Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b/863f4acb-612c-3dc9-8399-3195b4bdd44b.roa
File:                     863f4acb-612c-3dc9-8399-3195b4bdd44b.roa (raw, json)
Hash identifier:          amJQzS3u8Edb9bA+DNlUDlY/pHb3iTUwyRu4odyo9Ik=
Subject key identifier:   35:C9:90:99:7E:F9:36:DF:26:3A:79:C6:48:A2:4F:F4:04:62:E8:A7
Certificate issuer:       /CN=a05d07d2-1994-4f02-bebc-4bdc0aec1c5b
Certificate serial:       010D0C9F43285848EF6158F82FF240B6642CBC00
Authority key identifier: 69:ED:05:15:B3:4E:6B:49:E1:4A:A4:CE:3F:BF:7B:8F:A3:99:A1:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b/863f4acb-612c-3dc9-8399-3195b4bdd44b.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        199.250.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:58:f8:2f:f2:40:b6:64:2c:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a05d07d2-1994-4f02-bebc-4bdc0aec1c5b
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=83bdde56-ada5-44b9-9cda-afa56c2321ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:36:c0:c3:ae:a2:d6:80:86:b7:7a:3f:15:03:
                    a0:0b:f1:9e:97:63:22:55:b2:5c:d9:32:ac:2d:df:
                    e3:5c:d6:dc:cb:82:af:e6:5d:37:b1:6b:ff:f7:04:
                    01:d0:21:5b:68:4c:28:43:b4:b6:7a:5f:e4:5e:b9:
                    a8:83:ef:3e:75:72:33:9d:7c:13:9a:00:c9:2c:f3:
                    47:55:f5:d5:4a:2a:ca:0c:55:f7:d4:b3:2e:51:23:
                    b0:8e:0c:29:df:b9:40:8b:21:ee:ea:b9:52:5a:e2:
                    3b:51:bb:59:69:db:f0:de:27:a8:4a:92:43:36:12:
                    b1:75:9c:0c:b9:8a:3a:37:07:78:31:dd:6e:99:3f:
                    f1:45:ab:d4:80:bb:ba:13:b4:0d:bb:56:c6:3b:3e:
                    7d:b6:a5:ac:ee:01:51:d8:ea:a6:c2:ba:4f:42:c1:
                    69:71:8e:87:2a:59:fc:9a:ca:2b:ee:b7:89:d2:db:
                    5f:e5:92:2f:f9:31:a2:a5:bc:0f:97:83:d3:c0:5e:
                    d6:85:af:d8:64:c7:78:73:c2:58:a8:74:f9:eb:31:
                    97:10:11:76:e1:1f:4d:db:64:b4:f2:98:db:61:0f:
                    34:36:9e:5b:9d:79:2e:5f:fb:70:9e:4d:a2:fe:f2:
                    94:8a:b3:5e:6c:6c:0c:40:7a:2c:d2:2b:ce:c2:77:
                    c8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C9:90:99:7E:F9:36:DF:26:3A:79:C6:48:A2:4F:F4:04:62:E8:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b/863f4acb-612c-3dc9-8399-3195b4bdd44b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:69:ED:05:15:B3:4E:6B:49:E1:4A:A4:CE:3F:BF:7B:8F:A3:99:A1:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.250.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:0e:1e:88:6c:8c:86:b1:68:82:b7:31:05:98:6c:55:ed:1f:
         1b:b1:b5:06:f0:9e:4d:44:49:a0:5f:b0:b4:a8:7d:3d:ab:6c:
         a5:32:b8:9a:6d:37:2c:e1:2c:8d:25:cb:0d:b8:6e:d8:7c:d1:
         3a:f4:be:1c:fc:f1:2e:fe:a7:f5:b4:07:a9:bb:16:e5:bb:a8:
         20:43:be:a8:a4:65:d3:42:69:c8:6f:9e:30:3f:8e:6a:69:66:
         e6:48:62:9c:b9:0f:72:5f:24:95:b0:24:d1:fa:36:5f:6c:15:
         b0:32:1d:41:b7:e1:da:6f:92:42:e8:70:43:86:62:84:ee:ed:
         f2:cd:79:d2:0c:b4:c0:06:51:70:21:aa:41:67:e2:46:66:b0:
         54:7c:76:6d:a0:33:43:69:31:3d:b2:36:97:8c:38:b2:eb:d2:
         35:59:bf:37:40:b9:13:3f:54:5f:fd:ff:45:3d:35:6e:11:41:
         9b:03:55:3b:f6:f5:85:25:8a:e4:73:db:75:61:e0:2c:7b:6d:
         39:99:a4:aa:56:2a:e4:d2:77:58:32:2d:fd:5b:b7:4b:2c:22:
         c4:9c:22:d7:71:91:3b:3f:52:20:b7:f4:0d:fa:85:67:53:05:
         41:41:1f:ad:2a:38:5f:f1:55:56:82:62:e3:12:4e:06:31:43:
         a0:32:fb:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:02:18 2025 by rpki-client