Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/ad8b08da-a33e-3663-b80b-ba5eeaa40bfe.roa
File:                     ad8b08da-a33e-3663-b80b-ba5eeaa40bfe.roa (raw, json)
Hash identifier:          E1ZAvOSwg8tm2fUhbTuY6heapImCGOZ2wDeLpHrujws=
Subject key identifier:   BE:7C:71:D7:08:B2:73:66:C8:82:48:30:97:28:D9:43:1A:58:02:62
Certificate issuer:       /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial:       010D0C9F4328584905B6B49E3EECED202B66AF20
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/ad8b08da-a33e-3663-b80b-ba5eeaa40bfe.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     399629
IP address blocks:        216.245.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:b4:9e:3e:ec:ed:20:2b:66:af:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=a796b6c9-27c3-4921-af32-c0642a2d51da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:44:e7:f2:56:78:71:af:0f:a7:98:1a:67:91:
                    8a:30:3b:d1:45:be:10:ba:8a:a6:48:37:9e:e1:1d:
                    ad:dd:b0:6b:8a:90:7e:62:71:8e:f3:e4:a4:53:94:
                    f4:e7:92:4e:15:a6:f2:78:49:63:fd:cd:36:d0:a4:
                    b4:28:3f:79:44:1f:1e:e5:15:61:18:70:90:52:d7:
                    82:58:c0:0c:af:bf:d0:1e:a8:1e:f9:90:75:a8:cb:
                    84:85:08:e4:7c:f0:36:4e:f1:0d:d2:6e:19:28:87:
                    eb:8e:bc:3e:6c:fc:05:2c:46:2e:30:a3:5f:be:04:
                    c4:6e:cd:45:d9:6f:a9:5d:6f:f7:96:62:e6:fc:a5:
                    93:94:75:a6:9b:03:b2:9f:99:df:08:cb:21:b6:18:
                    14:6a:8c:34:fd:f3:7a:48:46:a6:c8:cb:68:e8:ca:
                    5c:94:21:6a:bc:5b:83:ce:02:c2:3a:e3:3a:f0:bb:
                    3c:0d:59:16:66:5e:a1:d5:64:1e:89:df:5f:65:bd:
                    63:fb:cc:26:d2:fc:9c:8f:5b:11:e8:dd:ca:18:ef:
                    1e:4e:69:61:33:d3:f1:58:9d:21:6d:02:58:6e:dd:
                    f7:40:41:35:b9:e8:86:96:9d:2e:87:fe:74:f9:f8:
                    db:ae:94:cc:16:87:e9:06:2b:a2:25:13:84:af:30:
                    06:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:7C:71:D7:08:B2:73:66:C8:82:48:30:97:28:D9:43:1A:58:02:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/ad8b08da-a33e-3663-b80b-ba5eeaa40bfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl

            X509v3 Authority Key Identifier:
                keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.245.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:8c:3c:9f:6a:6b:75:76:d5:7f:f0:a7:af:4f:a9:aa:b4:86:
         e9:48:35:44:fa:10:7d:21:aa:50:f2:e5:58:ac:5e:f3:be:2c:
         98:f2:82:14:17:27:7b:4b:a8:5e:24:b6:a2:87:de:eb:1f:24:
         d4:47:17:0e:8d:f4:f0:63:c0:7c:78:23:20:64:5a:02:ab:97:
         d4:8d:94:df:2f:8b:d9:d5:d2:84:5b:f5:a5:69:c3:fb:56:e9:
         e7:0e:05:c3:2a:2b:5b:fd:12:0a:37:35:47:11:d6:09:e5:a0:
         24:29:38:35:56:b6:6d:89:4a:d6:2e:2d:59:c7:be:a2:f5:c6:
         93:0c:4c:41:61:39:19:b2:4f:dc:66:3b:68:a2:a2:d0:cc:49:
         fa:ad:1a:01:ae:4e:a7:c1:bb:51:58:cb:f2:b4:f6:16:d0:48:
         db:32:b9:ef:a6:95:8d:b5:8a:78:d3:af:a5:53:26:4c:67:bd:
         1b:5d:91:de:9b:fb:a4:d0:1f:2e:0f:db:22:5a:4c:e5:c1:aa:
         f8:e2:8c:3d:54:a2:a8:bb:b2:89:4d:7c:a6:df:9c:a3:a2:e7:
         37:5b:84:86:12:c3:a8:72:58:a0:97:d5:dc:ea:5a:16:35:41:
         a7:01:e2:e7:24:1e:08:ed:8d:37:79:21:e7:46:0c:17:15:de:
         ac:8d:e7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:42:39 2025 by rpki-client