Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/b7270993-b813-38f2-9ad0-be58d674f430.roa
File:                     b7270993-b813-38f2-9ad0-be58d674f430.roa (raw, json)
Hash identifier:          rgrnK4bbhLTqPZJbhTTCZpLPX+pf9+h6GcDQ84MXLuk=
Subject key identifier:   15:24:7A:C4:CC:F1:1A:04:59:97:4E:20:76:D5:42:CB:60:1B:8F:9C
Certificate issuer:       /CN=57202e8d-d671-4fe3-bfa9-605e2ca32aa5
Certificate serial:       010D0C9F4328584930DE715BC694E48CE41F50C0
Authority key identifier: 0A:70:00:4A:1A:A0:5C:A6:C4:C7:35:57:D7:4D:96:DF:DD:09:4C:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/b7270993-b813-38f2-9ad0-be58d674f430.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     7311
IP address blocks:        216.126.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:71:5b:c6:94:e4:8c:e4:1f:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57202e8d-d671-4fe3-bfa9-605e2ca32aa5
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=d5f237e0-8bc0-4ff2-a434-c693601c67ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c5:27:79:e2:6d:00:47:33:5a:6d:21:12:f5:
                    84:30:30:09:a5:b7:8a:8e:d6:dd:7d:3e:4c:46:d1:
                    a4:a5:b6:c1:b7:0f:c7:c2:c7:9b:39:a0:e6:08:eb:
                    e7:1a:0f:7a:a4:5f:76:b6:2e:bf:3a:4e:44:73:ca:
                    96:b8:eb:33:98:6c:50:9d:d2:d9:58:b0:47:67:54:
                    1b:27:13:a0:fa:79:0f:64:ee:bb:11:49:eb:64:cd:
                    49:d2:99:5b:b4:93:7d:93:72:25:8d:dc:ce:dd:bc:
                    90:c7:3c:24:b4:89:92:d2:86:02:74:69:68:9c:21:
                    f2:b0:e5:a7:7c:e3:a4:6b:ca:13:68:72:00:99:f3:
                    28:82:5a:74:4c:8a:ae:cf:eb:27:70:40:66:9e:aa:
                    83:ba:bd:b5:2b:e4:a6:2b:00:de:81:74:08:3e:35:
                    56:83:cb:04:a8:19:0f:3a:25:24:2b:2c:95:c7:1e:
                    f0:c4:bf:15:20:80:02:09:30:80:fc:91:61:44:ed:
                    fb:e9:a2:05:dc:0a:70:14:67:a6:ed:31:e6:37:23:
                    df:76:c0:3d:63:c4:2f:97:46:07:1f:3c:4a:57:5f:
                    51:01:22:35:cc:78:2d:77:df:60:c0:dc:b1:23:7d:
                    51:82:e9:e1:c4:96:41:9d:4a:8e:6e:41:30:2b:65:
                    18:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:24:7A:C4:CC:F1:1A:04:59:97:4E:20:76:D5:42:CB:60:1B:8F:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/b7270993-b813-38f2-9ad0-be58d674f430.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.crl

            X509v3 Authority Key Identifier:
                keyid:0A:70:00:4A:1A:A0:5C:A6:C4:C7:35:57:D7:4D:96:DF:DD:09:4C:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.126.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:57:5b:99:cd:0a:71:4f:45:85:03:12:66:56:ed:5c:df:ec:
         1d:ea:90:13:15:d3:0a:ef:bf:eb:bb:62:d4:a9:c2:00:b9:10:
         20:66:6d:9d:ee:ef:05:3a:5c:d5:5c:0f:84:d5:dd:ca:fb:4c:
         9b:e7:f1:7f:dd:30:3f:4b:e6:5a:56:87:8e:69:06:81:88:5f:
         8d:79:ea:0b:81:67:dd:41:09:31:c1:58:ec:0a:53:35:96:8b:
         36:18:e9:94:61:6b:bf:75:ee:95:38:25:99:40:d3:7d:0a:bc:
         05:51:02:d9:ca:9d:15:25:99:c7:ae:a4:4d:a8:5a:ff:2b:d9:
         80:7f:68:fa:a2:81:db:e1:df:3a:c2:03:13:05:0b:0f:1a:e1:
         33:ea:5a:55:ac:8f:6f:65:30:28:39:dd:7d:a8:02:8e:24:f4:
         ec:d2:b6:3b:9c:54:90:a7:90:99:e5:f6:ae:04:07:c7:90:a5:
         fc:a9:40:a3:d5:f8:41:4e:95:e0:28:19:15:19:63:72:2d:96:
         93:33:fa:25:a6:8c:d9:d0:ef:1a:f2:78:fc:0e:43:47:9c:e3:
         66:cd:d7:29:3f:d4:dd:ff:af:76:f1:1f:28:26:b6:93:db:7d:
         b6:7e:eb:93:2d:cb:7f:19:34:61:00:b6:25:e3:c6:85:30:d3:
         3c:0b:0b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 05:21:06 2025 by rpki-client