a6:0b:19:fc:c1:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Jun 30 21:30:26 2025 GMT
            Not After : Sep 28 21:30:26 2025 GMT
        Subject: CN=5bad4b3f-bd30-421a-9c2e-5b2a067eef95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a2:ee:bd:2f:2b:98:60:84:15:3e:3f:2f:d3:
                    97:e7:24:ee:50:40:2a:33:29:8c:2b:8a:82:5d:96:
                    eb:dd:b2:5e:3e:75:14:39:0c:29:01:1f:52:52:ef:
                    bc:88:58:f1:d0:5d:41:e2:09:bc:03:ce:4b:0e:90:
                    0c:0e:67:02:f1:4b:85:11:56:c3:41:f5:33:e2:00:
                    0a:55:54:4b:4b:18:30:53:b5:d8:3f:16:f4:57:63:
                    6e:82:76:2c:6a:15:b6:e9:28:68:dd:0f:b0:10:df:
                    78:78:b8:b8:02:47:0c:94:f6:d9:88:16:04:21:9f:
                    c7:68:cd:f0:38:e5:46:5f:f9:13:d5:94:c1:f4:ed:
                    70:9d:8c:dd:19:ee:37:cf:46:5d:98:99:8e:2d:3c:
                    6f:b1:02:73:53:8b:6c:d5:5e:22:e2:86:1a:2a:f4:
                    a5:c8:b1:7a:b4:e4:8a:b4:54:06:00:ec:bc:79:f6:
                    ef:0c:06:e5:1e:7a:7b:5b:55:22:56:9d:d6:83:23:
                    0d:93:bd:9b:c8:0d:36:78:aa:a9:a2:83:f1:d9:bd:
                    27:39:db:07:46:96:0a:1f:a5:11:cd:bf:72:09:86:
                    13:01:63:6c:82:3d:8e:f6:8c:e2:56:6c:58:ca:f5:
                    b1:05:e3:46:02:75:83:f3:6d:ca:00:45:36:12:f2:
                    83:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:74:60:F1:7D:64:82:09:A9:E9:D8:11:0F:96:01:76:CC:37:F6:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/0ef7caad-6f44-3d4a-9455-44979931e524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.180.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:a1:53:ef:63:a1:86:d8:27:49:6a:49:ef:19:31:54:8d:3c:
         ca:2e:9e:91:64:a2:c8:ee:20:0f:35:0d:93:de:d1:25:a6:fb:
         be:03:61:69:1b:68:33:32:a4:c6:3e:8d:c2:c9:2c:73:c9:8b:
         0e:33:42:e0:da:b4:e8:b9:c5:10:47:b6:d5:be:36:13:94:9e:
         a4:14:e7:db:3b:22:61:8e:c0:82:b5:66:d2:27:72:54:c3:15:
         cb:c9:79:f7:56:3b:9a:92:32:f0:86:c5:06:15:62:30:5a:f2:
         3b:4a:96:36:a2:8b:c7:7e:f0:6d:3f:7b:36:2c:40:c2:d7:6e:
         f7:a1:81:36:44:19:ef:75:08:83:04:2b:cc:5d:94:fc:99:5f:
         f5:7c:7b:92:4f:23:4a:08:50:2f:52:da:42:06:dd:4b:66:a4:
         1e:79:38:d2:9e:52:58:1a:02:1e:91:75:48:ac:31:25:af:77:
         27:31:dd:2d:18:28:5a:84:19:96:b4:74:44:df:7e:eb:1a:41:
         c8:26:15:de:2b:9f:fa:72:49:e5:0e:df:e4:3e:fa:e4:0f:6f:
         5b:7b:8a:f3:2c:4e:8e:8b:c6:55:fb:53:f8:ae:8b:24:01:3c:
         a1:cc:b7:32:06:d9:76:c3:d1:5c:51:4b:74:15:08:f8:44:18:
         00:27:54:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 14:08:43 2025 by rpki-client