Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/88ffdd3e-d2a1-3923-b64a-627f7638fd03.roa
File:                     88ffdd3e-d2a1-3923-b64a-627f7638fd03.roa (raw, json)
Hash identifier:          +PUnwrWqvTqOe9DRjtewrw2r4lUL+fKepOY1rI+Odmw=
Subject key identifier:   B2:DF:F9:DD:51:F3:C7:20:A6:B2:2C:E3:10:33:CA:AE:2D:D2:FC:CA
Certificate issuer:       /CN=c6921896-3c0f-4cb4-9c99-e2d60d1d2e41
Certificate serial:       010D0C9F432858496E498C7EB08826E49986E880
Authority key identifier: AE:57:89:B5:6E:58:19:47:0D:45:25:4E:58:B2:70:00:DA:93:82:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/88ffdd3e-d2a1-3923-b64a-627f7638fd03.roa
Signing time:             Sun 06 Apr 2025 01:00:47 +0000
ROA not before:           Sun 06 Apr 2025 01:00:47 +0000
ROA not after:            Sat 05 Jul 2025 01:00:47 +0000
asID:                     53316
IP address blocks:        173.213.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6e:49:8c:7e:b0:88:26:e4:99:86:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6921896-3c0f-4cb4-9c99-e2d60d1d2e41
        Validity
            Not Before: Apr  6 01:00:47 2025 GMT
            Not After : Jul  5 01:00:47 2025 GMT
        Subject: CN=35578303-b1f4-4eef-998a-6318039b1b49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:aa:e8:59:a7:67:ba:23:68:ff:e8:6d:ff:f9:
                    7d:76:8c:92:5e:87:7a:6d:02:3d:0b:be:45:45:59:
                    7a:c8:ed:62:79:f5:9a:e7:0a:65:8f:b1:86:c4:1a:
                    6f:c2:a7:23:5d:5e:51:74:b7:85:3c:94:f1:95:b0:
                    de:f8:d4:b0:e2:10:85:42:7a:bd:1e:be:eb:e0:1c:
                    4b:8d:ff:d6:62:a4:21:d1:d1:b6:b5:d1:b6:c6:78:
                    1d:6a:bb:69:bd:83:a1:6c:92:fe:64:cf:d8:b9:8f:
                    b8:7e:df:4c:1a:95:d9:ee:6f:60:99:57:a2:ce:1d:
                    3a:3d:a0:bb:97:f5:ca:a0:3a:6d:2f:86:a6:22:36:
                    c9:e4:6c:46:23:0a:da:ba:20:64:1a:96:4c:9f:4b:
                    ec:b5:a4:62:00:99:44:f1:25:4d:4f:bf:90:06:ad:
                    9a:da:0f:c2:e7:a4:a7:ce:47:fc:fc:d4:10:83:d4:
                    04:65:ea:c2:4c:30:e9:43:bf:cf:8a:ef:de:29:43:
                    98:30:db:0f:ff:34:5c:9a:e5:04:fa:7a:d2:5a:a1:
                    94:e0:e9:f4:41:7d:4c:c9:6b:d1:10:b5:a6:87:45:
                    62:95:51:97:d8:e2:58:6b:a0:6e:68:8e:fb:56:0e:
                    0d:09:26:e2:bd:38:1c:d4:b3:f4:25:8f:6b:e9:4e:
                    e2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:DF:F9:DD:51:F3:C7:20:A6:B2:2C:E3:10:33:CA:AE:2D:D2:FC:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/88ffdd3e-d2a1-3923-b64a-627f7638fd03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.crl

            X509v3 Authority Key Identifier:
                keyid:AE:57:89:B5:6E:58:19:47:0D:45:25:4E:58:B2:70:00:DA:93:82:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.213.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:49:99:19:fc:8f:e0:46:6f:42:21:52:ef:fe:2c:b9:4e:05:
         be:10:20:71:e6:97:8f:5d:1c:46:b6:da:d8:f8:b6:c2:5f:bf:
         04:e4:68:6f:f1:bc:22:d4:b6:55:58:88:cc:30:5c:57:d1:a0:
         9c:a0:69:9f:da:cf:6e:47:39:3e:29:64:c3:bf:86:fb:b8:77:
         cb:5c:2a:c4:6e:99:c3:43:92:68:46:59:a8:1e:57:89:56:c1:
         e3:57:c2:fb:7b:00:5d:70:17:6b:75:e4:6c:05:d6:8c:ff:92:
         45:71:bd:43:70:29:89:88:aa:c4:a5:c0:3a:ea:87:55:05:46:
         44:c2:02:d9:aa:5e:ef:d5:01:db:0d:19:27:ec:3f:fc:b2:0a:
         56:16:a9:1e:b3:33:f1:a9:6e:e3:a7:8f:df:a0:20:0e:c2:9b:
         97:63:40:ce:7e:4a:a1:76:0a:db:96:16:44:c0:35:cc:fa:88:
         a5:0e:c7:04:db:17:c5:38:86:36:e8:fb:5c:ab:77:f1:79:b7:
         9d:17:6b:27:53:97:6e:fc:02:a1:09:e8:b0:08:3d:15:de:1e:
         dc:e5:26:32:d0:6c:15:e8:1c:e7:f6:4e:75:fc:c0:ba:f8:ef:
         bf:17:6c:21:19:b7:1b:3f:70:4e:9c:c1:2f:72:a6:24:c8:4e:
         a9:b7:6a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:06:38 2025 by rpki-client