Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/81fd0784-84ba-3a2b-abbb-e73f40ed377c.roa
File:                     81fd0784-84ba-3a2b-abbb-e73f40ed377c.roa (raw, json)
Hash identifier:          y2a/s84bRHRxUELOr1ygj6k03KbuJmlBPM6KA3pB1/g=
Subject key identifier:   1E:E2:A9:8E:4E:60:C0:98:E5:F4:7F:13:6E:5E:16:8E:45:DA:E3:01
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F43285849E7BA7E08E557027A08128160
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/81fd0784-84ba-3a2b-abbb-e73f40ed377c.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     202
IP address blocks:        67.215.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:7e:08:e5:57:02:7a:08:12:81:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=8d6efb93-13f0-44a9-ab95-d1f2ecfbee02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1d:41:31:08:b0:d2:3a:4f:99:a5:b2:95:57:
                    06:fa:e1:e8:eb:f0:f3:87:3a:db:2f:18:dd:c2:08:
                    f1:fd:22:4e:9f:f7:5f:7a:fd:ac:e7:b0:c2:78:cb:
                    ec:3d:6e:e1:76:d1:51:11:36:9c:d5:f7:a1:83:4f:
                    7e:53:6c:3f:9c:86:4f:37:9e:41:2c:d1:a4:dd:8f:
                    61:fb:6e:f2:1c:69:3b:d1:5c:30:01:a5:63:44:01:
                    cf:a0:4d:58:4c:0f:4d:dd:f4:9f:25:b0:21:77:08:
                    00:e6:7a:d1:8e:57:62:ba:12:1a:95:8a:97:ab:fa:
                    da:9c:d8:8c:a5:16:de:fa:9b:bf:ec:f3:ef:99:b2:
                    26:ce:42:69:8f:2f:6c:41:bf:ef:b9:92:e1:20:87:
                    05:49:fd:3c:15:ad:a1:94:d9:9f:e7:48:92:04:13:
                    90:42:ee:20:64:31:d0:ce:56:af:d1:64:e3:12:90:
                    a3:13:76:aa:74:6b:f0:e1:f9:8d:5f:a2:04:46:64:
                    69:6e:bb:4e:40:d1:47:2c:21:9a:7e:d5:f2:06:86:
                    25:1d:26:d6:68:a4:8e:c2:dc:89:3a:4e:29:32:0a:
                    e3:b2:08:64:a3:fe:c0:19:02:a7:a4:ae:9e:eb:94:
                    bb:58:20:52:72:1e:0f:e9:57:32:d4:53:cf:fa:c4:
                    df:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E2:A9:8E:4E:60:C0:98:E5:F4:7F:13:6E:5E:16:8E:45:DA:E3:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/81fd0784-84ba-3a2b-abbb-e73f40ed377c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.215.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:50:d1:0b:98:40:fb:c7:07:b3:83:86:c8:f7:98:8a:80:f0:
         5a:fc:2c:68:23:b5:e0:32:28:73:9d:db:88:6b:4d:f2:ee:07:
         d8:6c:5a:ab:ed:9f:6e:91:c2:d1:f1:07:21:10:78:44:0d:d3:
         e8:bf:16:fe:64:c2:da:e3:89:fd:09:88:5e:e7:8b:25:6f:a8:
         92:7f:88:0d:dc:a8:bf:f2:03:2d:61:77:33:40:77:30:e2:e1:
         cd:ae:15:f4:aa:f6:57:33:c1:7a:fd:5c:83:a7:04:53:a8:87:
         07:00:28:a2:d7:47:4b:02:bb:59:b7:24:83:35:49:e2:a6:27:
         9f:6d:65:9c:49:73:9d:30:5e:47:6e:7d:78:63:6c:fd:4f:f9:
         67:4d:2b:a8:79:6e:20:9c:30:d0:0c:32:f3:2b:84:21:b3:ce:
         fe:6b:95:2d:24:e6:47:ff:64:d1:8f:79:08:8f:20:2f:d6:c7:
         39:ed:9f:e3:1c:a9:36:e9:1b:25:3c:46:8a:19:dc:10:3f:a5:
         d7:0d:fc:f1:ad:02:12:65:cd:23:76:12:7a:17:3f:5f:19:f3:
         d6:5d:ab:8e:64:52:ef:04:62:07:39:15:fa:f3:b0:d8:f8:05:
         83:fc:aa:f4:10:b4:f7:98:93:97:d7:96:c9:c8:ee:f3:c6:b7:
         e2:f6:aa:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:49:06 2025 by rpki-client