Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3/966ff276-3d30-3881-bb79-379c90950bca.roa
File:                     966ff276-3d30-3881-bb79-379c90950bca.roa (raw, json)
Hash identifier:          gnMTx3AO/3k2pmkSCDdvmPcZZ7Mswib22jZV78gyO+Q=
Subject key identifier:   E6:B8:CF:CB:94:C9:A3:4B:7B:93:5B:5A:A8:62:E9:39:2D:AD:10:FD
Certificate issuer:       /CN=29b74c4b-4f37-4598-ad09-a003a2e11fd3
Certificate serial:       010D0C9F432858490CB16E1EABD7E9263E6DC380
Authority key identifier: B5:62:04:76:20:A7:DD:E4:40:F9:F6:94:90:7F:05:B4:9C:1A:EC:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3/966ff276-3d30-3881-bb79-379c90950bca.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     46392
IP address blocks:        216.215.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3/29b74c4b-4f37-4598-ad09-a003a2e11fd3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3/29b74c4b-4f37-4598-ad09-a003a2e11fd3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:6e:1e:ab:d7:e9:26:3e:6d:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29b74c4b-4f37-4598-ad09-a003a2e11fd3
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=52e7508a-2f29-4d56-a550-7a7ea4a451ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ad:27:30:a8:1f:b3:ca:39:8d:50:a0:85:15:
                    a8:2d:99:77:fa:57:04:21:00:62:b5:dc:fa:17:37:
                    a6:6a:fb:68:50:b0:e5:d2:ff:d4:0b:f7:5c:02:ca:
                    2f:88:39:76:f4:fc:14:ff:aa:3f:60:75:d3:58:16:
                    75:7e:8d:d7:2c:18:27:28:a8:1b:fe:27:be:77:a5:
                    e4:1e:f3:f2:29:13:af:00:67:fc:15:38:30:46:87:
                    e4:36:c6:0b:bb:cf:eb:f7:aa:5c:83:81:53:0d:35:
                    d2:af:91:46:fc:1d:95:6e:4b:79:d7:9f:fb:a1:24:
                    53:33:48:5d:61:8e:f9:85:96:18:21:aa:5d:eb:ac:
                    fd:54:04:83:99:ec:51:14:97:0c:99:64:13:76:3c:
                    a4:81:41:33:11:11:c6:74:8c:70:78:c7:6e:b7:64:
                    8d:63:0a:e2:90:75:90:7b:8a:f7:23:54:a4:6d:d3:
                    5e:3b:0c:26:ab:10:f6:f3:f9:ba:ef:6e:1e:ad:59:
                    ce:9a:c4:61:59:4b:df:b9:3a:3c:94:f1:60:b5:dd:
                    d7:e5:38:45:7e:05:75:98:71:ff:62:8a:ec:d7:03:
                    0c:5c:24:f6:87:e1:87:e7:51:cd:0b:73:5f:7f:82:
                    eb:b8:94:50:6e:c5:0c:f2:cf:42:7b:f9:c8:a4:3a:
                    cf:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B8:CF:CB:94:C9:A3:4B:7B:93:5B:5A:A8:62:E9:39:2D:AD:10:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3/966ff276-3d30-3881-bb79-379c90950bca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3/29b74c4b-4f37-4598-ad09-a003a2e11fd3.crl

            X509v3 Authority Key Identifier:
                keyid:B5:62:04:76:20:A7:DD:E4:40:F9:F6:94:90:7F:05:B4:9C:1A:EC:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.215.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:55:ec:eb:17:94:d3:8f:7f:86:19:dd:35:1d:9a:a4:71:e4:
         4d:9a:da:32:8c:25:40:91:98:7f:53:02:51:7b:40:27:89:45:
         6c:f0:23:0b:63:ab:85:5a:69:06:87:f3:47:49:d3:8d:19:99:
         f1:70:ed:25:26:50:fa:4d:0d:ab:d2:d9:9e:da:96:c7:a7:2f:
         26:29:16:ef:e4:4a:8e:d1:86:32:32:fe:1e:03:f6:54:87:e2:
         75:ed:0d:b9:15:b6:60:94:51:41:3d:81:07:be:f7:82:ad:bc:
         3d:d4:d3:71:f5:19:0f:1f:94:8d:3b:8f:cf:d2:17:da:ec:ed:
         2b:27:0b:60:b3:6c:d7:66:df:b8:94:de:50:e6:25:9b:19:32:
         4e:15:db:24:d7:b5:f6:a1:7e:f5:0c:38:96:77:23:4b:ce:4a:
         9f:92:fa:b3:bb:2f:ab:0a:fc:b2:b8:2d:f3:50:d9:4f:e2:41:
         c4:9e:24:07:ed:bb:ad:53:99:8b:21:d5:d6:ef:7d:70:54:2e:
         b5:f5:6c:cd:4b:87:d9:ae:4a:dd:e6:52:75:74:b5:a6:09:b1:
         28:83:66:7b:bc:0b:b3:4c:ec:b0:17:c6:48:52:9f:d7:24:7f:
         7a:bb:69:7b:5d:98:c2:1b:3e:c9:fb:a6:aa:b7:6b:04:99:2a:
         c9:62:b3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:53:35 2025 by rpki-client