Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/d21a8978-b2d2-30a9-a39c-0b84d71329e2.roa
File:                     d21a8978-b2d2-30a9-a39c-0b84d71329e2.roa (raw, json)
Hash identifier:          IHv66B127vTZqN4MZ9zW1MNjVC8bnkaTOaGZGqRVbp4=
Subject key identifier:   E2:81:9C:71:C0:11:8F:FA:FD:DF:6D:60:40:46:4E:60:3B:EC:C3:37
Certificate issuer:       /CN=7a7abeff-feac-4cc9-9077-866f0bb1b8cc
Certificate serial:       010D0C9F43285848EE836F6CB969DC0202A78440
Authority key identifier: FB:BF:7E:3A:E5:BD:B2:6B:C2:DD:40:13:1B:AE:F1:45:BE:AC:12:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/d21a8978-b2d2-30a9-a39c-0b84d71329e2.roa
Signing time:             Wed 19 Feb 2025 06:34:06 +0000
ROA not before:           Wed 19 Feb 2025 06:34:06 +0000
ROA not after:            Tue 20 May 2025 05:34:06 +0000
asID:                     21615
IP address blocks:        24.75.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ee:83:6f:6c:b9:69:dc:02:02:a7:84:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a7abeff-feac-4cc9-9077-866f0bb1b8cc
        Validity
            Not Before: Feb 19 06:34:06 2025 GMT
            Not After : May 20 05:34:06 2025 GMT
        Subject: CN=4f4f66df-e4b6-4d6c-8b44-5094a6b2236d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d9:f2:9c:cb:e3:4c:88:d0:fd:75:73:f2:51:
                    8c:88:72:5b:ba:3e:1e:d7:2f:91:9d:bf:45:f6:7d:
                    51:9a:40:00:b2:ac:16:ba:72:e1:20:ba:c0:97:bf:
                    d4:3f:9b:8a:55:df:b7:a0:d0:51:04:ca:d8:e6:97:
                    99:78:eb:c0:c4:e5:b1:1d:c6:7d:53:08:a2:80:aa:
                    74:d9:8e:c2:2c:77:5d:92:50:39:7d:f6:44:73:a0:
                    36:82:8d:6b:9c:a3:c4:37:de:65:aa:d2:e2:a6:48:
                    fd:1f:0d:ce:90:0a:b0:1f:4e:47:28:a4:b6:db:c9:
                    a6:98:c3:3f:ee:f1:8b:52:e3:c7:d7:bd:03:c5:88:
                    91:1e:ad:e5:8f:4a:ba:d7:0d:57:ca:1f:85:aa:a2:
                    a8:02:75:93:5a:dc:fc:19:95:d4:11:8d:fb:86:51:
                    73:45:3b:ec:86:65:59:5f:63:96:90:3d:26:2e:74:
                    6f:10:6c:4e:41:6d:6b:ce:9b:3e:ce:8e:71:36:71:
                    ae:d8:62:16:f7:17:35:e1:6b:34:98:83:b2:fe:ad:
                    e8:69:5b:0d:a1:9d:07:e5:e3:13:fe:eb:c9:16:0c:
                    16:4c:26:28:8c:a8:f9:ee:23:c6:b8:1c:bb:3a:f5:
                    80:da:32:55:38:17:aa:07:7b:57:41:11:f6:23:c8:
                    7d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:81:9C:71:C0:11:8F:FA:FD:DF:6D:60:40:46:4E:60:3B:EC:C3:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/d21a8978-b2d2-30a9-a39c-0b84d71329e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.crl

            X509v3 Authority Key Identifier:
                keyid:FB:BF:7E:3A:E5:BD:B2:6B:C2:DD:40:13:1B:AE:F1:45:BE:AC:12:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.75.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:0b:c5:f8:ba:59:5f:8f:0b:5b:3b:45:f5:4c:f8:22:eb:3e:
         2c:5e:43:d0:ac:88:a7:a8:aa:83:28:b9:33:4b:ae:84:3c:97:
         46:39:d0:1b:86:30:f9:bd:91:84:3e:b6:b4:6f:99:dd:ec:c7:
         3b:ef:09:4b:15:a1:2c:fa:31:eb:bb:d7:eb:23:cc:86:1b:e5:
         57:ff:e5:29:c2:70:83:b1:c2:73:a0:73:79:23:95:99:14:3c:
         22:6f:cb:91:f5:a6:7c:0d:0c:5c:07:e0:67:16:a4:3c:48:af:
         40:37:a3:bd:ba:15:93:88:31:95:69:c4:3c:2d:2a:c4:c1:17:
         61:e3:0d:18:60:9b:9f:8b:ce:a2:80:2f:81:01:8c:aa:2f:19:
         f7:9b:55:5a:00:24:33:11:bf:28:3d:a2:84:3e:8a:d3:ca:8a:
         5c:68:04:8b:b6:8c:42:1e:d5:26:8e:4b:9b:38:95:62:fa:b2:
         2c:c1:24:cc:0e:7f:d4:fd:de:84:12:bf:9b:7e:f0:02:3c:95:
         71:66:4a:5f:39:d5:fd:2b:42:ca:50:5a:6c:e7:d5:50:c8:a3:
         f5:4b:01:45:e5:9e:d2:2d:4d:cd:4c:84:b3:c3:01:80:b9:5d:
         04:dd:91:ec:66:12:db:10:e1:8f:a5:ef:b0:cc:fa:3b:bc:1f:
         9e:ee:fc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:40:46 2025 by rpki-client