Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/3a06afc0-5bbb-3d1d-be77-2946a75b55a6.roa
File:                     3a06afc0-5bbb-3d1d-be77-2946a75b55a6.roa (raw, json)
Hash identifier:          0jEUkslIVOuCIuQpPWnWMzBFZs8Y6Xegh5uGJltyrXc=
Subject key identifier:   28:30:39:2D:93:BE:1B:35:97:1F:7B:28:20:7B:BC:A2:25:1F:DC:C9
Certificate issuer:       /CN=e4fdf8c6-f91a-494f-99e5-526e6fffeebe
Certificate serial:       010D0C9F43285848E16BDACF0D25897BB9738340
Authority key identifier: 6A:7D:86:AE:89:46:EB:FC:95:A3:31:31:15:03:35:D5:52:C0:41:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/3a06afc0-5bbb-3d1d-be77-2946a75b55a6.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     36167
IP address blocks:        216.59.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:da:cf:0d:25:89:7b:b9:73:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4fdf8c6-f91a-494f-99e5-526e6fffeebe
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=7e29742d-0f58-41e2-a693-203c60db7791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:23:cb:29:65:86:f0:d0:50:66:df:4c:c3:dc:
                    6b:b3:90:a7:4a:2d:b6:73:28:ee:21:ca:39:a6:41:
                    92:5e:13:cf:b6:c0:50:e3:cb:b4:da:89:c7:29:08:
                    08:cf:dc:51:5e:67:8d:2d:a8:58:3c:83:20:f6:29:
                    b3:3c:a4:d6:68:a0:0f:e3:61:7b:88:0c:41:72:8e:
                    a4:a3:13:f6:38:e8:2f:88:b9:5c:70:66:78:fa:ce:
                    a0:1c:bf:e6:6b:cb:20:5e:89:8f:e2:ea:7d:e5:f8:
                    a6:59:a0:26:49:ee:67:58:66:15:07:d9:45:e8:8e:
                    91:12:de:d0:a2:b9:b2:d3:14:03:70:51:8e:3b:00:
                    ec:a2:ad:cc:b6:bc:39:42:83:55:a6:59:8a:25:63:
                    c8:6e:17:aa:ac:03:49:67:15:d0:fa:11:7e:b2:5b:
                    c7:89:14:86:5b:67:e9:b3:ee:48:52:4e:41:96:a6:
                    d3:95:26:58:b0:88:b5:79:11:b5:f6:16:d8:8a:bc:
                    2d:b5:bb:62:fb:8a:83:ed:88:de:51:53:22:11:e1:
                    de:02:40:45:3d:d8:40:28:6e:db:dd:40:d8:40:ee:
                    24:fe:d1:dc:11:4b:97:f6:52:9f:a4:da:bf:4f:4e:
                    fd:5f:1c:0c:c3:e5:b5:dd:74:2e:90:d7:fd:47:43:
                    45:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:30:39:2D:93:BE:1B:35:97:1F:7B:28:20:7B:BC:A2:25:1F:DC:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/3a06afc0-5bbb-3d1d-be77-2946a75b55a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.crl

            X509v3 Authority Key Identifier:
                keyid:6A:7D:86:AE:89:46:EB:FC:95:A3:31:31:15:03:35:D5:52:C0:41:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.59.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:d8:13:2a:ae:c6:7a:a3:12:72:12:3f:1a:c2:39:84:8e:bf:
         7c:6f:e4:46:2f:e7:39:25:6e:3c:da:62:49:24:54:10:69:9b:
         f2:ea:2b:2a:a2:96:ae:ab:2e:49:3c:ca:8d:80:10:c1:96:b0:
         ab:a0:34:2b:1a:d9:6b:94:e3:0e:2f:17:da:8b:ef:0d:c6:7f:
         90:07:f2:7e:35:78:71:ed:17:d0:ea:a3:9c:32:1d:7e:bf:68:
         4d:17:dc:ae:81:75:db:40:94:3f:7e:b6:29:97:4e:d1:4c:68:
         9e:b7:75:9d:3f:de:6d:8e:6d:6c:8b:0a:74:2c:89:36:8a:1e:
         d6:bc:8c:07:f4:9c:0b:5f:e5:4e:46:1f:03:29:28:f1:95:44:
         c5:b4:83:ba:8b:a1:28:ed:c1:7b:44:54:1c:89:d3:ca:65:9d:
         ca:e9:b1:7e:3f:7b:dd:91:d9:e0:30:b8:e3:5f:48:a0:2e:23:
         d4:ed:f4:eb:69:f3:c1:54:aa:c8:53:26:92:ac:35:16:12:49:
         ef:64:e5:88:63:8a:b3:57:0c:17:dc:3f:b1:22:1d:1b:dc:d0:
         37:83:5e:b1:c1:67:22:12:92:00:d1:36:4c:2d:d7:af:85:39:
         19:29:33:fe:07:0e:31:3a:90:b0:f3:cd:29:d2:c5:96:b3:74:
         b7:78:4c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:47:31 2025 by rpki-client