Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/7c02cb14-7ab0-38e2-86cb-f09009bc5549.roa
File:                     7c02cb14-7ab0-38e2-86cb-f09009bc5549.roa (raw, json)
Hash identifier:          E5+duxmlar26zgIDy+OPa5ads31eDD3QlvT7n38c8l4=
Subject key identifier:   B7:EB:0A:C8:D5:FD:8C:D5:15:CD:74:86:D9:FD:5D:7C:A5:D4:D0:AC
Certificate issuer:       /CN=ba461ed6-9748-4005-b669-8946003e1ae1
Certificate serial:       010D0C9F43285848E0065459294C16F838704080
Authority key identifier: 86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/7c02cb14-7ab0-38e2-86cb-f09009bc5549.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     4246
IP address blocks:        128.235.241.0/24 maxlen: 24
                          128.235.249.0/24 maxlen: 24
                          128.235.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:54:59:29:4c:16:f8:38:70:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba461ed6-9748-4005-b669-8946003e1ae1
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=ef892c3c-a0cc-44f2-aff3-423e4b6f7104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:37:f3:7b:e9:9e:54:00:e2:fb:ae:37:f5:b3:
                    0b:8e:66:0d:4a:5f:fb:35:40:a5:48:b0:af:2c:da:
                    68:95:36:d3:57:0d:ab:a9:86:4a:27:a3:ab:11:f5:
                    6f:5b:d8:0c:8c:ca:da:77:30:78:f2:36:e7:1f:2b:
                    f9:5b:a8:20:de:7c:1f:e5:c1:cc:ca:c5:d3:fe:1e:
                    74:89:33:4d:cb:6a:f7:35:b7:13:c9:8f:01:8a:fd:
                    7e:43:4e:ed:38:1b:28:13:53:e8:54:3e:8a:b7:72:
                    16:b4:d5:94:f9:9b:4c:18:36:b3:5b:84:94:7d:28:
                    76:69:14:7d:a7:3f:2b:39:87:e2:f6:6c:ad:39:52:
                    6c:64:7b:c8:1d:82:1a:82:0b:54:83:fe:68:25:af:
                    76:8c:8a:01:ac:de:53:99:d6:ff:f3:d0:2b:7f:8c:
                    c0:c0:d0:8d:e1:df:86:c5:6f:72:02:89:ef:37:90:
                    99:05:2d:8d:05:cc:af:01:fa:89:9b:88:e4:d5:ef:
                    27:de:87:c4:eb:92:0a:d2:05:70:a1:ce:01:7b:1d:
                    41:c9:42:78:2a:62:9f:73:11:7b:a8:55:b4:ff:40:
                    25:7a:f4:61:f1:ef:50:a5:d9:d2:d1:53:72:7c:ac:
                    0b:47:b8:3b:ab:e0:8e:9e:42:b6:17:28:b2:19:dc:
                    f4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EB:0A:C8:D5:FD:8C:D5:15:CD:74:86:D9:FD:5D:7C:A5:D4:D0:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/7c02cb14-7ab0-38e2-86cb-f09009bc5549.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl

            X509v3 Authority Key Identifier:
                keyid:86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.235.241.0/24
                  128.235.249.0/24
                  128.235.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:cf:b6:b5:cd:ca:68:a0:ae:21:c0:4b:e6:ca:bb:0c:a1:e7:
         71:d7:b6:7b:49:6b:e0:8c:e0:a8:4b:6c:7b:84:23:6c:14:08:
         cf:20:32:c1:e8:85:31:d2:e8:e6:89:d9:81:65:19:f3:fa:3d:
         ee:18:bd:b9:2a:cd:01:28:07:ce:5a:65:f3:17:7d:a0:8b:85:
         7e:7d:84:98:46:af:17:3b:5d:a9:b6:2e:8b:52:45:c1:b3:82:
         d3:94:10:f3:1f:22:9d:14:a0:19:4b:10:9f:cf:26:31:9c:65:
         af:9b:76:69:87:38:12:88:23:ef:97:94:a5:79:d2:f9:39:f3:
         9c:dd:c1:5f:98:8e:79:6d:6f:9a:ce:d3:29:09:36:f0:20:c5:
         bc:ef:c2:92:3e:34:58:fa:17:b7:67:c2:96:3d:50:80:b7:e4:
         9b:24:2f:55:1c:fa:5e:81:de:03:41:28:20:a7:db:10:6c:07:
         ea:18:eb:67:10:71:a8:f2:06:6f:21:68:e0:d7:db:77:79:b3:
         66:8a:41:f7:33:49:c0:b8:ba:19:03:46:13:00:e4:a9:72:7e:
         dd:a7:00:d0:5a:23:be:e4:56:4d:c4:23:6f:c0:4f:25:c3:12:
         4a:c3:e0:cd:09:54:88:35:ee:8a:0c:81:dd:a7:49:54:ba:e3:
         76:1f:3d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:09:53 2025 by rpki-client