Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/ee02f89e-d151-39e0-a655-f74770f9addd.roa
File:                     ee02f89e-d151-39e0-a655-f74770f9addd.roa (raw, json)
Hash identifier:          6kiytPxLI97r0DyrfnfzlwQzbyqkRfLPmrzLOOtjucE=
Subject key identifier:   F8:1C:FD:BA:37:D6:BD:E3:C3:A3:A5:0E:39:8A:7F:A6:71:44:76:86
Certificate issuer:       /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d
Certificate serial:       010D0C9F432858491D7177B2565466B07B59A240
Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/ee02f89e-d151-39e0-a655-f74770f9addd.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     31875
IP address blocks:        216.21.216.0/21 maxlen: 24
                          2604:ebc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:77:b2:56:54:66:b0:7b:59:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=556f38a8-5e91-4954-ae2d-4d7429dd1c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ef:3f:f8:57:0c:11:98:82:78:ff:2c:20:1a:
                    03:f1:56:8b:49:c7:e3:27:ee:50:36:9e:27:e2:30:
                    86:45:cf:23:1a:5b:46:09:cd:36:78:f4:c7:10:c1:
                    35:1d:1b:be:56:64:40:94:1e:aa:47:d7:e1:a6:17:
                    b8:df:2c:6b:84:15:64:aa:92:3a:8b:e5:6c:4c:15:
                    65:ce:89:80:3a:56:84:53:ec:54:1f:e3:81:38:eb:
                    6e:c3:bd:fc:ba:75:f6:a1:24:8d:20:e6:18:a2:d6:
                    9b:d0:1c:a2:02:59:e5:0d:a3:fa:0c:67:3f:7e:56:
                    bb:42:b6:b0:a8:73:52:6f:f3:6f:c9:ce:7f:59:93:
                    34:1b:5f:8f:a5:85:57:a9:c5:77:2d:9b:4b:b6:43:
                    79:65:01:0f:fb:98:fa:75:ac:b0:5d:ee:bb:a5:c3:
                    03:a2:6d:67:97:87:70:cf:7e:85:2d:c7:1b:16:be:
                    e8:c6:60:81:55:48:d5:19:ff:8b:b0:17:7d:d7:76:
                    a9:a1:e5:e6:b6:7c:4c:37:0c:c1:36:30:8e:56:bf:
                    85:8b:f7:c1:a6:72:d4:8f:c4:83:de:bc:2f:b5:51:
                    44:31:d4:1d:d4:72:b1:36:19:4f:d5:d0:25:4f:72:
                    33:02:7c:a1:7b:a9:13:a7:ec:82:f0:b1:11:60:2a:
                    95:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:1C:FD:BA:37:D6:BD:E3:C3:A3:A5:0E:39:8A:7F:A6:71:44:76:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/ee02f89e-d151-39e0-a655-f74770f9addd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl

            X509v3 Authority Key Identifier:
                keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.21.216.0/21
                IPv6:
                  2604:ebc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:2d:14:57:6a:be:a7:83:06:e1:62:a4:22:f2:a7:21:8c:c8:
         0e:ff:22:23:ea:91:76:5d:45:2e:59:82:26:f2:ca:17:b6:85:
         fc:48:9f:19:eb:4d:18:03:9f:3c:fa:f7:c5:b1:ed:19:ed:3a:
         c8:e6:ae:e5:c9:1c:55:04:4f:ec:7e:a1:c8:48:3b:96:88:45:
         98:42:38:74:be:23:81:4c:b4:6d:f5:dc:c8:3d:22:02:05:57:
         20:89:57:53:21:8b:60:c2:62:59:d1:32:eb:ed:53:23:e7:64:
         b6:03:35:e7:38:34:a4:14:fa:15:5e:e4:f9:f0:fa:df:34:48:
         51:1a:18:65:b0:e8:bc:22:73:16:15:17:62:91:c5:be:36:0e:
         92:c4:ef:9c:51:73:03:b8:c1:e8:db:84:c8:22:91:26:f7:57:
         bf:06:d0:0b:ca:ee:8a:29:65:e7:27:50:65:fd:e5:e0:8a:89:
         33:be:9a:0c:9f:82:db:5d:fb:9d:e8:2a:df:d9:0a:a7:a4:b0:
         4c:44:4d:d1:77:76:82:ac:1f:d7:91:8b:fb:ac:43:f5:c7:74:
         71:76:eb:26:26:d6:88:13:98:24:a3:f4:d2:04:2e:fd:e4:42:
         a1:46:e5:a5:6a:af:cf:33:c6:93:a4:c7:ad:b8:a8:24:3b:24:
         4c:f3:85:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:09:24 2025 by rpki-client