Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/fe70053b-12a5-3548-80b7-9e1a15deca1a.roa
File:                     fe70053b-12a5-3548-80b7-9e1a15deca1a.roa (raw, json)
Hash identifier:          23JTzsNn2n1AfQPMSXl8SfHUUCNaMVRa8hNXi9Hbr88=
Subject key identifier:   E4:56:DF:00:BA:27:FB:6D:6E:86:B5:29:0F:F9:26:AB:7F:0E:FE:91
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F43285848EC96AEBD7EA11E65EE706A00
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/fe70053b-12a5-3548-80b7-9e1a15deca1a.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     2734
IP address blocks:        67.212.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:ae:bd:7e:a1:1e:65:ee:70:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=ff252b95-8102-49e0-8aa7-7199053b2b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:fc:8c:3f:4f:00:10:0a:a3:c6:e4:2b:d5:d5:
                    12:ab:de:f9:fa:01:34:16:85:cd:da:99:2d:d1:69:
                    46:c4:80:ec:eb:53:7c:5f:88:e2:8e:c3:fd:17:98:
                    24:9c:35:92:93:b9:17:cc:14:83:4d:7e:1c:53:92:
                    8b:7f:c8:35:d2:02:7c:97:38:3a:40:5e:e1:ec:a0:
                    2b:47:af:fc:3f:68:33:01:e8:ac:39:0d:db:f3:39:
                    45:ad:4c:6e:37:6f:bc:5d:7b:ec:df:48:fe:41:cd:
                    5f:b4:13:65:a4:6b:36:fa:c4:0b:87:32:1b:bc:dd:
                    87:0c:d7:49:f2:65:b0:37:3e:4c:90:88:d4:9a:01:
                    26:07:f2:c2:07:00:72:51:d5:e8:be:ff:0e:32:59:
                    95:2b:ea:f5:21:bd:2d:3a:3f:30:bf:ae:3b:fb:25:
                    53:c5:ef:a9:e3:cb:2c:a8:17:84:7e:5f:c7:fe:04:
                    5f:4d:a9:ea:2d:ce:ae:ef:19:93:c9:17:74:5c:95:
                    e4:d1:a4:0c:b2:f5:6a:d0:75:29:5c:90:f5:fa:7c:
                    43:be:32:d7:2a:43:a5:e3:0a:83:d6:a6:82:c2:2b:
                    02:5c:eb:cc:8c:ed:4b:01:84:e2:ab:e8:46:75:9d:
                    69:bf:03:78:2d:46:3b:a9:b4:e9:b1:90:84:fe:14:
                    7c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:56:DF:00:BA:27:FB:6D:6E:86:B5:29:0F:F9:26:AB:7F:0E:FE:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/fe70053b-12a5-3548-80b7-9e1a15deca1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.212.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:68:79:b3:b3:ad:98:c3:69:a1:03:ea:67:f6:f7:99:18:99:
         b9:93:34:96:98:a7:f9:c5:f5:6a:ea:e2:93:9b:64:f2:38:39:
         6d:39:d6:89:b4:ae:2d:b6:bd:12:54:57:5b:f8:f1:b8:85:8b:
         7c:0d:9f:16:0b:f7:e7:eb:4f:89:91:e8:6f:b2:26:b1:01:1d:
         83:4f:ad:e3:0c:48:72:2a:c7:f4:1a:b2:22:25:ad:8c:f7:1c:
         02:14:51:a9:c2:65:76:96:f3:d0:b0:e1:2c:47:1b:31:b1:d4:
         66:96:0f:3b:f0:57:37:10:72:24:4f:27:64:8f:d0:41:91:6b:
         69:9d:99:d4:8a:f4:3e:c8:72:da:f8:3b:22:88:c0:a6:85:72:
         34:3a:3e:cc:ae:fe:31:95:40:83:7a:3b:fb:b4:ef:02:94:81:
         11:ed:03:4e:89:85:f4:77:80:67:23:43:1e:b2:30:04:5c:90:
         2f:d1:6a:f8:cb:9b:0e:2c:95:3c:c1:f2:48:44:e6:0c:c0:71:
         47:bf:8f:8c:07:ae:d1:25:48:16:76:9c:c8:a1:7a:0b:e7:d8:
         9b:29:d0:4a:43:88:2c:5b:b8:d6:0e:4c:d9:e7:17:37:ad:a1:
         20:7a:6a:3e:fc:5c:83:08:a0:cc:23:c6:fc:c8:a8:85:65:f6:
         de:fa:a9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:03:49 2025 by rpki-client