Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/02e6ecfe-4d10-34f2-ac4e-06d62206b050.roa
File:                     02e6ecfe-4d10-34f2-ac4e-06d62206b050.roa (raw, json)
Hash identifier:          gVt6U7arm/I0sQ+ck4oKNd/5b7pclkSgBkEcV+YMOYc=
Subject key identifier:   7C:1F:E4:FE:79:3C:25:7E:86:73:F6:B6:FE:27:09:08:E8:B3:C7:78
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F43285848F22BDD4A2B329917EADFD880
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/02e6ecfe-4d10-34f2-ac4e-06d62206b050.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     2734
IP address blocks:        208.84.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2b:dd:4a:2b:32:99:17:ea:df:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=b709c795-f2b2-4449-86f7-22ad57e67720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:35:de:1c:14:68:32:2a:2d:75:b2:f7:eb:7c:
                    d4:11:1b:e3:e8:65:4e:62:6c:be:64:3f:12:0a:f7:
                    3f:63:13:62:c7:9a:bd:dc:3e:dc:6c:ba:6c:b1:9a:
                    92:5b:34:49:e5:18:b8:c0:1c:f3:96:3c:4a:07:c6:
                    09:93:1e:70:cf:d4:04:e8:6c:e0:ec:13:2d:f3:83:
                    3c:21:bd:91:e4:de:3d:6d:c8:0f:0a:0c:25:49:20:
                    9d:31:4b:1f:b7:dc:d3:22:cf:de:5d:a6:3c:88:63:
                    b6:48:01:d8:c1:6a:68:d8:87:01:0d:07:98:a8:ab:
                    9f:70:a1:80:3b:db:ba:06:05:71:c9:1f:65:a6:d2:
                    47:69:a0:25:b6:5c:48:1b:b6:05:63:c0:1f:c2:6a:
                    d7:b8:b7:ee:7e:e9:2c:a4:d1:1b:07:f5:04:d4:b8:
                    f8:c4:96:a5:37:79:81:55:9d:05:9c:bb:f0:d9:2d:
                    25:af:03:ab:a2:4d:73:44:60:a6:14:17:e2:6b:43:
                    f7:b4:14:52:3c:9e:eb:b6:5f:76:84:e9:ab:9b:34:
                    d2:bd:63:80:0c:5f:e6:43:68:e6:25:43:e4:45:12:
                    4d:13:d0:b3:af:32:93:55:ce:be:d9:41:a6:0b:c9:
                    73:23:c3:4a:45:e3:f4:09:03:74:7b:9b:ca:07:a5:
                    61:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1F:E4:FE:79:3C:25:7E:86:73:F6:B6:FE:27:09:08:E8:B3:C7:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/02e6ecfe-4d10-34f2-ac4e-06d62206b050.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.84.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:23:fd:43:4b:50:a3:b6:2a:15:db:01:bc:ab:b3:ef:82:7f:
         64:f6:68:62:93:c7:3c:fe:fa:ca:d8:32:8f:01:ec:75:c9:6f:
         d8:c4:0a:51:2c:9b:c0:82:33:b4:29:f3:be:b0:85:97:e4:2c:
         a2:3e:a4:37:86:a7:be:bf:fa:8f:9b:eb:d0:82:1b:d1:b0:09:
         b8:2e:38:93:e4:5b:7a:ca:8f:9d:f6:59:3d:4b:aa:22:aa:25:
         3d:2b:59:b7:af:3a:21:56:91:30:a7:40:1f:70:07:86:62:f9:
         92:40:09:ac:b3:29:10:2b:37:20:b7:ea:11:ff:8d:e2:69:f8:
         cf:9f:ca:6c:cb:85:c2:d5:a6:4b:b5:15:a3:c8:9b:6c:5a:64:
         c3:78:cc:34:89:21:ef:93:80:0a:6b:a7:4f:24:56:87:ad:aa:
         4f:b5:08:9b:21:46:66:9e:65:56:3d:5f:a7:a3:96:d4:db:d6:
         a3:e1:02:33:a4:89:ee:f4:5d:29:18:9d:2b:db:f9:8a:33:fb:
         10:6b:cd:f2:09:81:76:ad:5b:ed:6d:62:14:c9:1a:f0:46:fc:
         8e:78:1e:87:57:a3:f5:01:0d:58:f0:81:6e:de:de:ba:3a:08:
         4c:08:69:58:4b:29:35:ea:2b:0d:c2:8c:e3:a0:79:02:c0:6a:
         52:57:34:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:03:57 2025 by rpki-client