Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3b03fa34-49cd-368b-8ac7-eadebd73f8d9.roa
File:                     3b03fa34-49cd-368b-8ac7-eadebd73f8d9.roa (raw, json)
Hash identifier:          sdjs+sizcY25wnsdjOK802n8gjnLAbG19qo9MVOlBMk=
Subject key identifier:   4B:E0:20:6E:6D:C5:52:63:A7:5D:1D:2D:65:4F:1A:FF:CE:46:B9:59
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584A2C20286984278162B79294C0
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3b03fa34-49cd-368b-8ac7-eadebd73f8d9.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     11232
IP address blocks:        24.220.229.144/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:28:69:84:27:81:62:b7:92:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=5fe67732-3f50-446e-9922-6b6a6866ab57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9c:5a:a4:e9:a6:3e:7d:83:8b:29:59:1b:b0:
                    24:f5:e8:2b:4a:4d:c5:03:9b:e3:4b:25:48:b2:64:
                    db:bf:32:2f:7b:2e:8c:31:1f:e6:6a:66:51:8e:fd:
                    f5:54:98:b9:26:02:09:db:2c:01:fb:46:65:de:81:
                    05:13:7d:05:54:23:dc:18:e2:c9:ed:43:19:c0:2b:
                    57:34:55:2e:0a:13:11:26:cd:06:4f:44:b3:81:05:
                    e7:a9:38:07:0e:99:95:63:ad:b2:0a:c4:ce:6e:a7:
                    83:b7:6d:0c:83:4a:4b:be:1a:34:a0:44:a4:7a:96:
                    c2:cb:1d:09:6b:91:7e:28:65:ac:1e:a6:d2:12:5a:
                    09:04:b6:18:0f:aa:54:a5:ed:f1:0c:e4:ed:2c:a3:
                    70:19:1b:50:bf:66:94:ff:e7:99:ea:a4:1f:aa:a3:
                    d7:d2:d8:2e:ad:a8:34:13:26:c0:66:97:f3:44:47:
                    b5:2c:42:04:47:74:92:3f:ac:8c:f0:89:64:aa:22:
                    d6:9c:dc:4c:a0:ed:4f:70:9a:b9:bc:75:c4:bd:19:
                    2f:96:8e:4e:74:f4:84:57:7b:1f:09:51:aa:8c:3e:
                    af:21:2d:6d:00:0c:af:85:12:31:ea:a5:18:6e:63:
                    13:8c:1f:2a:32:bb:23:b9:32:75:17:44:62:6c:b2:
                    25:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E0:20:6E:6D:C5:52:63:A7:5D:1D:2D:65:4F:1A:FF:CE:46:B9:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3b03fa34-49cd-368b-8ac7-eadebd73f8d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.220.229.144/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:67:b0:e4:cb:bf:f8:25:1c:00:c6:af:a1:99:f9:11:1b:cc:
         33:1b:c7:58:cc:83:f0:55:31:47:82:29:25:d7:b5:25:f9:d7:
         64:57:f4:6c:c0:a8:45:a2:39:f1:63:14:5d:f0:29:cf:ab:59:
         4b:a6:82:0d:a2:76:d8:da:de:c2:c9:e2:fb:ed:1f:a1:db:1e:
         64:c2:14:d9:8d:0c:f9:7e:b7:95:77:f2:12:e3:ee:ed:c0:94:
         eb:d4:f5:16:a2:5d:c9:60:5d:86:e9:3d:c1:f0:ab:9a:ad:8b:
         23:8a:23:09:47:2a:f2:08:fd:6c:14:75:b1:fc:a5:cc:93:f5:
         40:6d:c3:86:5c:ef:1b:fd:60:2f:1a:99:d6:f6:46:39:ab:73:
         e5:0e:33:38:06:56:40:d1:d1:d1:44:2f:75:af:41:f3:69:83:
         11:5c:07:01:2a:c5:3b:24:b6:c2:b6:8a:58:63:72:10:dd:a2:
         13:9e:c2:52:09:d7:c4:8b:47:2c:39:4e:9b:52:1d:15:ca:a0:
         43:32:11:cc:9b:ee:4a:b1:24:27:6f:dd:75:3d:1b:e6:42:2a:
         65:b9:f8:12:2a:83:c3:65:af:2b:57:c7:4a:2d:8b:51:06:4a:
         91:2b:52:f6:34:b5:33:fb:de:83:b7:d1:2c:cb:c2:5d:b6:28:
         5a:2b:eb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:37:11 2025 by rpki-client