Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/9802e88a-a1a4-39b9-a5c2-b7398d882fb4.roa
File:                     9802e88a-a1a4-39b9-a5c2-b7398d882fb4.roa (raw, json)
Hash identifier:          vL2QyXir/6GGN6OJxsAz2gi0S8hBFbraN68ROaM126I=
Subject key identifier:   CC:64:AC:80:37:DB:1D:46:BB:3B:7F:E3:2F:0E:0E:B1:72:36:E6:4A
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F43285849203C0D7E4DF47FD50D264480
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/9802e88a-a1a4-39b9-a5c2-b7398d882fb4.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     6195
IP address blocks:        216.35.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:0d:7e:4d:f4:7f:d5:0d:26:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=f481fc30-3656-4e69-b374-5c66015344c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e9:f6:05:6e:f8:67:c4:85:fa:f8:ea:1b:d4:
                    e4:2e:8b:1e:31:15:eb:ff:24:fe:11:f6:88:74:9c:
                    b9:9c:52:0c:bb:b1:c7:5f:41:3c:e0:b2:6a:ff:b3:
                    2d:27:98:41:a5:62:52:db:48:6a:54:42:8c:19:31:
                    f1:ee:ab:99:e6:d5:53:66:a0:fb:95:bc:36:68:9f:
                    d8:e4:ee:16:bb:aa:12:89:67:3a:32:f7:23:f9:98:
                    14:fd:6d:66:de:2f:8c:d6:a6:94:9d:33:72:e0:26:
                    35:3b:ce:51:18:8c:d3:b3:fe:c9:36:36:56:cb:80:
                    c9:be:c0:65:37:3d:3b:1e:f3:32:71:8d:61:b0:e6:
                    49:05:a8:85:c4:84:e5:ec:a6:67:09:b4:04:28:08:
                    f5:2c:84:1b:03:7d:23:6c:e1:a2:b1:6d:1c:71:24:
                    82:24:b3:82:cc:dd:f8:9c:5a:b9:8e:80:d8:ba:99:
                    09:77:d9:e4:af:9e:84:19:9b:32:62:f8:e5:1e:44:
                    32:50:3a:8b:4e:ae:66:77:e7:93:80:2e:b4:c0:cd:
                    69:3c:db:08:f1:fd:30:e5:8c:10:3f:17:45:6e:25:
                    e1:2d:c1:55:0b:42:03:93:bc:4a:25:eb:67:ca:1e:
                    b9:fa:a6:fe:50:e0:53:82:40:b6:d2:05:ef:1b:bc:
                    9b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:64:AC:80:37:DB:1D:46:BB:3B:7F:E3:2F:0E:0E:B1:72:36:E6:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/9802e88a-a1a4-39b9-a5c2-b7398d882fb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.35.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:54:8e:97:0b:b6:55:da:e8:34:59:a7:9d:f6:45:61:55:66:
         26:2c:f5:4c:a9:b2:60:1c:44:58:37:71:7c:16:fa:9f:44:ec:
         06:5c:8c:41:ff:e0:fa:a1:48:1d:ba:ab:ea:7c:8e:37:67:a6:
         f5:6a:98:10:08:bd:62:20:d2:3a:d8:2a:68:26:c0:0b:6c:f6:
         21:c5:b1:01:de:f0:7b:a1:ac:cd:e8:41:ea:2b:e5:51:0f:2e:
         69:24:49:08:a0:1f:52:86:0c:2a:da:58:34:4f:f0:8e:00:8b:
         a1:56:33:d8:34:99:dd:d5:79:67:f1:ae:5f:5c:66:e3:e2:0f:
         7d:1e:cb:ab:8e:c2:4e:52:21:65:30:99:51:26:d3:76:15:10:
         fb:dc:aa:37:57:1d:8b:b0:12:36:1d:bb:ba:1d:35:5b:e7:07:
         25:58:8f:ec:b4:f2:f0:ed:5f:0d:25:7a:67:d5:92:81:f1:87:
         c0:26:7c:2b:17:78:88:1e:4d:dc:1f:c1:5a:cb:e2:20:98:65:
         9a:a4:59:2e:2b:0c:0e:dd:2c:d7:b3:8c:de:04:db:34:fa:9a:
         40:9d:fb:14:fd:6f:5d:65:4a:39:fd:b2:fe:8e:8e:c7:1f:97:
         98:8e:56:66:43:d5:3f:23:73:1d:f4:30:f4:1b:1f:4f:76:54:
         81:e2:c6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:56:07 2025 by rpki-client