Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d16cf530-41b5-35ef-abee-03b80e61e31b.roa
File:                     d16cf530-41b5-35ef-abee-03b80e61e31b.roa (raw, json)
Hash identifier:          8JErs6XH1AfahDZGYK1/M0Q3WZn/p+EFbxp2oeGh1dY=
Subject key identifier:   E0:C4:E1:BC:2F:9B:F6:3B:39:66:F7:AA:13:8A:06:13:7A:FA:2B:23
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584957F4187397EA667B0A55CBE0
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d16cf530-41b5-35ef-abee-03b80e61e31b.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     11232
IP address blocks:        24.111.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:18:73:97:ea:66:7b:0a:55:cb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=d9699676-4792-4ef1-9e16-5c495e50f6f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d9:e0:82:4a:b6:79:91:30:4a:18:71:79:a8:
                    b4:89:e7:13:7b:9e:28:62:70:6e:4e:3e:7b:ed:7e:
                    7f:66:80:63:aa:a6:d4:42:cf:aa:be:75:99:23:21:
                    06:24:d1:d9:f1:fd:af:e9:b8:53:07:9f:34:e6:f4:
                    df:9b:ab:0e:ec:01:e0:04:82:7d:64:8b:bb:29:a8:
                    ae:b2:51:84:5b:2b:c3:28:4e:b3:61:91:89:b5:e7:
                    c4:bd:c0:6b:db:9a:70:29:01:e5:57:15:af:dc:41:
                    87:ae:fd:a5:3e:c8:28:07:67:87:16:d7:c7:3b:13:
                    0b:6c:a5:22:1b:e5:b7:0c:4e:6d:ac:f0:4e:fb:10:
                    61:be:13:d7:8d:d0:62:ef:c8:de:d7:88:6b:76:04:
                    b2:44:b5:ef:34:44:e8:58:eb:51:0b:4f:ec:79:ce:
                    e8:50:63:98:83:db:e2:f6:66:16:f7:30:67:b1:d9:
                    b8:7a:a3:0e:73:ad:86:73:da:08:7e:c8:75:43:cc:
                    ea:29:33:0d:32:97:f8:ba:09:c4:43:75:51:be:00:
                    7c:7d:7e:32:0a:fd:e4:f1:61:b2:a3:2c:5a:81:3c:
                    d7:ae:74:db:d5:e1:c2:93:fc:af:86:67:91:89:e9:
                    0d:4c:00:c1:bd:d3:3f:43:45:7a:00:a1:1e:4a:bf:
                    93:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C4:E1:BC:2F:9B:F6:3B:39:66:F7:AA:13:8A:06:13:7A:FA:2B:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d16cf530-41b5-35ef-abee-03b80e61e31b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.111.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:8e:5e:a7:a3:4d:d1:67:d0:db:07:f6:8c:2e:51:a3:d8:e7:
         5e:13:f5:3f:fa:81:2a:e1:1e:f0:52:e9:13:11:fe:87:ec:c4:
         98:76:a9:0c:39:0b:0b:62:0d:70:06:1f:80:c2:67:f1:9d:e1:
         87:9c:4a:30:aa:c1:6f:6a:d0:6e:24:d5:fc:58:12:cd:66:3c:
         6b:12:d3:55:d3:ee:77:cb:68:70:53:c1:f3:f9:68:1f:b0:61:
         9d:7f:7d:45:1b:ea:3c:f3:1f:73:5c:39:df:a4:e4:7b:cb:2c:
         88:0b:12:57:8f:23:ea:92:e4:94:dd:a2:c1:63:3b:96:8a:b5:
         43:50:f9:9d:78:19:58:a0:41:ad:72:90:0e:d8:c9:a6:71:32:
         5a:b0:d2:4d:58:c3:c3:5e:7b:1e:bb:04:32:1f:12:fc:c1:0e:
         46:f3:99:b2:b9:ce:ac:51:d5:52:9e:bf:6a:a3:ee:92:1a:08:
         f6:e2:b6:08:18:15:7a:ae:7f:92:f5:8d:ab:97:61:10:bd:5b:
         35:10:57:95:20:d5:ee:0b:8c:0e:64:2a:5c:75:c2:2c:65:d9:
         52:5a:5d:40:86:77:a3:91:4a:59:64:b8:2e:c2:73:52:c9:72:
         4c:31:68:4b:9a:98:8a:be:8f:c8:86:67:2f:ec:0e:ff:1a:c6:
         33:ff:e9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:26:05 2025 by rpki-client