Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/3142ff37-0d80-3fda-bfa7-23a560c639d8.roa
File:                     3142ff37-0d80-3fda-bfa7-23a560c639d8.roa (raw, json)
Hash identifier:          O99dZUVe35Pd140dKM52utcIa3xMoVLRv1oHsdVSEgQ=
Subject key identifier:   7A:8A:FC:8F:FE:E9:FF:0B:B5:18:F6:88:D3:B9:04:8C:97:D9:17:FB
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F43285849203C1887B259B24020689DF0
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/3142ff37-0d80-3fda-bfa7-23a560c639d8.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     212238
IP address blocks:        216.158.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:18:87:b2:59:b2:40:20:68:9d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=d0df1a1d-0e74-4413-ab7a-4562aec6028d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3c:78:d3:9c:14:f7:ec:dc:34:da:e9:67:7e:
                    a5:61:a9:70:1b:9e:29:35:88:f5:ac:66:03:1a:fa:
                    77:d2:67:93:b9:eb:cc:29:3b:4d:12:bc:6e:28:0b:
                    28:50:76:1a:c1:30:fb:39:a9:6d:12:aa:3b:c1:ac:
                    b3:71:d7:e9:ac:3f:9e:43:f8:c6:60:54:66:a5:21:
                    7c:25:92:cf:9a:20:59:83:60:7f:03:22:f8:35:fe:
                    cd:72:49:13:ac:59:f9:7c:05:0f:71:96:fd:71:5d:
                    fe:39:d6:0f:02:17:73:a1:92:6d:44:a1:c3:77:50:
                    6a:9c:ab:73:74:86:d9:0d:5c:8d:78:d4:ef:de:32:
                    00:e3:80:aa:7a:15:8f:81:39:05:e0:83:26:bb:0e:
                    8f:62:9b:a0:45:ce:15:e9:22:a0:d1:dc:f9:53:44:
                    d3:8f:68:80:71:ab:3d:c0:61:de:f2:bf:29:45:f2:
                    4f:29:cb:c3:f0:59:50:d4:37:3c:7d:2e:01:3c:ac:
                    f6:02:94:06:f3:23:a6:aa:47:66:d4:32:44:0e:4f:
                    c9:53:ff:ef:c5:f1:f3:4a:09:80:e3:46:78:f8:3e:
                    8c:87:60:b6:8e:e9:b6:00:69:90:83:43:73:bb:fb:
                    de:04:8e:9e:2a:dd:12:5a:a6:23:d5:c3:49:97:b2:
                    b6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8A:FC:8F:FE:E9:FF:0B:B5:18:F6:88:D3:B9:04:8C:97:D9:17:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/3142ff37-0d80-3fda-bfa7-23a560c639d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.158.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:26:a4:d0:25:b6:a7:a6:c2:f2:4a:b2:c4:d8:16:4a:fd:12:
         bb:88:23:b9:83:97:a4:f9:90:92:7a:ec:64:cf:7f:c8:f7:5e:
         59:03:14:83:26:bb:2c:ff:d3:15:da:90:c2:6a:a8:54:27:a6:
         cf:28:6b:1d:1d:cc:3d:a2:4a:7d:73:78:da:1e:61:3a:2c:9c:
         e1:8a:83:d4:4f:b5:38:17:b8:48:15:b5:ae:be:b0:4a:c4:84:
         f0:1d:4a:02:3f:d2:98:eb:24:65:77:e6:91:a8:e2:f1:a3:37:
         6a:49:85:40:41:13:d4:33:1e:e6:86:0e:ec:15:f7:3c:2f:d2:
         46:ba:f6:22:66:d8:a0:a4:c8:9c:8a:55:af:1b:3e:0a:08:65:
         8b:ee:dc:03:61:23:1c:eb:21:d6:5b:92:78:c8:34:e5:33:4b:
         d8:c8:1d:f8:fd:4c:73:d6:21:ba:60:5c:a6:3a:fd:59:25:c0:
         15:bc:00:6f:e8:92:da:07:6e:c1:49:71:ac:0a:70:28:1b:c8:
         5a:21:cc:b5:e1:6e:b7:8a:64:8e:dd:ec:4e:44:50:d3:68:39:
         58:0b:7e:46:ba:5a:2d:eb:4b:03:4f:d3:37:93:89:87:cf:d5:
         2a:e8:02:c8:3d:48:3f:85:93:25:7d:1d:6c:9f:ef:14:d1:e1:
         b6:62:ee:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:34:39 2025 by rpki-client