Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0de1a9d3-fdaf-30e8-bba8-843af24156af.roa
File:                     0de1a9d3-fdaf-30e8-bba8-843af24156af.roa (raw, json)
Hash identifier:          zOlduYLhI0X4hURJcElCHjMZK0yM5kDjNcw6NCTqLqE=
Subject key identifier:   12:A8:1F:AE:72:D9:CA:33:D0:8A:B4:18:CB:C3:88:C7:08:12:25:6A
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858491AA6C2601DC777C7F4DC2B20
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0de1a9d3-fdaf-30e8-bba8-843af24156af.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     15290
IP address blocks:        216.13.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:c2:60:1d:c7:77:c7:f4:dc:2b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=420d11e3-f6e2-43db-9d41-bac9bf7c29a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:59:a6:04:20:21:2d:db:68:10:37:c9:d6:d0:
                    6e:3b:77:8e:5d:e0:e3:fe:d1:55:f9:ca:63:ad:a1:
                    0e:c5:0a:f2:ee:aa:fe:c9:c6:36:7b:13:1a:1d:a9:
                    0d:f8:a4:60:64:e1:4c:64:24:56:6f:1a:2e:66:08:
                    a6:30:05:3c:ac:0f:df:1a:21:4a:e9:c3:0b:d7:9d:
                    b6:5a:fd:89:24:24:57:e5:03:93:d7:5a:3b:4c:20:
                    cf:3d:bb:94:cf:ac:1b:08:cc:50:31:30:76:a2:86:
                    71:5a:c3:9e:be:2a:4b:39:1b:7e:77:f2:9a:97:45:
                    a8:e0:37:08:62:8a:83:77:77:fb:d9:ec:2e:24:ad:
                    a3:d5:2f:87:6e:16:3e:0e:5c:a2:5b:e0:de:fa:5f:
                    9e:2b:5f:a7:d8:01:0b:4a:40:e1:c7:69:a6:57:03:
                    cc:51:cc:f5:c8:4b:a6:8a:ec:0a:59:ff:ee:f9:ec:
                    34:41:10:aa:fe:1d:f6:02:47:20:d6:94:25:ea:fe:
                    b7:f0:74:49:97:29:c5:d6:9a:9f:16:16:00:f6:19:
                    95:f7:db:3e:b9:91:ec:a0:91:40:54:45:52:62:79:
                    27:5a:43:1b:82:f1:ea:39:69:a4:f1:0d:da:a4:4e:
                    0a:fa:d0:27:b7:59:e0:cd:92:cc:93:8b:9b:e3:b7:
                    12:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A8:1F:AE:72:D9:CA:33:D0:8A:B4:18:CB:C3:88:C7:08:12:25:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0de1a9d3-fdaf-30e8-bba8-843af24156af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.13.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:33:1a:97:26:a9:82:bb:c5:93:68:9f:f7:98:a1:a7:98:cf:
         68:93:df:74:e3:66:b9:4f:84:1b:28:c0:a5:ca:3e:e5:c0:b3:
         7a:a5:4b:37:d0:17:63:fc:b6:ca:43:fe:73:42:d7:8e:c2:6b:
         0b:42:45:11:b9:75:33:a1:15:4a:ea:88:2e:16:f2:9f:bf:c2:
         cd:61:eb:1e:df:02:22:96:59:39:98:8f:b3:32:67:4a:fc:d9:
         45:0e:47:a8:d0:b3:7a:b0:ab:ca:fc:92:da:9c:45:af:24:4b:
         ec:61:b9:96:f2:9f:3c:38:af:2d:60:87:06:e3:5e:b0:e0:54:
         06:bf:cc:03:23:b7:54:be:13:ab:4c:02:ba:78:d2:e5:e0:af:
         0c:76:8d:6c:29:9d:cc:52:72:2d:d9:26:f3:58:4c:62:bb:fe:
         41:1d:04:cc:9c:9c:97:b2:67:2d:4e:c4:65:7f:4a:b3:8d:cf:
         d4:37:c4:0b:8f:9a:77:dd:cf:7f:31:94:2e:fc:d8:1f:0b:d1:
         59:e6:0c:94:b6:4f:5e:d2:31:55:88:cd:a2:19:03:31:94:be:
         07:cf:c6:23:bb:5c:ff:65:8b:bb:ae:e6:2b:43:b6:cf:ff:19:
         1d:de:71:ba:d9:ab:6d:17:f7:38:a0:fd:69:70:5d:bb:bf:b5:
         78:99:37:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:55:50 2025 by rpki-client