Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/fa29edd3-f830-34f2-b449-cdb32d15da01.roa
File:                     fa29edd3-f830-34f2-b449-cdb32d15da01.roa (raw, json)
Hash identifier:          aqwmwi3BYJeoAXeMPxI8mi+kdlaqWA12iebUT1/nF7A=
Subject key identifier:   E7:C6:51:DB:E5:5A:0A:3B:72:73:42:EB:CA:89:0C:36:CA:89:DB:48
Certificate issuer:       /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial:       010D0C9F43285848E59BC9AF2D2FA92C49D0B580
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/fa29edd3-f830-34f2-b449-cdb32d15da01.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     16509
IP address blocks:        209.169.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:c9:af:2d:2f:a9:2c:49:d0:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=6969620d-735d-41f0-bbdd-9fb4cf0b472c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ae:02:11:12:94:c4:5a:2e:92:c2:16:07:5f:
                    07:c8:93:99:b8:79:f9:d1:9e:87:09:90:31:19:1a:
                    92:1f:b3:81:39:f3:6c:ab:dc:9c:52:58:22:2c:ec:
                    77:6d:63:ef:81:38:24:f8:97:65:56:9e:63:b3:8a:
                    d8:35:d8:b1:09:0c:52:da:d8:f5:04:d5:1c:26:e4:
                    cf:74:08:b1:23:dd:8c:10:0c:fd:4b:6e:34:f3:ef:
                    21:ce:16:d1:4f:30:2a:7e:50:09:0b:2d:ec:87:c0:
                    49:75:1e:c8:3d:68:99:98:c1:0b:77:e8:2c:93:02:
                    e1:db:3d:61:45:76:6f:96:88:8d:89:39:76:2e:7a:
                    f6:86:c1:d0:a1:50:ad:e2:e9:87:d5:3d:dc:f7:ca:
                    26:2d:5f:79:1e:95:2a:8e:0b:22:44:67:0a:cd:da:
                    d9:da:b0:16:fc:d7:86:89:60:9e:a4:9a:c3:79:31:
                    f9:cb:be:8b:06:cc:4b:fd:48:eb:e2:bc:38:29:c4:
                    98:fb:c2:e2:a6:28:1d:16:b6:06:c8:0e:aa:37:0e:
                    94:36:ad:07:98:95:5d:13:10:60:62:e2:e1:4a:10:
                    2f:bc:06:a6:d7:3d:a0:3e:84:91:cd:cc:12:6c:8d:
                    8d:a1:51:da:d2:1f:e5:ba:df:34:8a:6b:4a:59:8c:
                    95:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C6:51:DB:E5:5A:0A:3B:72:73:42:EB:CA:89:0C:36:CA:89:DB:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/fa29edd3-f830-34f2-b449-cdb32d15da01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.169.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:e9:e4:92:b9:6b:48:b9:ac:f7:c0:36:29:a1:9c:5c:de:06:
         35:6a:7c:49:f1:19:30:b8:fa:63:30:35:93:17:82:4d:1f:57:
         ce:7d:67:b6:76:e8:57:4b:4b:10:94:b9:03:cc:5d:3b:d7:da:
         e0:94:68:29:59:da:ca:78:45:22:d7:81:33:26:9d:ef:82:ff:
         3c:2c:85:a9:34:96:bb:cd:70:df:9c:91:02:78:01:fd:84:58:
         2b:9b:32:e9:17:26:39:91:c6:9a:2f:ab:43:44:d3:1f:36:a6:
         d9:d0:fd:8e:cc:e5:2f:bf:a1:7e:c3:2b:36:45:80:ed:f8:b5:
         22:f0:3c:77:09:90:75:b7:ea:eb:1f:2e:d8:86:f9:a3:5c:c6:
         5e:51:85:6b:dc:bf:ff:0a:65:df:50:5c:d7:ea:c0:ea:dc:28:
         b9:f6:6d:d2:2e:83:e6:92:af:4f:b2:77:68:9a:d3:2a:ee:f8:
         6d:e7:29:cd:35:7d:6c:1c:1c:6d:e1:2d:1d:14:2f:2a:7c:f1:
         86:28:13:12:7f:08:b1:17:7a:41:bf:b2:9b:03:4c:39:10:08:
         75:18:73:fd:ed:94:6f:ca:3d:3d:8e:77:6f:26:00:4b:62:8b:
         18:56:f2:00:af:a0:9e:7c:ab:83:ca:8b:f5:75:10:8a:af:b2:
         d4:27:2e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:20 2025 by rpki-client