Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b8914030-4b33-3e87-89ec-34f5befc8995.roa
File:                     b8914030-4b33-3e87-89ec-34f5befc8995.roa (raw, json)
Hash identifier:          O30IA+0acP6cqUmdRyGBcJ2yL6x00/IGxlkkpVsduIw=
Subject key identifier:   62:CF:79:3B:60:1E:A4:E0:31:A1:29:23:4F:3E:47:E3:7D:38:BC:42
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921346BB1784FA1DA70F44740
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b8914030-4b33-3e87-89ec-34f5befc8995.roa
Signing time:             Sun 09 Mar 2025 10:21:07 +0000
ROA not before:           Sun 09 Mar 2025 10:21:07 +0000
ROA not after:            Sat 07 Jun 2025 10:21:07 +0000
asID:                     3848
IP address blocks:        216.208.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:6b:b1:78:4f:a1:da:70:f4:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:21:07 2025 GMT
            Not After : Jun  7 10:21:07 2025 GMT
        Subject: CN=646b35a8-7ead-46b3-ac51-6cfdd4fb85b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ea:1c:74:eb:e4:5f:10:6e:9d:ab:e4:10:07:
                    52:d0:7a:0a:21:65:55:93:52:05:68:bb:26:a8:b5:
                    7d:66:0d:10:10:70:02:10:01:33:1e:fc:71:0c:85:
                    f2:95:f5:a5:ed:f6:cc:59:13:9f:c6:6b:45:6e:ef:
                    de:19:ab:ea:fd:78:02:9b:f2:04:94:e4:a3:f4:aa:
                    30:2a:f9:cf:87:ca:e3:12:3f:ac:53:19:de:1f:fd:
                    a4:d3:23:6e:47:bd:b4:d5:9b:ca:8f:98:e6:d7:0c:
                    57:76:fa:c4:40:d5:a7:6c:b1:ae:46:84:a4:13:d3:
                    a6:c4:e9:5c:7d:b8:53:95:f9:f2:a1:d5:50:9f:8a:
                    a6:87:72:96:c1:9d:76:a6:5d:e4:4b:a3:ff:47:48:
                    a4:be:15:21:eb:af:d7:c8:33:ef:83:82:72:d6:c7:
                    62:c3:de:ef:0a:d7:e8:46:e6:b5:dc:8f:32:87:32:
                    b4:60:57:70:c1:7d:6f:d0:7f:38:95:3d:86:c7:8e:
                    91:d1:1b:12:52:9e:e5:ed:31:df:d5:d7:0b:a1:39:
                    85:31:c1:71:d1:b5:6f:8d:ed:a8:bb:c5:17:4f:27:
                    8c:2b:bb:13:12:f0:b2:dd:fe:93:85:dd:c1:a6:9c:
                    e2:f5:d9:6e:1f:ad:a8:38:fe:85:75:39:a5:31:e4:
                    34:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CF:79:3B:60:1E:A4:E0:31:A1:29:23:4F:3E:47:E3:7D:38:BC:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b8914030-4b33-3e87-89ec-34f5befc8995.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:49:33:1b:e6:e3:65:db:be:c3:12:67:9e:d3:38:76:9b:cd:
         0e:15:3a:a5:20:d0:6a:34:53:59:e5:78:50:6d:1d:93:c8:6c:
         95:44:f6:64:53:f0:1f:4a:39:92:7a:8d:bb:38:d1:df:c7:3e:
         39:d0:64:bc:e5:4f:9d:51:fa:fe:ec:ad:de:a3:ec:d5:0e:48:
         46:53:36:5e:cd:b0:75:90:c9:75:ac:2e:2f:16:5e:35:fb:ea:
         64:d4:05:34:61:8e:54:d8:da:f9:5d:30:81:54:b2:70:a4:9c:
         cd:04:27:10:2a:9e:37:cd:39:25:db:b2:84:f3:87:a2:0a:1f:
         b3:cc:d4:5c:0d:ae:c5:c7:21:a3:50:f2:c6:ef:44:b3:64:ee:
         6a:b9:4e:6a:ba:0a:9e:c8:17:45:b3:24:12:57:1c:a3:c6:b9:
         6c:3d:d6:29:3e:db:a1:01:4e:32:0c:58:57:bc:d6:0a:c0:4e:
         e0:30:d6:61:5e:7f:fe:e6:6c:12:9b:31:34:94:3e:f7:a5:07:
         cd:6e:2d:88:57:33:13:5c:bc:55:44:5e:45:da:ed:b6:61:4e:
         30:2e:40:ac:27:9b:63:a3:f5:77:0e:37:f3:2f:51:cb:66:3f:
         5a:3a:21:93:97:d0:9c:84:ef:69:aa:94:33:d4:b4:1b:4d:71:
         df:40:a3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:55:35 2025 by rpki-client