Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/7627abd6-e40a-32f9-af95-1990e8e929ec.roa
File:                     7627abd6-e40a-32f9-af95-1990e8e929ec.roa (raw, json)
Hash identifier:          STRp7ADHyF/ylXwbD4LkiorlEEllFxzqTv4y+rU2yb4=
Subject key identifier:   D3:77:31:E0:CE:EB:9E:48:AF:CF:1C:9E:4C:DF:7B:27:B0:BA:A5:42
Certificate issuer:       /CN=23658315-b56f-46db-89d2-184000d7f7e1
Certificate serial:       010D0C9F43285848E2D110496BB589B320E82980
Authority key identifier: E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/7627abd6-e40a-32f9-af95-1990e8e929ec.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     14007
IP address blocks:        216.251.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:10:49:6b:b5:89:b3:20:e8:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23658315-b56f-46db-89d2-184000d7f7e1
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=be6f3849-7423-4980-97af-5b193aee090a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:01:e6:82:c3:5e:5d:3a:1c:82:32:6b:3f:18:
                    2b:00:0d:9a:8a:db:55:c2:5a:0d:70:1f:10:f5:84:
                    69:86:4c:5d:33:18:31:b9:c6:7a:ed:d9:6a:39:7e:
                    cc:95:83:fe:80:75:0a:ec:c8:97:95:12:8c:00:d0:
                    71:18:79:a7:f1:d4:90:6d:a7:99:7e:cf:3f:56:9a:
                    70:c1:f1:84:b0:fb:fd:43:2d:02:46:21:2e:ff:1b:
                    1b:bc:ac:85:84:78:9a:ef:49:fa:e4:33:1d:8e:57:
                    da:40:f7:b5:2a:12:d9:52:39:2f:17:27:0d:da:49:
                    fc:cc:81:ce:c7:8d:48:9c:55:2d:ac:70:30:d3:65:
                    31:2e:69:9b:c0:89:e4:82:30:db:a0:49:51:11:84:
                    10:37:15:19:dd:58:9f:2c:8a:07:12:61:9c:d7:cb:
                    e5:9e:6e:f6:a6:3d:11:9a:4f:18:33:13:ee:06:ef:
                    c4:a6:d2:cd:28:3c:0a:2f:f4:2b:bb:c4:e6:aa:4f:
                    be:47:39:35:d2:56:05:7a:8a:35:61:22:8f:72:1b:
                    8a:11:b0:4f:bb:1f:b4:a6:c5:8f:e9:96:ea:aa:d8:
                    b1:b3:62:09:05:93:a6:d8:dd:b5:0e:0b:18:0a:f6:
                    18:10:e5:b8:41:4d:e2:50:aa:33:c7:14:d5:39:36:
                    ba:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:77:31:E0:CE:EB:9E:48:AF:CF:1C:9E:4C:DF:7B:27:B0:BA:A5:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/7627abd6-e40a-32f9-af95-1990e8e929ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.crl

            X509v3 Authority Key Identifier:
                keyid:E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.251.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:85:a3:cc:9e:09:6f:2a:0c:bb:2e:c3:df:7f:b4:28:61:e6:
         74:76:a2:d7:11:f9:df:35:5e:2e:f8:48:da:e6:00:11:8d:6d:
         66:9c:af:a2:ff:ed:95:9e:b7:51:c0:68:cf:67:fa:c6:b4:1c:
         71:38:54:f0:0e:50:03:16:7a:92:bd:11:e6:d5:64:f8:58:c4:
         44:4a:e0:37:6a:0e:4c:de:88:74:03:e8:50:4c:2c:f6:e6:d8:
         77:38:18:00:aa:fe:67:a9:6d:02:ec:fe:ad:f3:a4:5c:22:ed:
         2c:be:03:b5:18:94:b2:ce:2c:dc:2d:5b:3d:bd:fc:5d:75:3a:
         99:a2:33:fc:0d:5e:81:53:ad:f7:0a:f7:6a:30:73:33:cc:6d:
         ec:3e:7f:6a:68:44:cb:1e:59:17:6f:48:9d:44:79:8b:0f:a4:
         ec:15:66:55:d3:7c:d7:90:42:d9:ce:e4:46:89:2c:e6:73:5f:
         6a:75:c3:4b:6f:91:2c:56:ca:8c:b5:2b:81:b9:45:4b:56:db:
         92:36:1b:12:42:4d:7c:eb:4c:84:39:26:99:b6:b8:4f:b9:1c:
         70:3a:83:2b:a8:54:db:74:ad:f9:ad:51:1a:eb:4c:66:08:48:
         0e:06:2c:94:c9:6a:bb:4c:c4:b2:f2:93:0a:50:1d:01:14:60:
         aa:e4:02:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:59 2025 by rpki-client