Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f26ebd92-94db-381a-b3b4-1fba365b2d75.roa
File:                     f26ebd92-94db-381a-b3b4-1fba365b2d75.roa (raw, json)
Hash identifier:          O69liz8IMGQgzxAGWwZl09a5sAxw/K36Snja7sQHUrw=
Subject key identifier:   F6:97:23:A9:66:24:42:36:B0:58:25:EC:34:92:14:AE:2B:7B:0C:AA
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848E16BCB2A94600EF65D5F8600
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f26ebd92-94db-381a-b3b4-1fba365b2d75.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     396606
IP address blocks:        216.87.145.53/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:cb:2a:94:60:0e:f6:5d:5f:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=72068266-0805-48d9-af63-3b886e8c34fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:73:4b:af:ae:61:93:cf:ed:f0:4b:74:7e:f9:
                    60:42:4f:cb:dc:a6:1a:23:1c:e5:be:1a:3d:c1:23:
                    46:9d:a0:19:bb:cf:11:cc:1b:f9:f5:bb:3c:da:5e:
                    15:c8:8f:9b:94:f2:ef:2e:fd:72:71:5c:d1:c4:87:
                    02:f8:ff:32:97:ba:fc:13:c5:97:2b:fc:ec:31:ff:
                    16:66:31:47:e0:85:d2:d2:17:fc:b7:cf:42:6d:de:
                    30:6b:09:f5:50:74:5c:cd:eb:df:f2:86:e7:8d:0f:
                    4c:07:8f:d8:f5:24:9f:1d:6f:10:57:61:9c:d1:8c:
                    d0:79:27:fc:7d:3f:45:87:01:9d:64:91:f7:1e:fb:
                    7f:f2:ae:0a:33:ea:77:3d:18:d3:f7:21:26:88:bf:
                    50:b0:27:ef:48:48:f0:d9:54:ff:33:4f:8d:30:15:
                    56:55:42:74:c1:1c:8f:f7:f7:8e:7b:e6:40:fd:31:
                    e6:99:c9:a5:f7:6f:d7:ea:2b:f0:6e:8d:4b:33:af:
                    bf:c1:1e:57:6c:a2:7c:71:dc:c9:ab:d3:c8:ee:55:
                    25:b5:3a:99:44:22:01:39:9e:78:39:c1:ed:a8:1f:
                    a3:45:dd:0d:93:cd:33:3a:77:2f:75:06:9b:42:33:
                    c7:e2:12:f6:e1:1a:c0:ef:21:8c:d5:5b:27:10:81:
                    83:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:97:23:A9:66:24:42:36:B0:58:25:EC:34:92:14:AE:2B:7B:0C:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f26ebd92-94db-381a-b3b4-1fba365b2d75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:bc:03:1c:b7:75:a5:e7:cb:c7:c2:70:37:3f:80:4e:28:89:
         a8:9f:4c:ed:f1:2d:a3:79:7f:25:85:96:9d:9a:36:16:b8:92:
         96:76:d9:bd:ee:4c:cc:d8:88:0e:62:02:fa:43:f2:f6:5d:76:
         e9:5d:90:fe:22:2e:d9:fe:cb:41:60:ca:4b:bd:53:c5:13:3b:
         14:01:76:cf:25:dc:e7:7c:f8:dc:be:84:f0:0b:b1:7f:26:4a:
         ab:aa:72:c4:0c:c5:8b:6f:67:09:3e:ef:3a:35:73:4e:48:8b:
         f8:60:1b:54:52:5c:04:2f:30:61:2a:a5:d8:a2:43:9e:34:c6:
         4a:34:00:24:ab:4c:f8:5c:9d:73:77:76:78:39:7a:ed:0d:e4:
         f3:ec:38:72:bb:3d:d4:cc:53:e4:34:49:18:98:91:dd:37:d5:
         2d:78:a2:5e:77:8a:b4:27:8d:fb:3d:24:c5:68:3c:7c:43:82:
         74:04:57:e6:42:2f:50:8f:95:fe:09:0c:7d:4d:92:db:c9:f5:
         2e:86:dc:07:b6:50:93:85:9f:77:60:75:c8:c6:d9:10:01:e4:
         8d:e0:4e:71:9c:e5:0f:01:f9:75:ea:92:8e:37:15:03:9b:ab:
         ac:aa:14:80:b7:76:64:f4:4b:16:d2:36:49:db:da:9d:14:3f:
         aa:91:71:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:07:26 2025 by rpki-client