Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/bb034d98-6b56-30ce-a5d2-5a52902e708f.roa
File:                     bb034d98-6b56-30ce-a5d2-5a52902e708f.roa (raw, json)
Hash identifier:          qYWeeQYJe3+ZtOaVNEVvhoUlWVD3kOc5o2WQRQcQhHw=
Subject key identifier:   C3:C3:55:5B:2D:AF:C0:3B:43:C3:A1:CC:4C:08:1F:D5:0D:6C:BE:9B
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F43285848EF613DB1E4D07CE601852F00
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/bb034d98-6b56-30ce-a5d2-5a52902e708f.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     2734
IP address blocks:        67.212.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:3d:b1:e4:d0:7c:e6:01:85:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=84bb2b0a-3d73-4053-88f2-37b34adb66a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:23:bd:b9:85:d8:a1:50:b1:5b:a2:2d:5f:0a:
                    7f:4f:96:e8:2d:65:42:11:81:ff:ed:46:2e:60:57:
                    d2:a8:cc:04:68:a5:86:2e:a7:75:dd:55:be:80:96:
                    26:be:3c:58:cd:d4:d5:41:36:1f:8a:fa:dc:a3:17:
                    b6:db:72:6e:4c:1b:47:9e:59:9a:d0:de:5c:a7:1a:
                    7f:52:15:4e:22:fc:71:31:bf:eb:c3:de:1e:d1:4f:
                    97:b3:8d:3c:72:64:4f:b3:5c:37:8f:ce:df:93:d0:
                    a0:ac:7e:53:d1:b6:9b:2c:bc:d4:9b:a3:46:a1:da:
                    4b:9e:d1:7f:71:d2:3c:83:5a:cf:75:4c:fb:61:b8:
                    6f:51:34:d9:02:c8:be:6f:96:4c:a3:f7:d2:71:52:
                    12:93:ff:0e:2d:db:19:37:13:08:e5:85:f4:bb:f1:
                    1c:40:2b:86:ec:df:84:f5:85:a2:7b:8b:f7:fd:ec:
                    91:34:ef:2a:2f:c9:57:6c:ac:9a:34:65:4c:a2:63:
                    18:af:14:05:35:73:99:2d:a3:33:de:4a:bf:fe:17:
                    2f:28:c5:47:21:07:47:42:ba:c6:e3:9c:40:08:d9:
                    0a:2e:48:0e:95:78:f6:cc:6f:68:fe:6a:52:8a:04:
                    40:d3:24:f5:49:5a:2e:7a:a9:43:c2:c6:29:ab:1e:
                    3a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C3:55:5B:2D:AF:C0:3B:43:C3:A1:CC:4C:08:1F:D5:0D:6C:BE:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/bb034d98-6b56-30ce-a5d2-5a52902e708f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.212.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:89:f6:87:58:11:54:db:54:fb:67:b0:f6:16:c0:89:11:84:
         f1:6b:eb:fd:74:4e:c8:3a:a3:db:91:6d:fd:a5:bb:54:18:c9:
         13:bc:8e:a6:d7:21:5a:4c:8e:cc:fd:11:97:cc:24:1b:cb:be:
         36:84:9f:7b:2b:a0:45:6e:c1:dd:8d:ed:11:6c:17:05:e3:99:
         95:7f:84:d9:6b:a1:89:53:38:da:d6:24:7c:cc:82:04:3c:a2:
         f6:97:8a:b0:63:f6:35:f4:5b:f6:52:27:a6:a2:57:f2:ac:4b:
         d0:24:06:4d:48:f8:84:92:e0:c4:17:12:c3:75:03:4e:09:af:
         96:73:4f:ca:30:85:9e:d3:34:13:ec:18:59:e6:a3:e1:62:01:
         4f:79:41:d4:c5:71:43:ea:7c:16:7f:31:b9:72:49:1a:cb:d9:
         55:c1:83:e0:64:ce:a3:84:bb:15:f1:a0:c3:a2:c2:dc:2c:6f:
         d7:6c:de:c2:5c:28:56:a7:e1:fc:88:1a:c4:bf:e2:2f:76:58:
         35:4f:5a:a0:de:d4:3b:2a:cb:3f:f9:44:37:43:26:ad:53:fe:
         c5:f8:b9:d7:b7:30:7d:cb:b9:33:22:44:39:93:36:2d:2e:ed:
         b5:1f:b6:c7:da:6c:a5:b9:6d:87:14:fc:40:67:c1:52:58:11:
         1c:38:fd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:06:51 2025 by rpki-client