Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/466d8aec-1e4f-30f8-865b-e46396c0bd20.roa
File:                     466d8aec-1e4f-30f8-865b-e46396c0bd20.roa (raw, json)
Hash identifier:          25mUu93CIEcnLyGL1PjIvfQi9pEqHaIvTNcxRw8GtbE=
Subject key identifier:   4A:1B:60:3A:0F:3F:0F:51:CC:FF:5D:58:AA:33:4F:7C:A8:F1:4C:DB
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F432858495D896CE1EA5151B732EA44C0
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/466d8aec-1e4f-30f8-865b-e46396c0bd20.roa
Signing time:             Mon 31 Mar 2025 01:00:47 +0000
ROA not before:           Mon 31 Mar 2025 01:00:47 +0000
ROA not after:            Sun 29 Jun 2025 01:00:47 +0000
asID:                     209242
IP address blocks:        216.198.53.0/24 maxlen: 24
                          216.198.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5d:89:6c:e1:ea:51:51:b7:32:ea:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: Mar 31 01:00:47 2025 GMT
            Not After : Jun 29 01:00:47 2025 GMT
        Subject: CN=bc405471-7875-4cc6-9489-41de8e597ba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4f:a6:12:c9:08:59:e6:18:ac:1e:e0:95:8a:
                    b9:e6:24:d0:86:e0:e6:61:da:d1:74:64:c7:4c:a9:
                    c6:e5:0e:84:f9:52:48:97:46:56:03:bd:3e:44:07:
                    76:d8:59:d7:75:f2:49:77:e7:74:5e:68:af:d9:79:
                    fb:da:ff:33:2f:05:83:e7:0f:f3:78:0c:fa:5d:bb:
                    31:e7:60:4d:42:33:09:db:84:57:01:25:6d:cf:1f:
                    ff:af:bd:f6:c4:5f:8d:4f:b8:b0:3d:f7:d1:59:08:
                    dd:63:be:7f:d7:58:db:f6:2d:cd:fc:59:36:2c:e8:
                    d6:cf:f6:00:ed:f1:56:a7:a7:45:a3:85:72:93:4f:
                    45:66:12:21:27:55:fb:9c:90:78:50:07:c2:97:8c:
                    3f:25:7a:38:da:ba:14:ba:52:6c:d0:8b:ae:22:a7:
                    37:2e:5d:95:4d:0c:99:c8:ca:e2:7e:0c:3a:8f:85:
                    60:50:8c:05:29:14:63:82:5e:f5:38:9a:0b:51:dc:
                    62:a8:c5:3e:bc:b0:da:1b:da:b9:c1:04:9d:4b:9d:
                    b0:f1:6e:5f:9a:e7:9b:9c:18:f2:32:a4:54:86:71:
                    ec:34:be:46:c3:5f:03:71:07:f4:1f:a1:8a:7a:24:
                    39:78:5f:70:c7:44:8e:66:d8:7c:a0:a7:73:5c:25:
                    94:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:1B:60:3A:0F:3F:0F:51:CC:FF:5D:58:AA:33:4F:7C:A8:F1:4C:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/466d8aec-1e4f-30f8-865b-e46396c0bd20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.198.53.0-216.198.54.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:86:68:ff:2b:1f:15:00:74:a6:89:67:bb:e6:f3:dc:47:e4:
         4b:c9:dd:ca:1f:3d:53:88:8f:9d:92:49:e2:2f:67:cc:34:99:
         7b:76:86:47:33:45:7b:1d:10:9b:a6:3f:9e:08:40:e6:af:ce:
         15:df:30:8b:e8:bb:8d:9b:c6:02:94:67:b3:42:50:f7:18:89:
         eb:f1:09:2a:cc:f5:ec:24:6a:25:01:97:71:03:ff:ca:28:25:
         70:e7:ab:0d:95:d0:05:47:56:11:97:89:6f:d7:90:84:d1:b4:
         64:38:e0:9d:c3:ef:b8:de:b7:87:80:bf:cb:3d:16:60:43:1c:
         ad:1e:d6:ca:b8:41:c8:44:a7:70:d0:a8:9f:be:23:4d:cd:fe:
         92:35:b0:44:71:33:9b:2d:78:48:4b:f9:3d:e6:01:e6:12:7b:
         71:e2:72:92:d3:d0:0b:c3:6a:a4:89:46:82:94:89:4a:f4:85:
         06:26:67:20:3c:73:d8:d0:e1:41:ee:d8:50:3d:0c:99:0b:b0:
         37:54:5d:16:1b:74:70:16:7c:7b:f0:49:a8:9a:43:1a:76:0a:
         87:fd:19:74:f0:f9:e6:38:49:9c:3a:72:fd:a6:a5:fd:7a:e4:
         f9:28:9d:80:4a:91:26:25:1f:54:1d:cb:06:e2:f0:14:4d:a8:
         3c:86:d4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:47:28 2025 by rpki-client