Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/14fa3220-8306-3011-96b8-8816bcbee539.roa
File:                     14fa3220-8306-3011-96b8-8816bcbee539.roa (raw, json)
Hash identifier:          eVWe3ga0dJIScSoUdKP3zsAzhoNNgKMz7h4K/WAYGj8=
Subject key identifier:   53:F2:E8:CE:BF:7D:A5:AE:7F:62:9D:73:47:1A:97:92:6C:26:81:51
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F43285848EC96842CB9024373487E2E40
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/14fa3220-8306-3011-96b8-8816bcbee539.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     396247
IP address blocks:        96.61.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:84:2c:b9:02:43:73:48:7e:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=6c8a5480-1605-4262-96d7-2f0d9dc44a28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d3:f9:dc:6c:ff:fe:5b:ae:3b:3a:93:37:2c:
                    72:ea:a7:49:c5:0f:ff:4a:00:4e:97:b9:fe:d4:bb:
                    9f:c2:79:0b:96:db:2e:78:1d:04:87:e2:b8:c0:78:
                    ee:59:bd:ee:57:b3:f1:21:e3:cf:04:6c:47:7a:52:
                    e9:dd:df:29:4d:86:71:16:37:b8:26:d0:aa:c0:ce:
                    86:1d:fd:69:87:f5:b4:07:75:ed:91:8f:a5:4b:ca:
                    28:f7:c1:06:99:29:87:91:54:b6:53:b7:d5:77:df:
                    45:9b:f3:4f:cd:1f:d3:a7:fe:b0:f7:40:d7:d6:a7:
                    5a:4b:9e:87:ee:55:54:22:fe:74:cb:3b:94:e7:56:
                    48:a8:59:57:7b:84:10:64:5a:5a:b6:be:bb:57:5a:
                    5d:77:3f:e8:72:3c:2a:aa:89:83:96:34:ce:b9:79:
                    21:d6:0a:e6:a8:de:64:3c:02:5e:61:26:fe:f5:9b:
                    05:74:60:cb:c1:f7:2a:38:dc:4c:c3:0c:77:33:2b:
                    75:57:4f:ba:7e:a7:b0:e0:bc:79:c7:7f:17:e6:97:
                    06:24:c8:ff:2f:9b:1f:c8:47:c9:56:09:cd:4a:95:
                    9c:2f:50:0a:8f:eb:63:e1:99:2a:2d:3b:65:dd:75:
                    e2:f7:7f:cd:86:ba:63:54:ee:86:2c:30:79:9e:12:
                    cd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F2:E8:CE:BF:7D:A5:AE:7F:62:9D:73:47:1A:97:92:6C:26:81:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/14fa3220-8306-3011-96b8-8816bcbee539.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.61.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:8c:44:13:aa:09:a6:14:a5:c8:45:9b:80:23:f1:7e:2c:72:
         ff:f9:3d:1b:39:56:6f:af:e4:78:e7:6a:7b:bb:ab:c2:05:61:
         22:86:67:4b:62:9a:08:0b:c2:51:f7:be:43:60:28:c2:c4:3f:
         6a:5d:8a:e6:c5:f4:70:91:57:8d:1d:8c:d8:67:8b:aa:24:67:
         b0:42:52:1b:95:75:9d:18:2f:db:ec:72:1d:e0:da:a1:d6:2b:
         cb:85:48:17:6b:93:44:c6:4c:4d:e6:85:e7:50:bb:f5:52:2c:
         21:7a:0b:25:d3:16:5c:f8:4b:75:ed:a5:bc:34:70:82:88:d8:
         1c:20:ee:d5:a9:96:53:e5:72:01:82:12:1d:e5:81:75:83:38:
         52:f0:8c:2e:ae:12:dd:67:9f:3c:2a:4e:67:97:4e:80:6f:45:
         de:5c:df:ec:ab:3e:5a:58:53:d7:f6:bd:5f:e8:ea:e1:99:45:
         69:6e:15:d4:13:2d:db:f3:92:b6:b6:61:3b:25:6f:04:dd:1e:
         ca:bf:c0:1d:f9:13:5f:cf:4d:04:6d:9c:a1:26:20:33:f7:ce:
         76:f0:f3:da:4e:1a:dd:89:fc:11:3a:72:3c:14:0a:c8:38:6c:
         63:02:fb:76:7f:84:40:d6:6c:40:16:5d:02:de:90:f5:ff:11:
         c1:a2:f8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:33:23 2025 by rpki-client