Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/504300da-e352-3b8a-a426-89293d3af339.roa
File:                     504300da-e352-3b8a-a426-89293d3af339.roa (raw, json)
Hash identifier:          UynH9rmYNv3lqBZIa/xp1EiWSeb3SGQqTi1fFb9JNUA=
Subject key identifier:   88:B2:C1:3C:5C:27:B1:DF:8F:3B:0D:CA:6A:9B:FC:46:3B:74:BF:BA
Certificate issuer:       /CN=7386a5e1-ba73-408c-a7e4-df88e2f52603
Certificate serial:       010D0C9F43285848FD56B39735804A7ADC7D5E00
Authority key identifier: 8E:FA:F9:05:B8:DE:21:B0:DE:BE:1B:33:D1:1A:89:62:C3:90:04:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/504300da-e352-3b8a-a426-89293d3af339.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     13768
IP address blocks:        216.21.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/7386a5e1-ba73-408c-a7e4-df88e2f52603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/7386a5e1-ba73-408c-a7e4-df88e2f52603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:b3:97:35:80:4a:7a:dc:7d:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7386a5e1-ba73-408c-a7e4-df88e2f52603
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=7bcb5cdf-7531-4086-b08b-21307ed19e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6e:9f:e2:7f:f3:d9:ff:f0:e2:db:4b:ec:f1:
                    99:c2:72:75:8a:4b:27:d1:8c:37:c6:84:e4:66:dc:
                    b3:fd:cc:8d:a2:69:fe:cb:41:81:0a:01:fe:60:9d:
                    3c:00:23:78:76:cb:c3:d4:ab:81:ff:ee:ec:68:78:
                    91:7d:67:60:fb:f7:26:0b:91:80:c4:4f:81:4b:84:
                    cb:93:54:02:e7:bc:89:a5:8f:f9:9f:26:4a:1e:ed:
                    1a:f7:0e:40:88:f3:28:c6:33:6b:af:0d:73:4b:8c:
                    7c:54:db:42:72:97:cd:a1:f8:3a:84:75:fd:a1:68:
                    78:e7:e3:82:ed:a0:18:77:8d:5d:44:00:84:f1:09:
                    0e:6c:4c:96:dd:51:52:be:df:e4:b1:15:4c:e8:0f:
                    89:ce:2d:cc:87:6d:68:c1:86:97:c6:6f:bb:28:70:
                    30:ae:ca:51:b6:6e:a0:ae:eb:99:00:41:7e:49:9f:
                    b8:b0:e2:05:d8:e0:11:b3:fc:d2:43:f1:5b:f9:6b:
                    a0:70:7c:89:ce:44:7a:9f:44:53:02:12:c8:98:2b:
                    bc:0d:2f:82:b1:41:cd:95:54:f4:90:a4:fb:9b:c4:
                    07:ee:a0:cd:86:44:09:b9:9e:23:c8:72:2a:84:28:
                    e9:ef:5d:36:5e:2d:fb:56:6d:f9:d4:af:fa:88:93:
                    ab:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B2:C1:3C:5C:27:B1:DF:8F:3B:0D:CA:6A:9B:FC:46:3B:74:BF:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/504300da-e352-3b8a-a426-89293d3af339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/7386a5e1-ba73-408c-a7e4-df88e2f52603.crl

            X509v3 Authority Key Identifier:
                keyid:8E:FA:F9:05:B8:DE:21:B0:DE:BE:1B:33:D1:1A:89:62:C3:90:04:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.21.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:97:5c:44:db:af:1c:c4:9e:2d:cb:51:95:ab:c1:96:5a:60:
         1a:c8:ca:fb:7f:fa:42:bc:f1:ec:89:60:cf:a4:37:33:61:6e:
         50:6f:cb:d7:1b:63:df:f2:89:8a:26:c2:ae:5b:1a:0e:63:b3:
         ed:a3:c1:bc:2a:81:ed:2e:04:23:72:ec:b2:57:91:b2:e1:7b:
         71:5d:0d:32:0c:fe:d2:22:c4:fa:ed:b8:2a:26:e1:32:2d:78:
         ab:e6:a7:b3:b7:bb:3d:e7:e2:e4:c5:ef:0c:bf:a3:f8:76:0e:
         c5:ba:c0:e2:1c:fa:89:a5:d1:20:cc:b1:68:37:89:d5:a3:de:
         95:0a:70:ca:42:7f:dc:9a:4e:a4:c2:3b:2b:b6:8f:f0:ec:96:
         cf:d2:3a:ac:1f:9e:08:91:9a:11:9f:a8:3c:f2:5d:20:24:c5:
         26:8c:e8:1f:35:19:83:b4:63:6a:fc:99:b8:eb:aa:0f:c7:df:
         b4:83:6a:ec:52:10:fd:d6:75:66:63:c9:12:88:d6:07:3c:90:
         25:e9:38:ef:fb:48:f4:74:eb:30:86:02:04:97:19:31:45:75:
         77:ff:04:a9:fc:45:33:b3:2c:21:ea:53:00:70:03:0d:55:03:
         ca:b1:58:8e:20:ea:16:d6:b4:64:4a:47:57:0d:c8:e7:e2:d3:
         38:7c:10:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:40:58 2025 by rpki-client