Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/91c7a6c8-9c1f-3351-8738-d6448e02dba5.roa
File:                     91c7a6c8-9c1f-3351-8738-d6448e02dba5.roa (raw, json)
Hash identifier:          jpFODTkYkekCLeHaZFpgOHmcvZxydSWjx/v2INRJWnY=
Subject key identifier:   69:6A:48:A6:DB:EF:FD:E6:4B:ED:15:AD:4C:22:75:A3:E9:24:08:89
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F43285848EF613D704D2E643709020160
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/91c7a6c8-9c1f-3351-8738-d6448e02dba5.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     2734
IP address blocks:        67.212.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:3d:70:4d:2e:64:37:09:02:01:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=59341926-de98-4117-8cab-79b251b28db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:72:e8:cd:41:21:04:1a:94:ce:aa:55:43:43:
                    8c:2b:26:0f:91:c9:f2:ed:43:2d:92:10:23:c7:c2:
                    7b:13:86:d7:03:ab:99:5a:3d:3a:a7:6a:04:5d:d3:
                    bb:5a:2a:b8:a1:24:1f:7b:cb:38:2f:26:22:a2:8e:
                    9f:3f:4d:cb:68:4f:8d:76:52:43:24:48:b9:97:36:
                    39:8c:1a:9d:0d:1d:7b:07:06:2c:9e:89:7d:99:52:
                    ac:36:af:51:cd:b1:db:dc:2b:1a:85:11:64:50:5e:
                    c5:21:4d:71:cf:e8:f1:ba:9a:74:27:ea:79:01:73:
                    54:41:09:46:ae:4c:69:cb:23:ab:be:5a:41:9a:54:
                    61:f5:0e:d6:1b:10:4a:e8:04:5e:b0:33:e4:92:c6:
                    19:70:d1:c3:24:d7:d2:60:4d:04:de:81:c1:ad:72:
                    18:68:8c:7c:f8:78:3d:f5:bf:ed:07:9f:04:89:11:
                    44:e9:79:36:5a:7b:8b:66:ea:fa:91:79:14:a3:61:
                    90:bc:d2:45:2a:e2:a1:c0:32:f6:85:83:5e:31:42:
                    81:6b:e2:01:a2:cc:6c:0c:62:ce:ef:40:e9:de:df:
                    4e:3c:dc:06:7d:98:28:3a:71:f5:32:13:23:16:f7:
                    ac:78:52:ad:13:55:34:69:69:27:6e:aa:be:89:c6:
                    4c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:6A:48:A6:DB:EF:FD:E6:4B:ED:15:AD:4C:22:75:A3:E9:24:08:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/91c7a6c8-9c1f-3351-8738-d6448e02dba5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.212.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:42:20:d4:26:16:b5:81:f5:69:20:d7:1f:49:35:00:bf:18:
         7d:21:5e:30:36:08:04:f0:0e:c6:d1:31:fa:1b:37:aa:0a:18:
         83:ef:0d:5c:fc:91:1f:9d:ea:b8:53:50:91:d4:45:69:24:c6:
         f3:2d:7b:bb:8e:26:d0:c7:b4:80:fe:66:7c:ee:c1:2d:0f:3b:
         3d:bc:44:36:3c:bf:90:1a:bd:5a:be:f5:d0:6a:42:5c:c9:6e:
         f9:ba:12:38:2a:54:4a:86:83:87:7d:0a:41:56:6e:4e:a2:13:
         7f:05:80:83:87:04:cd:2c:52:a8:5c:a1:d4:e7:c7:ca:06:21:
         a9:ff:b4:a5:33:4b:06:d1:b4:83:57:e7:57:be:1c:33:98:bf:
         e8:e3:77:a4:24:e5:88:f0:89:ec:42:56:1d:12:00:20:f6:fd:
         fc:4b:a2:9c:83:ec:d2:1b:e4:e4:25:13:b6:a2:a3:ba:aa:f8:
         69:80:d4:8b:12:ca:ff:fa:15:a2:f9:03:06:d7:26:91:10:a9:
         ac:68:c9:5f:85:c9:d7:09:95:0c:28:50:e2:26:3a:e6:5c:ac:
         b3:d5:66:88:56:2b:84:2f:ff:84:66:cd:12:d3:e9:92:a1:e1:
         24:7f:3d:40:9a:74:49:53:19:14:b6:62:91:db:47:2e:78:b6:
         a4:06:63:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:03:55 2025 by rpki-client