Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/13be448e-26e3-370d-9800-6de9945f979e.roa
File:                     13be448e-26e3-370d-9800-6de9945f979e.roa (raw, json)
Hash identifier:          LaTSzbyuse9Q1XefVIAu6xH2KkzW9RndXJda+iUQFds=
Subject key identifier:   70:FA:90:06:E1:4F:55:86:9B:43:AD:6D:1E:92:D4:AE:31:B6:46:DC
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F4328584940397A3C6ACDFC3BDCA03220
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/13be448e-26e3-370d-9800-6de9945f979e.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     65010
IP address blocks:        204.59.7.24/30 maxlen: 32
                          204.59.7.26/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:7a:3c:6a:cd:fc:3b:dc:a0:32:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=81583a15-ab0a-49a2-a5a8-cf13e312c599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cd:93:dd:96:9c:fc:49:c6:ff:36:9e:9b:d3:
                    3f:b8:6d:60:4a:78:52:48:b7:fc:92:81:44:93:a0:
                    ca:64:96:5f:31:b6:33:70:9d:83:93:11:22:cc:b1:
                    c6:37:36:25:28:af:8b:15:ce:f6:6d:61:b4:ce:d4:
                    f8:2e:04:b6:e2:3f:df:61:4a:4b:11:34:0b:27:e2:
                    b3:66:f0:14:87:5c:e1:40:a8:9b:e6:d7:26:f7:08:
                    e8:d3:73:b2:15:0e:68:41:46:b7:6f:7e:62:8d:70:
                    a5:91:9e:80:f0:23:f8:3d:28:25:ef:84:b4:82:c6:
                    ad:eb:a9:c9:6a:19:df:f9:57:b7:6c:37:78:8f:3f:
                    22:db:d6:08:0a:4c:76:ee:04:da:16:d6:40:4d:05:
                    ab:24:3b:80:6f:44:d8:79:a9:45:28:af:17:53:41:
                    91:3a:8b:dc:f7:e3:65:21:8b:5b:3a:01:b4:10:39:
                    f0:e7:13:45:45:95:9a:d0:1c:a3:9a:9d:01:85:7e:
                    30:64:39:97:e0:84:3b:ce:ae:d8:3c:e0:12:88:ea:
                    73:41:0c:43:16:18:ce:7d:81:85:57:77:67:c2:71:
                    07:df:fa:20:91:81:4b:45:65:23:c9:0b:82:94:ed:
                    77:7d:60:52:d2:d1:3a:34:a4:84:d9:9c:88:6d:e7:
                    82:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FA:90:06:E1:4F:55:86:9B:43:AD:6D:1E:92:D4:AE:31:B6:46:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/13be448e-26e3-370d-9800-6de9945f979e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.59.7.24/30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:a0:d7:95:ae:27:b6:1f:8a:9a:1c:9b:59:ee:97:f5:cb:be:
         12:ab:34:d9:eb:a3:1a:ed:ff:fc:3c:3a:20:47:a4:d9:3e:a2:
         00:66:56:9d:b2:e0:5d:6a:02:a1:63:98:82:a4:bc:9b:a8:1b:
         11:8d:d5:0b:28:da:d2:04:80:9a:90:30:9e:10:6f:28:8b:90:
         ba:cb:2b:93:49:8a:90:9a:c5:39:c9:85:9f:91:55:f2:a2:7a:
         37:0e:1b:79:52:8a:9b:3a:06:3c:51:49:2b:4b:8a:6a:56:c0:
         67:8b:74:de:56:17:21:48:97:0f:42:b0:65:71:f4:d9:b4:59:
         6b:a9:15:23:63:d4:61:d6:c8:25:1a:1c:58:ed:05:84:b0:00:
         cb:92:8f:7f:c2:90:ff:1b:c7:14:67:fe:b6:3d:a1:91:d1:af:
         78:71:61:96:58:83:69:ad:c6:5a:e2:d9:32:6e:b0:a9:5b:d0:
         97:80:d9:68:8c:23:15:0a:f1:d3:f3:af:04:a1:32:d6:83:7a:
         aa:d0:3b:09:f3:cb:85:1f:08:33:0c:d9:36:a9:25:e5:06:41:
         c0:6e:a0:16:db:ba:19:f5:33:8f:c1:48:57:1c:7c:8c:15:0f:
         a0:cc:45:27:39:a0:d8:e9:d3:b7:21:71:74:0a:bc:74:2b:0f:
         75:de:b6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 20:00:47 2025 by rpki-client