Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/6bc8d596-c1ed-38f2-b8df-d4ad0eb84a21.roa
File:                     6bc8d596-c1ed-38f2-b8df-d4ad0eb84a21.roa (raw, json)
Hash identifier:          OUbXtvfhKdCOtuQc1Ka8pA71eRQ8yN/xim/tnLNHPh0=
Subject key identifier:   6B:DA:6C:CD:74:6E:E6:E0:9D:AA:08:2C:96:2E:2A:8B:F2:60:0A:49
Certificate issuer:       /CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566
Certificate serial:       010D0C9F43285848345567F013682510BF1FEF60
Authority key identifier: D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/6bc8d596-c1ed-38f2-b8df-d4ad0eb84a21.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     40501
IP address blocks:        216.235.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:67:f0:13:68:25:10:bf:1f:ef:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=8b3a9f1d-0bb1-4f1b-b3ec-19d99e69b14b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bd:fb:44:ba:57:0f:94:09:94:d6:c0:6c:78:
                    6b:68:ac:6b:c0:71:96:63:be:e2:c3:c7:23:75:de:
                    a2:fa:5a:06:94:49:5d:9a:39:9d:04:18:40:9b:21:
                    62:ae:c9:64:62:08:68:ba:24:51:d1:3b:69:e0:3b:
                    7c:9b:0a:84:a3:47:3a:ef:4e:8b:c5:89:a8:75:c8:
                    6d:48:9d:68:d4:6e:b3:57:ac:09:5c:26:19:3a:25:
                    90:f8:90:a9:d8:05:39:e5:0d:30:6b:18:c8:da:13:
                    8a:98:4a:0c:fd:f4:50:68:83:70:7f:2a:95:02:cb:
                    4f:3c:aa:94:c6:88:d4:1f:13:14:5b:9f:2b:ea:3c:
                    f8:32:9e:19:3f:9e:73:91:5a:f7:00:86:48:ea:39:
                    49:c1:4e:67:b7:a4:a2:4b:7a:f4:f5:3c:33:78:f3:
                    3e:b2:c9:8f:b3:9c:51:e9:51:4f:10:a2:3e:10:89:
                    ad:31:fa:3e:8e:1b:62:51:c5:57:14:c1:61:f1:67:
                    bf:b8:40:26:7f:19:d7:4a:f1:fa:07:0d:73:ec:ca:
                    69:f0:06:bf:09:b0:a8:1a:e2:7f:6c:92:be:2e:8c:
                    90:ec:3a:ba:ec:80:b6:1c:48:34:44:70:5a:7b:f9:
                    15:8e:7e:2f:5c:ba:f9:ee:ae:c8:ea:b4:63:68:32:
                    a7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DA:6C:CD:74:6E:E6:E0:9D:AA:08:2C:96:2E:2A:8B:F2:60:0A:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/6bc8d596-c1ed-38f2-b8df-d4ad0eb84a21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl

            X509v3 Authority Key Identifier:
                keyid:D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.235.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:ae:2d:07:93:1c:44:3b:60:58:87:e8:72:a0:9b:dd:97:6f:
         b5:23:11:8d:f5:99:aa:5c:38:98:c5:f5:63:76:25:a5:43:49:
         a4:37:51:73:bb:7b:0d:75:65:ce:98:e2:f5:ba:6b:8d:08:5d:
         9a:97:76:5d:45:b3:ee:8a:c6:30:88:66:89:e1:6f:7c:8b:6e:
         f3:30:f5:0d:e0:e9:e5:90:90:fa:33:50:44:87:9d:9d:37:dc:
         62:82:e8:80:84:ed:01:84:56:72:f3:d0:a7:f8:a6:af:c5:0c:
         24:e9:fe:2e:3a:d8:96:9c:02:d4:4e:e1:95:6c:f2:51:cf:18:
         e2:97:4f:4c:b6:b7:29:e7:41:1f:b4:25:01:91:30:25:e8:3a:
         79:2e:88:5a:33:04:5b:5f:8f:c5:f1:15:09:25:dc:43:66:76:
         51:f8:63:ba:da:99:33:a4:e2:ae:b5:f0:66:62:62:fc:6c:af:
         bc:87:9a:83:ae:ce:be:fe:e6:c0:f4:3e:83:66:6c:d9:9b:2e:
         a5:ad:2f:89:6e:6f:d8:1c:4a:26:fd:2c:52:f0:4d:ef:04:e9:
         b3:be:80:15:d5:c5:1c:cd:63:dd:4c:04:44:75:71:35:a8:44:
         12:31:ae:91:49:3e:2e:2f:c9:56:8c:c4:26:53:93:4f:dc:03:
         ce:f0:26:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:06 2025 by rpki-client