Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/fe164eba-9a9c-32b9-951f-27b34f55a3aa.roa
File:                     fe164eba-9a9c-32b9-951f-27b34f55a3aa.roa (raw, json)
Hash identifier:          QlQK4rxI/OFCgNWpUSsTeCvhrbXb5pby/nOBphLTueQ=
Subject key identifier:   2D:BE:20:5A:B3:A7:A4:F9:E7:1D:AA:9F:0B:DE:DA:64:7E:4A:AE:CD
Certificate issuer:       /CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8
Certificate serial:       010D0C9F432858495ABEB5DCF48F6113C66E3280
Authority key identifier: 4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/fe164eba-9a9c-32b9-951f-27b34f55a3aa.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     13727
IP address blocks:        216.8.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:b5:dc:f4:8f:61:13:c6:6e:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=bda1d201-ded0-44f0-99d6-6a6bc3895946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:36:bc:61:c3:a7:f2:0d:ea:c9:ad:35:87:c0:
                    dd:1a:95:d7:e0:16:b0:04:5b:38:ef:dc:92:27:4a:
                    0d:eb:2b:54:67:c6:5c:12:7c:4d:19:fb:74:84:32:
                    a9:ab:53:24:51:27:3e:24:9d:e0:06:f9:33:5f:b3:
                    c4:81:02:20:a2:45:87:9e:eb:1a:26:e7:60:9b:d1:
                    0a:af:26:e8:af:49:cc:56:98:dd:49:20:7a:68:89:
                    53:76:a2:f2:a5:68:a1:4e:10:45:69:a0:6b:35:ec:
                    0f:0e:3e:3b:d5:ac:72:42:3c:6a:47:50:b6:ce:13:
                    5a:8c:22:82:59:02:2b:8a:42:6b:d0:ca:a7:f7:f9:
                    75:5f:df:5e:e7:de:bc:c5:f8:88:1e:d6:12:5d:2d:
                    1f:fd:f3:2b:93:ca:2b:2e:8a:5f:24:08:7f:8e:98:
                    e0:40:43:d0:7a:cb:b2:6f:2b:1d:e5:92:da:a9:5b:
                    18:1c:36:e2:f3:4a:7b:b5:c2:bd:36:27:b0:86:95:
                    91:58:2f:16:47:eb:47:f0:b6:8c:a4:21:57:b1:14:
                    1a:23:36:a4:f3:ac:e0:ee:b6:f1:ff:2c:ca:9c:21:
                    fe:24:c6:21:7a:c2:ca:b2:9f:3f:ba:71:6f:75:35:
                    a0:39:18:2e:84:f7:5e:b2:80:fa:7b:dc:fb:2a:fb:
                    10:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BE:20:5A:B3:A7:A4:F9:E7:1D:AA:9F:0B:DE:DA:64:7E:4A:AE:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/fe164eba-9a9c-32b9-951f-27b34f55a3aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl

            X509v3 Authority Key Identifier:
                keyid:4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.8.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:1b:18:a7:45:68:59:04:0f:ce:16:58:21:9a:05:79:03:37:
         8e:05:e4:1f:84:6e:75:f7:12:45:d5:7d:ce:fe:09:8e:11:42:
         ed:9e:23:05:89:8c:cd:45:0f:c4:2d:a0:65:a0:ee:8e:62:02:
         3e:1c:bf:b6:91:7a:d3:26:a6:ae:ff:3e:f8:f0:8c:11:b2:fb:
         07:1e:28:eb:3f:be:70:1d:5a:a4:b2:19:5f:df:76:29:9e:d5:
         45:4b:e5:31:a0:b0:6d:33:3b:36:40:e3:91:dd:d5:2a:32:b0:
         20:75:66:87:13:22:0b:9f:f3:1c:c4:f2:56:6b:51:1d:56:a0:
         48:28:35:df:ca:c4:70:23:23:0d:42:ba:c3:31:a4:2c:2f:54:
         f1:c3:80:27:f2:b3:6f:af:cd:3a:fc:0c:92:16:de:83:1e:8f:
         52:55:59:45:2c:a3:4b:e4:be:1b:0f:4f:bc:57:b1:dd:7d:cf:
         5a:49:36:b7:ce:ed:76:72:4d:7f:3e:24:8f:65:ff:4f:94:91:
         71:88:de:bb:19:67:61:33:c3:c1:fe:f2:d4:4d:54:2b:37:2f:
         93:cb:82:ba:d6:d6:e7:32:d9:d8:16:cd:fc:3e:b8:75:85:70:
         d0:ba:25:b5:65:5d:e8:24:8c:36:9e:5a:a6:c7:d8:86:f4:ab:
         bf:f8:3c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:18:29 2025 by rpki-client