Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/30a09d44-dfec-338b-ac49-726a62b531d0.roa
File:                     30a09d44-dfec-338b-ac49-726a62b531d0.roa (raw, json)
Hash identifier:          IGy3WBGpIxgmP8se+AQmhq+wzb2jtZH5CN99hib2p+4=
Subject key identifier:   70:F7:72:CE:C6:38:84:58:E7:87:C9:9C:E5:A8:9F:B1:2F:8E:DF:5B
Certificate issuer:       /CN=6f64cc24-ef62-4498-b9ab-965375ea0e8e
Certificate serial:       010D0C9F432858492D7ABF6D810DA68E84458A00
Authority key identifier: A9:6A:9A:E3:3D:66:0D:C4:7C:C8:A4:02:58:D8:FD:15:E1:90:61:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/30a09d44-dfec-338b-ac49-726a62b531d0.roa
Signing time:             Thu 13 Mar 2025 19:52:31 +0000
ROA not before:           Thu 13 Mar 2025 19:52:31 +0000
ROA not after:            Wed 11 Jun 2025 19:52:31 +0000
asID:                     62651
IP address blocks:        199.33.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/6f64cc24-ef62-4498-b9ab-965375ea0e8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/6f64cc24-ef62-4498-b9ab-965375ea0e8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2d:7a:bf:6d:81:0d:a6:8e:84:45:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f64cc24-ef62-4498-b9ab-965375ea0e8e
        Validity
            Not Before: Mar 13 19:52:31 2025 GMT
            Not After : Jun 11 19:52:31 2025 GMT
        Subject: CN=5287b676-20a1-4a7c-9a54-8fe832deea1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2a:e1:00:45:7b:4a:6d:5b:9f:55:68:d4:ff:
                    f6:91:84:36:1e:ac:ee:3d:b8:ea:01:27:ea:60:0e:
                    f4:fe:89:c7:e8:e6:7a:02:ac:0e:58:65:36:fe:4d:
                    72:4c:0a:40:3f:11:64:c3:af:69:a3:50:1e:0c:07:
                    09:7f:01:e6:69:57:a4:62:5f:66:2e:e8:0b:89:ec:
                    3e:c0:86:30:c6:3d:11:e7:dc:1b:27:1b:f2:0c:f9:
                    08:6c:03:a9:b3:76:a9:0f:5d:88:12:ac:83:d8:6f:
                    32:fc:61:1f:2a:fd:9d:bc:13:9b:b6:9d:10:01:b7:
                    b7:fb:1a:7f:5d:ab:e2:bf:fe:25:e0:99:c9:98:1c:
                    5c:7d:a9:3d:54:d0:e0:bb:48:77:fe:8f:6a:90:a3:
                    ff:3b:7f:22:df:3e:57:05:57:bb:55:20:4e:09:55:
                    03:f9:96:2e:8c:b3:d0:27:d1:c2:cf:bd:11:5b:3d:
                    c1:4d:02:2f:bd:22:d6:37:68:ef:02:47:f9:9c:53:
                    11:ff:c6:73:46:2d:53:d8:16:22:49:91:19:ba:3b:
                    90:81:3e:b3:f8:82:e4:f0:3c:88:e1:43:54:90:7d:
                    ee:0b:f1:44:61:e9:01:e2:90:27:d8:c4:ee:ca:66:
                    6d:0d:d7:22:0f:e4:a9:44:7f:8b:ca:0e:b1:40:c2:
                    bc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F7:72:CE:C6:38:84:58:E7:87:C9:9C:E5:A8:9F:B1:2F:8E:DF:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/30a09d44-dfec-338b-ac49-726a62b531d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/6f64cc24-ef62-4498-b9ab-965375ea0e8e.crl

            X509v3 Authority Key Identifier:
                keyid:A9:6A:9A:E3:3D:66:0D:C4:7C:C8:A4:02:58:D8:FD:15:E1:90:61:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.33.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:9c:38:b2:bd:7d:09:e5:d8:1e:db:41:9a:cc:b3:17:cd:15:
         b8:b4:b9:ec:94:ea:0f:f4:44:ba:1b:8a:9d:22:69:11:d6:9f:
         a3:b7:c2:da:30:d3:19:82:3b:df:1f:4a:9b:72:1c:2d:03:df:
         8c:be:34:da:c5:59:e4:d5:9d:66:30:3e:a0:e0:e3:c5:a9:af:
         05:b6:9e:3b:77:19:54:fd:3c:ac:3e:ae:30:d5:7f:1f:f3:13:
         8d:c7:87:91:ea:38:56:7c:c3:8a:8d:7e:ac:22:98:c1:a8:07:
         83:36:da:bc:9d:d4:82:11:fa:5d:d6:7e:2d:b8:a9:88:22:42:
         b8:de:5d:5a:bd:f6:c4:d1:b0:ef:a4:6e:0b:22:84:8e:8e:b8:
         83:34:26:01:5b:03:66:72:d9:d7:e9:ae:03:e1:18:5f:3f:77:
         27:8b:ed:e2:03:ab:e4:a4:c1:c4:4a:af:5a:df:77:30:de:90:
         63:e3:d9:74:36:e4:eb:b5:82:33:48:84:0c:07:43:2c:79:b7:
         4d:d6:9c:a6:d2:19:49:eb:b6:c5:20:d2:7d:cc:ed:c3:47:c6:
         9e:72:5f:03:3c:23:67:fe:82:9c:ca:e6:2e:97:db:cc:c6:dd:
         67:f3:c7:10:91:92:ba:8a:ec:1e:13:04:ac:af:57:d4:c8:46:
         d7:b1:98:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:50:17 2025 by rpki-client