Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cb3ec4c0-66c3-3625-ae3a-36a1ac356b85.roa
File:                     cb3ec4c0-66c3-3625-ae3a-36a1ac356b85.roa (raw, json)
Hash identifier:          0aeAZITR2hDLC70xjBldW3LU8hLIWasHeQd9SHAGqik=
Subject key identifier:   D0:9A:8C:82:A8:81:95:00:0A:D4:93:F2:C3:92:0B:69:14:76:03:96
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F43285849287E5147E775C3C716EFFD00
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cb3ec4c0-66c3-3625-ae3a-36a1ac356b85.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     1239
IP address blocks:        68.24.0.0/13 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:51:47:e7:75:c3:c7:16:ef:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=87e28c53-3382-4846-a8e5-edb4e26a8cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:04:3a:bd:86:8f:91:2e:2c:36:2a:e9:bb:24:
                    6d:d0:b4:47:b7:e2:4f:a9:ff:e5:5c:06:62:69:31:
                    f3:2c:9f:e2:07:81:bd:e6:8a:1b:b7:fe:d1:49:a2:
                    cd:b1:2b:fb:6c:e5:a4:4e:64:c7:77:fc:a9:96:19:
                    75:5a:df:e3:9d:8e:da:74:38:c4:55:11:d1:ed:10:
                    4e:d1:20:b4:68:96:ac:20:02:8b:7a:c6:50:2f:68:
                    aa:1b:3d:39:16:dc:c0:2f:c9:ff:3e:61:87:a3:aa:
                    e9:a1:d8:1e:09:b3:53:8e:e5:1e:b4:06:29:59:18:
                    f7:31:ff:db:77:43:ec:0e:b4:04:b5:f7:d9:f1:c7:
                    86:d3:e9:03:68:6d:7a:ce:95:1b:35:ea:99:cb:e5:
                    ff:84:c2:b5:cf:1c:c2:a1:0f:65:4f:9a:3d:75:74:
                    14:44:05:f5:f6:0c:38:67:8a:6b:5b:97:47:22:44:
                    f7:d8:cc:bb:98:be:58:6e:df:d9:a0:67:de:46:f8:
                    94:15:ed:7a:21:fb:3c:a6:87:70:7c:4c:0b:fb:f0:
                    4c:ec:7d:eb:b8:db:51:09:43:63:65:35:b0:a1:49:
                    a0:29:90:ab:59:70:1a:71:a2:f1:86:77:cc:9f:88:
                    dc:a3:33:10:26:eb:89:78:ce:32:f6:3e:96:d1:31:
                    f7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9A:8C:82:A8:81:95:00:0A:D4:93:F2:C3:92:0B:69:14:76:03:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cb3ec4c0-66c3-3625-ae3a-36a1ac356b85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.24.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:f3:8b:27:49:f8:b4:d1:dd:0d:5d:28:83:54:7c:13:1a:4b:
         77:f4:3b:04:06:bc:ed:2a:68:21:a5:3a:4e:92:40:ca:55:92:
         70:0f:24:85:8f:eb:58:2b:05:a9:00:42:5a:7f:d9:34:b7:b9:
         f4:ae:67:0a:41:d6:f2:c2:2f:62:d4:de:d1:f2:6f:e2:1a:f8:
         a0:24:dd:4b:ab:59:04:d2:4a:29:f2:74:87:d8:a0:72:68:0b:
         67:fa:70:73:b1:8c:d9:a4:04:2b:78:97:04:e0:75:0e:5d:39:
         b9:72:cc:6a:91:77:18:1a:96:76:7f:f4:4e:0b:6c:08:25:0b:
         96:7a:f7:f5:69:71:29:e1:7e:09:82:ef:d2:3d:52:13:c1:f7:
         05:8a:4c:b0:38:8d:9a:2b:8a:47:3b:b9:ba:fc:a0:35:e9:17:
         2c:15:28:ff:b8:88:8c:6f:8b:49:2b:cb:05:e9:dc:43:07:ce:
         53:42:74:fe:93:6d:32:62:3c:d2:06:bd:fe:36:6d:8e:5b:89:
         43:9d:c8:9b:f2:e8:91:b5:61:73:59:ed:7f:c2:d4:67:86:a1:
         59:f3:03:48:dc:ae:ab:ab:d3:bd:eb:dd:0d:7b:e6:28:5f:2c:
         68:be:cb:00:59:3c:68:09:8f:bc:09:e1:e0:4b:87:dd:d2:ad:
         47:63:01:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:27:21 2025 by rpki-client