Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3/df533474-1b70-34fe-993a-3d573248861f.roa
File:                     df533474-1b70-34fe-993a-3d573248861f.roa (raw, json)
Hash identifier:          tjwi3z2LWQ1jbDFC+6tZc6MJy5HPakNRIwQDKoatXN0=
Subject key identifier:   C2:D9:59:B9:6C:77:48:C0:67:6B:A5:06:39:10:79:35:3E:3B:FE:84
Certificate issuer:       /CN=29b74c4b-4f37-4598-ad09-a003a2e11fd3
Certificate serial:       010D0C9F432858490CB16E2DDAD36493A2D65E00
Authority key identifier: B5:62:04:76:20:A7:DD:E4:40:F9:F6:94:90:7F:05:B4:9C:1A:EC:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3/df533474-1b70-34fe-993a-3d573248861f.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     46392
IP address blocks:        216.215.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3/29b74c4b-4f37-4598-ad09-a003a2e11fd3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3/29b74c4b-4f37-4598-ad09-a003a2e11fd3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:6e:2d:da:d3:64:93:a2:d6:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29b74c4b-4f37-4598-ad09-a003a2e11fd3
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=fd829fd8-6df7-4169-a90f-03ba83444b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:93:2b:c2:72:14:fc:96:9c:03:99:21:98:30:
                    b9:32:84:09:a0:b8:16:37:a1:e4:06:87:f1:b3:ca:
                    a6:cd:d3:cf:75:ad:1b:14:b8:54:c9:27:5b:dc:32:
                    41:0f:05:45:21:84:af:ac:b2:03:53:f0:94:e3:28:
                    ad:5e:15:a7:af:65:74:94:27:25:a3:1a:f2:b6:c2:
                    89:13:d9:b1:f6:e5:07:c2:51:85:55:7d:d0:8e:0f:
                    9f:c3:14:a5:f4:d4:1f:5b:3e:32:86:d0:d2:f4:72:
                    a2:df:88:bc:a5:8a:c0:2d:37:e1:c2:e4:97:40:be:
                    21:5d:7b:f6:d0:0d:b4:89:53:6c:98:fd:91:5f:f0:
                    b0:3c:6b:a2:32:80:e3:04:59:a0:62:84:a2:3c:de:
                    ff:08:5c:13:5e:29:99:9f:96:38:9b:e4:15:b5:b9:
                    43:62:30:65:63:81:5d:63:12:63:80:48:0a:1b:df:
                    d0:d4:64:59:87:5c:90:d0:63:cc:d3:f9:5a:be:80:
                    b4:6c:fe:72:57:04:48:13:31:c5:89:d5:96:5b:42:
                    a3:17:69:da:12:cf:46:67:1a:5f:36:fc:1c:7d:d9:
                    3b:63:1f:53:39:e4:7f:6a:40:c6:44:87:cf:88:79:
                    ba:9b:08:61:ff:64:81:26:7f:0f:c4:f0:ca:ee:ae:
                    3a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D9:59:B9:6C:77:48:C0:67:6B:A5:06:39:10:79:35:3E:3B:FE:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3/df533474-1b70-34fe-993a-3d573248861f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3/29b74c4b-4f37-4598-ad09-a003a2e11fd3.crl

            X509v3 Authority Key Identifier:
                keyid:B5:62:04:76:20:A7:DD:E4:40:F9:F6:94:90:7F:05:B4:9C:1A:EC:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.215.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:52:3f:be:45:b1:8b:d0:3c:d2:ea:29:1f:59:6d:c5:3b:f2:
         8d:93:94:5c:e8:23:a9:a6:b9:e5:94:3d:66:0e:c5:96:27:7e:
         84:bd:47:2c:fe:3b:55:36:0a:56:e9:ed:ee:85:4f:6b:eb:85:
         c7:0d:6c:7f:bb:e3:aa:9c:73:a4:39:9c:50:62:bf:52:46:c6:
         90:ca:f0:c0:47:bf:b4:51:a1:35:74:43:0d:11:af:35:6c:1e:
         b9:7d:9b:e8:be:fd:89:01:18:47:d8:e2:8c:03:dd:14:a2:92:
         53:b1:36:84:da:55:eb:1f:29:ab:0d:5f:23:6e:53:52:10:36:
         d5:09:03:f8:53:8a:26:07:9a:76:32:c5:82:ff:37:96:56:a7:
         4a:31:95:93:34:6b:2f:6c:74:5f:72:36:bb:7b:b0:de:31:f1:
         d7:32:65:56:f5:72:22:47:b4:ba:7f:91:15:2f:fa:ff:e1:d1:
         6f:e9:81:7f:40:49:0b:61:3c:9a:94:c9:24:53:7f:87:68:19:
         a0:1b:87:07:d3:22:f5:77:92:ca:f1:8b:06:ad:09:15:2c:b3:
         a8:7b:81:70:3b:fd:5b:7b:1b:dd:8c:02:48:fc:12:5e:5f:59:
         18:30:88:54:df:bf:ce:8f:c3:bb:38:c0:c7:aa:e3:8e:ee:16:
         be:9c:ee:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:01:13 2025 by rpki-client