Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/37bf2a82-973c-3206-b667-141f274e217b.roa
File:                     37bf2a82-973c-3206-b667-141f274e217b.roa (raw, json)
Hash identifier:          yyesdEUljp+DF+RJ4WzDuxRpX3TiFWF85KOjS3bmi0M=
Subject key identifier:   25:63:EF:5C:8F:3F:2C:F0:7B:9B:6A:72:1D:00:7D:F6:0A:95:4F:C6
Certificate issuer:       /CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
Certificate serial:       010D0C9F43285849D594E2449AC134A4895EF4C0
Authority key identifier: CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/37bf2a82-973c-3206-b667-141f274e217b.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     16867
IP address blocks:        216.82.233.0/24 maxlen: 24
                          216.82.234.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:e2:44:9a:c1:34:a4:89:5e:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=e404278a-283a-4b1d-b9a2-12c406546248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:80:c7:18:25:48:3d:47:3e:07:32:19:46:ae:
                    c5:1e:68:7e:03:bc:27:d7:4c:f7:a2:65:ca:b1:3b:
                    5d:f6:43:fc:ff:6e:24:52:e4:8a:26:07:16:69:9b:
                    26:2c:57:75:de:61:18:8d:22:eb:62:9c:96:14:f2:
                    e9:57:9e:66:12:72:47:39:80:e7:c6:35:0d:d2:50:
                    1b:6e:dd:8d:f6:c0:eb:03:15:a7:a3:37:cb:b7:79:
                    b8:55:9e:fe:3b:a9:1f:22:d6:b1:1b:b2:cb:48:ad:
                    49:e3:4f:56:6a:b1:01:2b:a5:55:ac:88:6b:74:82:
                    22:8e:2b:2e:13:4d:4e:a0:0d:c4:71:b0:3e:df:e0:
                    7a:29:fc:d4:4c:15:4a:6e:33:b0:97:6d:e9:bc:be:
                    be:54:8b:82:e8:71:05:bb:bb:f4:20:70:ac:18:b8:
                    f9:54:44:22:82:ce:1c:fe:7d:54:37:ac:f1:98:47:
                    54:db:fc:d5:33:03:ea:fc:3f:6a:32:a0:14:fd:c7:
                    09:87:7b:4f:2a:d6:21:05:ae:2d:df:da:1e:92:ce:
                    de:d1:66:9d:a9:01:e9:82:30:f5:33:0e:22:39:39:
                    cc:61:c9:cf:f1:6c:80:69:18:98:d6:99:52:d6:7b:
                    d5:e9:cc:03:23:7f:d9:43:ab:b6:f3:1a:fd:b2:cc:
                    49:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:63:EF:5C:8F:3F:2C:F0:7B:9B:6A:72:1D:00:7D:F6:0A:95:4F:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/37bf2a82-973c-3206-b667-141f274e217b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl

            X509v3 Authority Key Identifier:
                keyid:CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.82.233.0-216.82.235.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:17:24:aa:ee:f8:00:da:90:3b:9c:0e:c5:d0:27:fd:f6:d0:
         b9:d0:24:3c:ba:82:19:78:87:9d:45:25:0c:eb:aa:37:b8:a8:
         2e:a1:27:1f:77:02:d0:4b:5c:d6:5f:69:36:15:57:38:7c:11:
         38:5f:a8:99:c0:37:37:9b:89:90:8f:7f:00:c4:0c:63:45:ca:
         ba:c3:ad:7c:36:bf:26:c8:23:03:48:f6:35:04:4f:97:30:f3:
         61:a2:a4:09:c9:de:60:10:d9:2f:88:e9:61:3b:97:26:bd:d7:
         84:05:0a:17:4b:10:f4:5c:d8:8f:86:29:98:b9:52:ad:e4:15:
         25:46:a7:58:02:54:97:68:a6:f8:49:f5:b5:9d:86:9d:3a:dd:
         d5:5b:94:66:09:71:cc:1e:46:6e:3e:2c:76:e5:4b:d7:b9:ed:
         9e:16:fe:6e:e4:27:68:ce:da:24:91:bc:6f:14:aa:99:e9:a2:
         b6:b9:a7:e4:fd:a8:29:03:da:97:fd:cd:64:c7:d8:10:88:2f:
         c3:2b:a3:66:47:ae:f1:44:4e:c2:a1:7e:26:cc:93:52:23:95:
         e8:8f:64:b1:8e:d5:60:87:43:83:16:fc:61:1d:20:2b:50:ec:
         2c:b1:70:56:84:47:22:75:03:a6:85:fb:a0:1d:a3:1d:c7:99:
         ca:0d:3f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:43:31 2025 by rpki-client