Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/856ab158-f365-38cc-8277-6c620bbe7d68.roa
File:                     856ab158-f365-38cc-8277-6c620bbe7d68.roa (raw, json)
Hash identifier:          vEL3jJTY4npf1POpugYAFI5SMwcsrxyxrx5JjNkPWqI=
Subject key identifier:   D1:6B:16:64:BE:35:C5:7E:73:2B:81:FD:52:21:27:35:FD:C9:AE:6D
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F43285848DD3BAFE0F4A9883D3112D520
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/856ab158-f365-38cc-8277-6c620bbe7d68.roa
Signing time:             Thu 13 Feb 2025 02:00:40 +0000
ROA not before:           Thu 13 Feb 2025 02:00:40 +0000
ROA not after:            Wed 14 May 2025 01:00:40 +0000
asID:                     16739
IP address blocks:        192.208.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:dd:3b:af:e0:f4:a9:88:3d:31:12:d5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Feb 13 02:00:40 2025 GMT
            Not After : May 14 01:00:40 2025 GMT
        Subject: CN=3c1eeb17-d8ae-4e46-8311-0b1ed474bded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:33:f7:f8:6f:3b:9c:25:32:61:2e:cc:82:69:
                    17:5f:64:81:44:aa:a4:a0:e9:dd:81:73:36:02:56:
                    0a:66:d5:e2:9c:5c:55:95:fb:80:11:98:30:4f:b5:
                    69:67:38:bb:fe:ec:07:03:e2:07:55:85:b1:b7:c1:
                    c3:6d:b5:bc:24:13:55:9b:3d:22:8e:b3:be:f1:f8:
                    df:a2:c4:e6:5a:d7:c5:b9:3d:49:ed:7b:06:5a:04:
                    bb:c2:a5:15:57:7f:66:38:fb:f3:25:b7:03:79:90:
                    57:e7:9f:b8:ed:96:ba:d4:01:67:73:f5:89:c1:bb:
                    17:23:41:82:4a:69:f7:19:80:dc:41:f7:9e:c5:67:
                    15:ae:bf:4b:d3:e0:2e:59:7f:2a:99:06:67:f7:99:
                    0d:bc:6c:a0:1a:06:e7:5b:b4:47:25:73:a4:82:26:
                    03:94:18:8f:40:cb:6f:bb:0c:b1:2b:58:cc:ab:d2:
                    c7:17:35:72:03:8f:70:c1:38:c8:71:49:47:b1:1a:
                    88:85:42:f7:24:6f:b7:ab:5b:e9:1b:27:95:98:c1:
                    15:2b:66:a8:07:d7:11:b7:70:f8:75:b2:a9:ba:ed:
                    12:9b:94:e1:04:9e:08:2c:d9:6e:a6:96:38:02:34:
                    30:99:d3:94:f2:dd:55:a1:75:61:77:b0:f1:14:09:
                    1f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:6B:16:64:BE:35:C5:7E:73:2B:81:FD:52:21:27:35:FD:C9:AE:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/856ab158-f365-38cc-8277-6c620bbe7d68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:13:7f:88:72:17:5f:15:8c:42:89:f4:c1:c6:f2:91:4f:12:
         2b:c8:96:12:d5:05:01:51:c5:66:9d:17:44:f0:36:46:e5:9a:
         22:0b:4c:32:5e:f8:7f:e3:06:69:9e:35:66:5e:bf:a6:2f:fa:
         ee:1f:3b:81:7f:a5:ea:41:14:f4:a6:f5:88:ad:bd:5b:6d:22:
         1d:d6:69:0e:a1:b4:e1:9f:fa:8d:2a:bb:7a:91:f4:fb:27:66:
         b6:99:13:2a:02:4a:bd:5c:96:86:b3:9e:2e:e7:83:d2:5d:e3:
         3e:54:76:bb:a7:c0:64:e0:a8:2c:e4:98:d9:79:a6:47:aa:e7:
         d1:55:cd:98:71:6b:32:67:9b:b1:23:43:b7:0e:1c:08:14:2d:
         18:e2:e8:ed:ac:7d:fb:2a:15:b7:26:74:1b:34:98:7f:05:5a:
         8d:c9:ac:42:fd:d1:95:67:9a:b7:44:69:e9:88:a0:27:40:ef:
         13:d0:74:31:57:a5:1e:ad:68:1f:62:9a:06:e2:56:a4:71:fc:
         fe:1b:90:27:48:b7:3a:59:cf:78:ca:42:56:b7:72:2d:48:be:
         57:bd:ee:6c:9b:55:48:fe:21:fc:3e:d3:5d:4a:1f:0f:00:d5:
         5a:a2:fc:e8:85:6e:ef:61:cc:e6:4e:96:03:a8:1e:72:cf:a9:
         09:28:3b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:06 2025 by rpki-client