Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/b80ae7f2-c588-3ca2-a4a1-ebffbde2aa4d.roa
File:                     b80ae7f2-c588-3ca2-a4a1-ebffbde2aa4d.roa (raw, json)
Hash identifier:          pWBv3KA3stObVp+eL5TotVddoXk4S/5nUbNut48852c=
Subject key identifier:   9F:7A:9E:B1:1B:BA:29:E6:1E:0B:31:E5:C7:C2:D3:D7:E1:EF:CF:BD
Certificate issuer:       /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial:       010D0C9F432858492CAE998CC7B06521E7CD0B80
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/b80ae7f2-c588-3ca2-a4a1-ebffbde2aa4d.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     1273
IP address blocks:        216.31.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:99:8c:c7:b0:65:21:e7:cd:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=a9b93169-6761-4bbe-bfdd-4eb1235cfc7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f8:d5:7e:87:37:7b:2f:4e:fd:aa:f9:70:25:
                    fc:ce:93:a6:7e:e3:43:56:05:5b:11:a5:70:52:ca:
                    36:32:d2:27:76:d8:2f:2a:4b:d4:49:86:96:ae:ca:
                    c2:9a:2c:72:d0:2f:88:46:c5:84:79:c0:28:57:b7:
                    81:b5:44:5f:29:21:ac:84:08:84:ef:8d:75:af:e9:
                    8c:f8:85:17:ad:08:2c:b9:91:23:e8:26:3f:aa:0a:
                    b0:ba:22:79:ca:04:3c:bf:91:5c:47:bd:cf:6c:f1:
                    ca:de:15:6f:10:fd:c2:d9:ca:3e:b2:76:71:4e:3c:
                    71:fb:ac:d7:66:ef:de:61:4f:4b:f2:fc:08:64:53:
                    de:12:0c:68:aa:c3:49:ca:e6:20:6f:a8:48:43:d6:
                    3c:58:ce:89:d4:8f:0d:c6:1b:9c:75:c7:f8:8d:0a:
                    9a:19:7c:67:92:f7:1e:c0:df:c0:ff:6f:04:e8:5c:
                    4b:c9:a9:fb:8f:b1:15:7d:d9:62:05:c4:a6:1d:8e:
                    7e:04:eb:c1:f3:14:21:a3:0d:50:53:d8:cd:48:e5:
                    cc:c8:6c:de:8a:ab:3e:9c:37:fa:3e:99:df:61:00:
                    2f:dd:d8:d9:bb:af:97:60:9b:e0:4c:6b:b3:17:70:
                    b0:b9:47:b0:07:39:76:41:7b:91:d4:d4:53:93:4a:
                    65:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:7A:9E:B1:1B:BA:29:E6:1E:0B:31:E5:C7:C2:D3:D7:E1:EF:CF:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/b80ae7f2-c588-3ca2-a4a1-ebffbde2aa4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl

            X509v3 Authority Key Identifier:
                keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.31.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:43:71:e5:a4:a5:65:45:06:e4:b9:9e:01:24:32:6d:62:20:
         7c:52:b7:e0:40:be:1c:96:7d:e5:90:5d:29:8b:48:c8:cc:81:
         ff:58:29:10:80:34:41:f6:77:a2:bc:3a:03:69:9a:eb:1d:61:
         6f:62:a1:3a:22:a5:d8:7d:9a:f0:ad:57:64:d6:46:cb:81:f2:
         a3:b3:a1:52:f5:8e:7f:e9:b0:46:73:5f:08:ea:87:70:31:52:
         71:94:e4:f0:be:99:86:8f:fd:16:e6:fb:a1:1d:03:e6:82:65:
         12:10:5e:a1:61:6a:2a:af:24:e7:09:2c:36:3c:31:c0:d4:f6:
         0c:78:c7:38:4d:2f:8f:fd:58:00:62:b1:f9:f5:b5:a1:ea:2f:
         f8:98:ba:df:d4:f9:f4:bc:2d:cb:f3:5c:fa:47:e3:af:6e:28:
         a2:bb:6d:50:92:70:09:11:b1:2d:71:20:f6:64:da:22:6c:62:
         6c:b2:bd:22:4c:d0:f0:2d:22:43:48:0c:17:85:7d:93:a8:86:
         d2:fb:33:17:a6:bd:81:ff:7c:9a:00:39:53:9f:73:27:09:58:
         d2:b6:8e:1c:a9:84:f4:55:07:ae:09:16:50:e7:0d:f6:39:1e:
         2d:9c:f2:af:d7:f8:19:39:a2:27:94:99:8f:b6:71:1f:55:1f:
         b5:31:75:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:26:25 2025 by rpki-client