Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/64642299-2814-3a0e-86e9-7e6735d62f1c.roa
File:                     64642299-2814-3a0e-86e9-7e6735d62f1c.roa (raw, json)
Hash identifier:          daCBug1MTtnGnmHgfAlytWQcJF8fAEslxZXEz971FAM=
Subject key identifier:   B0:A5:A0:D8:5B:F8:19:CC:EA:9B:4B:99:7E:F1:38:DB:81:71:44:4F
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858491AA6C222D8AD439F59512B7C
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/64642299-2814-3a0e-86e9-7e6735d62f1c.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     15290
IP address blocks:        216.13.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:c2:22:d8:ad:43:9f:59:51:2b:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=06a3f60d-51fa-47fb-8e9e-170d847f0a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:df:b2:63:3f:55:35:c6:2b:7b:98:99:5a:2b:
                    01:a1:de:05:64:0b:07:65:74:1e:15:c7:f5:c1:64:
                    47:20:8d:57:88:2c:a2:b1:50:8f:a8:4e:48:56:d9:
                    ff:d0:29:d4:5e:c2:80:97:85:34:17:4b:bc:3b:30:
                    eb:4e:7c:52:eb:d7:13:c4:3e:04:bb:c9:2a:1a:3e:
                    6c:0a:58:94:cb:c8:49:d0:3e:ce:d4:09:2a:b7:ea:
                    d7:33:2e:1c:0e:6f:d5:2b:a4:13:ae:d3:5e:ac:76:
                    e6:ef:01:50:58:c5:ce:20:c3:f6:49:f3:23:3c:c2:
                    ce:e4:0b:4d:bd:73:3b:b7:c2:a1:c5:6a:da:dd:65:
                    53:17:63:00:df:4e:40:1e:18:4c:b3:3b:75:c8:e4:
                    08:00:a0:78:d3:2a:56:9f:5a:d6:68:f9:fa:7b:4c:
                    d0:3a:66:4b:ce:01:fc:77:e2:9d:fe:0a:28:24:0a:
                    04:1d:ab:09:0f:fd:bb:bc:a4:1d:e1:97:87:c6:e0:
                    e0:19:36:96:48:75:2d:d1:54:33:3c:95:4e:5e:25:
                    e7:32:fc:df:72:b1:e8:5e:46:ec:e5:37:e2:02:94:
                    a4:ca:fa:95:ec:b0:88:69:70:53:50:05:68:15:60:
                    eb:53:73:7f:8b:69:d7:ae:f3:fa:73:be:fa:ba:9a:
                    b0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A5:A0:D8:5B:F8:19:CC:EA:9B:4B:99:7E:F1:38:DB:81:71:44:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/64642299-2814-3a0e-86e9-7e6735d62f1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.13.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:af:4a:82:0e:5c:aa:37:ae:7e:e7:86:40:c3:cf:62:c5:c2:
         5a:e9:51:da:c0:5b:c9:07:11:9d:3e:8c:5a:e3:bd:76:0c:5b:
         00:d0:db:01:69:20:ce:20:59:c6:c9:6c:a6:c6:69:99:5d:4e:
         78:e0:24:8b:85:d2:90:aa:23:80:10:f4:09:08:c6:0e:25:a5:
         dc:f0:9a:d1:79:0f:81:03:1a:84:09:3b:e7:2e:1f:8c:60:a7:
         46:03:99:47:97:55:ec:26:67:65:28:26:12:94:0f:3d:9c:65:
         5e:30:80:61:9e:fa:45:4a:f0:df:14:78:18:5a:04:bb:36:ae:
         40:b9:da:ea:96:b0:fe:23:de:7e:b8:09:b1:d4:cd:a3:d7:7d:
         39:0d:e4:14:45:52:0e:06:00:fb:26:bf:68:9c:73:38:30:fc:
         7b:c1:32:22:c0:27:48:e6:1d:d3:7c:3c:5d:a1:8f:79:09:67:
         aa:52:5b:d3:3e:f0:85:76:ae:61:6a:2f:b6:87:f0:e3:14:bc:
         41:3a:14:77:a8:53:ab:4d:89:66:33:e2:c4:6b:9f:64:72:21:
         f0:9e:81:de:f1:d7:83:21:04:67:3e:8d:66:07:e0:27:d0:a9:
         a9:f5:78:23:87:68:ed:b9:08:47:0f:fd:1f:3d:6d:a4:c3:ad:
         d6:46:7b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:19:48 2025 by rpki-client