Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/1ee8803a-04ae-3d93-bae1-2104ee0f5671.roa
File:                     1ee8803a-04ae-3d93-bae1-2104ee0f5671.roa (raw, json)
Hash identifier:          WEzkK2G7bTvzB80SRwK1q8bc93FsgR0GaecdAx9sszA=
Subject key identifier:   E6:89:D2:50:26:DD:C1:F5:84:21:C2:E0:C3:7B:5B:26:64:3A:70:18
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584A00DAB7AF7FF643F2F66BB4D0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/1ee8803a-04ae-3d93-bae1-2104ee0f5671.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        216.219.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:b7:af:7f:f6:43:f2:f6:6b:b4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=9530918a-594e-4d50-9e0e-1074c9bf6612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:67:8f:ac:a0:38:b5:f1:08:2f:d6:bf:68:64:
                    5a:9c:ac:c4:a9:29:ef:50:c4:e3:a5:01:1b:dc:4d:
                    a1:ea:d6:0f:1d:26:11:2b:e7:6e:8d:33:07:50:c7:
                    50:2a:94:71:97:ba:14:2b:64:65:d7:c8:3b:5b:70:
                    ed:4a:79:8b:d0:12:23:f0:c0:3c:00:3e:17:5e:4a:
                    13:9f:11:4a:06:33:ad:46:c2:5f:f0:1b:b9:26:10:
                    d3:c8:6c:df:90:13:0b:cf:b6:72:26:bb:2f:a0:8c:
                    3f:e0:e3:de:db:c4:94:ce:ee:44:61:07:e9:46:f4:
                    d9:21:9a:c7:95:3f:d0:5a:4f:dc:d3:82:85:00:b0:
                    51:74:be:f0:e5:d9:44:3c:a4:de:bf:ad:ad:92:56:
                    1a:bd:94:57:85:ae:33:4b:a4:8c:4b:42:f8:0c:72:
                    58:a3:04:09:5f:17:9c:a9:d0:9b:b2:0f:02:12:f3:
                    62:ef:d9:1b:fd:29:dc:d9:0a:cb:be:61:3e:6e:6c:
                    98:b9:49:f7:92:b4:e4:89:2f:e6:06:b9:97:ff:e6:
                    79:ed:bf:96:85:6b:b3:d3:1e:2b:a1:ca:de:cd:a5:
                    fb:46:bf:b6:5f:13:d6:f0:19:78:6a:ef:b3:f2:3a:
                    3e:06:d0:ce:83:9a:f5:49:05:43:85:8b:e8:87:d1:
                    5c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:89:D2:50:26:DD:C1:F5:84:21:C2:E0:C3:7B:5B:26:64:3A:70:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/1ee8803a-04ae-3d93-bae1-2104ee0f5671.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.219.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:f1:34:f9:3b:45:63:b2:91:92:71:f5:23:3c:47:b9:6a:12:
         77:ec:e1:fb:d6:e1:52:44:74:52:a9:b1:4c:db:7c:e2:7b:d1:
         d0:e7:bf:9e:ba:2b:85:13:32:0d:20:28:30:84:8d:4e:c0:85:
         91:97:05:0c:fd:06:bb:e1:f9:4f:bc:25:f6:b7:c2:77:f0:47:
         d9:25:01:da:bf:e8:69:4f:92:13:d1:54:b8:1e:70:e9:b4:54:
         f8:3e:59:ca:3f:7e:b4:6d:f8:ae:83:9b:ba:07:0f:4f:44:be:
         ba:0d:41:b9:ce:0a:7b:2f:bd:9b:14:80:ab:8e:55:45:b4:9e:
         af:89:04:d2:68:b2:5c:0f:fa:34:f5:a8:67:9b:fa:44:00:78:
         cb:98:02:cd:21:1a:42:59:9c:c0:98:61:0d:f3:4e:24:37:e5:
         b4:4a:4d:67:e8:53:8d:42:59:02:81:33:9f:c1:a6:07:e5:60:
         f8:0a:b4:c5:70:e1:67:0d:fb:34:39:aa:6d:93:d7:c3:01:90:
         81:bc:96:2b:7b:18:88:3a:22:bb:0a:cb:b9:b6:eb:c9:b5:0e:
         eb:56:59:e5:53:fc:6c:57:e0:4e:8f:4a:52:19:d4:c4:0f:b7:
         92:7b:6c:dd:31:49:0d:19:29:7b:69:46:ba:bc:31:77:d5:24:
         60:ea:5c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:24:49 2025 by rpki-client