Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/be6986ed-4269-451f-9597-8f4adbf4d4e2/9cf4ce97-54d4-3cfc-9ee6-484e698df14d.roa
File:                     9cf4ce97-54d4-3cfc-9ee6-484e698df14d.roa (raw, json)
Hash identifier:          Hqp2af5dPMmLm3zPp++v0n9D/Xn6xqlybBo0WZR5HDI=
Subject key identifier:   1C:D5:A2:7C:48:07:3D:D1:86:31:4D:26:DD:0A:51:8C:E5:C5:0C:64
Certificate issuer:       /CN=be6986ed-4269-451f-9597-8f4adbf4d4e2
Certificate serial:       010D0C9F43285848EF613A6F14C1A40BD99391C0
Authority key identifier: 6D:F0:5F:51:19:BC:DF:CA:50:6D:74:B7:27:BE:88:61:57:27:2E:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/be6986ed-4269-451f-9597-8f4adbf4d4e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/be6986ed-4269-451f-9597-8f4adbf4d4e2/9cf4ce97-54d4-3cfc-9ee6-484e698df14d.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     396982
IP address blocks:        216.59.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/be6986ed-4269-451f-9597-8f4adbf4d4e2/be6986ed-4269-451f-9597-8f4adbf4d4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/be6986ed-4269-451f-9597-8f4adbf4d4e2/be6986ed-4269-451f-9597-8f4adbf4d4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/be6986ed-4269-451f-9597-8f4adbf4d4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:3a:6f:14:c1:a4:0b:d9:93:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be6986ed-4269-451f-9597-8f4adbf4d4e2
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=c6934a3b-8d88-4958-8528-1eb526b2f379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:06:69:59:b8:23:91:62:cc:10:73:bc:11:c8:
                    63:7f:83:08:99:69:34:53:a8:15:05:5b:48:db:16:
                    39:45:83:41:81:ec:85:ce:3a:ef:db:b4:ac:7c:fd:
                    e7:9b:83:a9:24:b1:9f:6f:22:ae:26:de:d7:c6:43:
                    bb:77:67:6f:23:41:68:8f:40:42:8b:ad:77:f8:49:
                    06:cb:61:06:c3:53:99:5a:8b:44:1d:de:80:84:fd:
                    d3:fe:9f:4b:3c:ee:6b:de:fd:86:36:61:b6:c3:ec:
                    54:58:11:3b:00:26:0a:9e:19:3b:f5:4f:38:74:0b:
                    fd:40:bc:0b:b3:e7:1d:25:7d:2b:53:99:9c:b6:80:
                    0b:05:04:3f:d8:fa:2c:58:82:e4:cd:be:8c:a3:36:
                    f8:a8:47:9b:b5:07:fb:58:d5:b6:3c:45:81:e1:50:
                    05:d5:c3:f6:e6:f0:6f:f4:c1:f0:12:f9:77:af:eb:
                    85:2a:40:25:65:f4:af:fd:ce:11:91:91:25:82:d4:
                    e5:f5:e4:7f:6e:cd:d0:0f:72:c7:9a:57:1c:3d:aa:
                    18:f0:59:f9:4d:82:fa:0c:e6:ed:29:bd:e7:33:6b:
                    12:5a:31:ae:1c:e9:54:83:f3:fb:6a:d9:86:45:b3:
                    55:3c:b2:6f:d1:a2:60:ed:db:78:c9:d3:b1:ce:e5:
                    5f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D5:A2:7C:48:07:3D:D1:86:31:4D:26:DD:0A:51:8C:E5:C5:0C:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/be6986ed-4269-451f-9597-8f4adbf4d4e2/9cf4ce97-54d4-3cfc-9ee6-484e698df14d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/be6986ed-4269-451f-9597-8f4adbf4d4e2/be6986ed-4269-451f-9597-8f4adbf4d4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6D:F0:5F:51:19:BC:DF:CA:50:6D:74:B7:27:BE:88:61:57:27:2E:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/be6986ed-4269-451f-9597-8f4adbf4d4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.59.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:d7:5c:6c:78:db:23:58:d5:79:13:22:cc:09:2f:e8:f2:42:
         92:45:d6:e9:41:c8:4b:5e:c2:ef:ac:6a:b5:39:4b:5b:36:a1:
         4c:4e:46:39:02:78:01:b2:d5:22:4b:fe:19:45:1b:14:47:26:
         1e:e4:77:55:17:12:97:8a:40:d1:fd:91:82:86:ed:ae:3b:67:
         5e:60:43:91:54:8a:af:01:b3:34:87:92:cd:d4:12:8f:90:d5:
         32:4a:0e:a4:61:ea:73:db:fe:7b:a3:32:a8:99:e4:0f:2f:4d:
         d6:42:e8:87:0a:f2:b3:c3:48:f0:2f:51:7b:0e:29:d2:77:4c:
         53:85:a6:ab:ae:82:5b:99:c0:79:86:a0:a6:82:91:1c:ff:17:
         fe:2b:2e:a8:14:17:bc:74:4f:7a:71:96:07:14:c2:0e:82:ac:
         f9:db:8a:b8:89:15:fe:3f:78:56:9b:17:44:bf:0d:1b:ae:21:
         40:61:3e:20:68:d8:2d:41:77:a2:64:d2:3a:60:88:35:07:76:
         c6:3a:75:21:3e:b6:d2:dd:df:c7:bb:4f:2e:da:18:de:4d:2f:
         07:ec:94:d0:f9:74:c1:e5:2f:ab:51:3c:4c:b2:89:77:91:d9:
         ac:c7:d9:63:b9:65:51:f4:cc:a5:f3:96:f3:c9:e0:4e:e5:91:
         33:22:e6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:07:09 2025 by rpki-client