Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/84273be5-301a-3d96-8539-4750e24fcce2.roa
File:                     84273be5-301a-3d96-8539-4750e24fcce2.roa (raw, json)
Hash identifier:          CvSd8Hqhj/DFA1Cbt7nsGAK/+cMJWSl9gNMBAbfBiyE=
Subject key identifier:   E9:4C:CE:ED:E4:C5:AF:08:33:AB:37:6D:09:EC:FA:FD:FA:B1:25:2D
Certificate issuer:       /CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
Certificate serial:       010D0C9F43285848E2C140BBC6440737671378C0
Authority key identifier: 09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/84273be5-301a-3d96-8539-4750e24fcce2.roa
Signing time:             Sat 15 Feb 2025 01:28:57 +0000
ROA not before:           Sat 15 Feb 2025 01:28:57 +0000
ROA not after:            Fri 16 May 2025 00:28:57 +0000
asID:                     16509
IP address blocks:        69.52.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:c1:40:bb:c6:44:07:37:67:13:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
        Validity
            Not Before: Feb 15 01:28:57 2025 GMT
            Not After : May 16 00:28:57 2025 GMT
        Subject: CN=808900b2-a41e-4908-91c1-6db3ae97c81d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9f:7e:0a:f7:8a:6e:25:fb:6a:12:16:19:79:
                    62:ef:96:8c:5c:28:b3:b3:dc:af:d8:0f:6f:81:3e:
                    4d:64:41:09:57:df:54:26:97:ce:26:27:4a:a8:8b:
                    d3:b4:b9:b2:68:cb:8e:e5:86:34:26:76:c4:2a:d6:
                    ab:7b:a8:35:d6:65:c5:b1:c3:f7:c8:5a:1f:9d:1d:
                    9a:1d:38:22:d5:fb:cb:fa:cf:ae:07:b3:77:97:d9:
                    c3:35:80:03:d1:9f:6d:85:b4:1f:3e:a5:ec:ac:00:
                    b0:65:6f:4a:54:25:14:c4:f8:f4:fb:3f:ee:d8:c0:
                    1c:f5:0f:75:03:14:31:94:af:1d:99:20:44:68:88:
                    82:2d:8f:f8:b0:c9:6f:b6:a4:8e:dd:44:ef:5e:09:
                    16:ec:57:10:a9:29:2e:25:de:4a:b0:ab:38:aa:85:
                    6a:c4:91:d6:25:b7:41:d5:75:cf:b6:19:0d:1e:0b:
                    2d:38:47:d9:56:fb:91:77:93:6d:a1:97:9c:e0:e4:
                    2a:ff:5b:7c:14:79:56:97:3a:08:e1:71:51:5b:6b:
                    3b:23:36:76:62:ed:08:1e:e9:64:2d:c8:7b:32:2d:
                    6b:4a:63:ce:cc:55:d1:69:19:ba:fe:c2:ce:4b:c7:
                    27:9c:fb:b0:6c:cc:bb:4d:bb:40:19:c3:08:5d:b5:
                    84:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:4C:CE:ED:E4:C5:AF:08:33:AB:37:6D:09:EC:FA:FD:FA:B1:25:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/84273be5-301a-3d96-8539-4750e24fcce2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl

            X509v3 Authority Key Identifier:
                keyid:09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.52.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:59:c2:a6:fe:78:1a:96:84:39:c9:3d:8c:ef:26:8e:26:8c:
         ca:02:5d:04:5b:06:37:69:8a:d2:5b:e7:7d:d3:82:44:9a:83:
         28:6d:59:02:69:93:04:13:ce:1e:17:fe:ae:2d:6a:8f:6c:ad:
         37:2a:8d:a3:e8:92:7a:f7:f5:f5:5a:2d:6b:ff:7c:69:ef:d4:
         4f:32:2e:8c:22:25:20:4f:15:68:69:62:a1:07:08:9c:c1:de:
         6b:08:90:19:a6:ab:33:cf:b3:f4:cb:8d:bf:1d:30:3f:e5:ee:
         dc:c8:a0:8a:9f:aa:3f:89:4c:64:1e:3d:96:c3:db:1c:4f:21:
         5d:9b:38:66:cb:7c:6b:70:ce:d7:67:72:7a:a9:b8:a8:d3:db:
         54:3e:31:b8:75:20:32:6c:5f:dc:f6:e3:0c:50:f7:16:36:78:
         9e:c4:83:06:11:1f:4f:d1:48:68:35:8d:f7:fa:6d:14:24:fb:
         6c:90:d5:06:44:41:a2:55:a3:2b:cc:12:36:8c:7a:23:94:98:
         49:8e:2e:20:dc:bf:4f:1e:ab:71:68:ad:ca:6b:b5:97:ca:0c:
         5c:12:63:49:8d:48:ce:7e:fb:38:6d:97:e7:f6:20:a1:42:c2:
         24:28:74:ca:9d:5a:92:0b:4d:7a:8e:a7:f7:67:c6:ab:94:b7:
         20:27:d0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:00:22 2025 by rpki-client