Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/47408017-d19f-31a6-b439-433fe7ad8637.roa
File:                     47408017-d19f-31a6-b439-433fe7ad8637.roa (raw, json)
Hash identifier:          e3Iymolwh7889DR74L7i0fvjli2efIgQ64baHC8SqZI=
Subject key identifier:   FC:5C:20:EE:57:38:FC:A4:DC:8D:C3:22:C7:59:5F:70:1C:C7:92:5B
Certificate issuer:       /CN=b02b2a27-63d2-435f-8114-d98e289edc6c
Certificate serial:       010D0C9F43285848EF616161F26D6071E47D4380
Authority key identifier: 68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/47408017-d19f-31a6-b439-433fe7ad8637.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        204.110.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:61:61:f2:6d:60:71:e4:7d:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02b2a27-63d2-435f-8114-d98e289edc6c
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=414d5226-9a1d-4fab-acfd-c2ae63513354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e7:bb:d6:0c:9f:23:bd:03:73:01:71:a5:ba:
                    93:ec:a4:0b:0d:e7:79:3f:5c:b8:ab:f3:04:bb:77:
                    2d:08:66:6d:70:ca:16:e9:51:83:ca:ea:e7:3e:c9:
                    c2:41:67:46:b9:67:61:e8:5d:60:5c:09:3d:3b:60:
                    3f:81:31:40:ba:e3:e0:a9:46:3b:e5:5c:c1:9a:60:
                    d4:b1:c2:13:93:3c:fa:60:30:51:3b:c2:0e:af:28:
                    cd:18:b2:86:aa:bd:19:47:fa:da:91:29:0a:0d:23:
                    5e:94:5b:db:0b:63:e0:62:52:90:37:9e:e4:9a:ec:
                    8c:2a:98:e8:f6:de:a4:78:ce:c2:81:34:59:23:42:
                    36:66:3f:b4:9f:ed:e8:0e:67:0b:0f:f5:af:d8:e1:
                    2d:53:bc:34:92:ff:ff:30:33:db:c5:2d:d6:12:7c:
                    bd:aa:bc:28:6e:ea:14:e3:d9:fb:d5:6d:d0:95:74:
                    58:3c:41:eb:8f:1b:35:0f:1c:9e:93:50:2a:8e:29:
                    a3:18:66:7c:e1:67:f1:15:29:98:02:1a:63:8b:9e:
                    12:b7:fb:a6:25:ac:eb:c1:d8:cb:3a:1e:bc:34:e7:
                    89:dd:e2:ac:0e:24:c2:a8:f9:7c:6e:3c:5d:cb:33:
                    02:a7:c5:15:79:c1:8d:fa:d4:e0:60:f8:82:f7:07:
                    0c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5C:20:EE:57:38:FC:A4:DC:8D:C3:22:C7:59:5F:70:1C:C7:92:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/47408017-d19f-31a6-b439-433fe7ad8637.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl

            X509v3 Authority Key Identifier:
                keyid:68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.110.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:89:06:98:23:44:71:9b:74:82:15:6e:3f:e4:35:ac:65:d4:
         3d:49:1f:db:da:76:11:53:43:d0:c0:fa:72:ba:c7:e8:ef:d1:
         08:c0:be:3e:fd:ea:3e:73:ec:ed:4a:61:4a:95:3a:90:4d:99:
         30:f8:b4:91:25:83:37:4c:82:4d:4a:28:82:e2:96:f8:e4:45:
         c6:0c:b5:3e:f5:69:09:7c:34:a8:0f:9d:b8:a2:e1:aa:f4:e9:
         df:93:8f:36:3e:58:e9:a3:65:2e:9f:e2:65:ac:b5:dc:22:57:
         08:0d:38:43:ba:7a:54:6b:68:a8:ca:b7:16:f2:70:fc:39:0e:
         a6:28:c5:1b:19:c4:c6:dc:56:53:67:97:c2:7b:4d:35:08:0e:
         10:e2:8d:28:08:eb:19:f9:88:2b:db:d9:49:a3:13:f2:e2:ff:
         0d:d2:03:0b:ee:a4:70:63:78:03:f4:cb:53:06:a7:78:3c:78:
         18:33:5e:fc:13:68:22:c8:ee:2f:01:b4:7b:36:ac:89:b8:d9:
         7d:06:ac:a8:c3:49:7b:0b:6a:89:de:f9:4e:da:bb:98:ca:93:
         3e:29:6a:80:9e:7d:95:42:85:f7:79:f4:46:8b:d5:01:91:b1:
         c7:d8:fa:64:cc:2a:63:98:44:27:13:d9:3f:a0:28:6c:0a:97:
         e6:1f:0b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:22 2025 by rpki-client