Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2c998f78-e91f-34b3-b1fb-62f532bbc284.roa
File:                     2c998f78-e91f-34b3-b1fb-62f532bbc284.roa (raw, json)
Hash identifier:          XNMoSnbytCrXM20EptW2XvdHJkCRFqESdLVIf5VG50w=
Subject key identifier:   7B:EB:C6:DA:58:B1:D1:E3:EC:A2:BA:36:AC:70:27:CA:28:72:B6:23
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F43285848E9CBE9F4545FCC9B57904A00
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2c998f78-e91f-34b3-b1fb-62f532bbc284.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     30059
IP address blocks:        216.68.232.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:e9:f4:54:5f:cc:9b:57:90:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=fc5ebcde-20de-4ef9-a5ee-cb8e38fb9371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b4:3e:66:bf:61:d6:da:d2:13:70:2e:0e:02:
                    47:83:00:b8:bb:3b:64:ce:f6:4a:f6:df:ee:72:9b:
                    10:16:af:4f:71:1f:e4:43:c1:19:b8:69:d7:e9:9d:
                    d0:63:2b:c7:41:68:4b:64:b8:8e:16:7d:69:28:a5:
                    94:bd:5b:c5:62:c3:3b:06:ac:21:b7:75:66:36:0e:
                    87:3b:30:64:5e:7f:fb:69:b4:f9:08:27:aa:11:27:
                    e1:b5:1e:49:01:e2:29:e6:86:fd:48:7f:41:02:1b:
                    a9:d9:47:d0:06:7d:31:3b:31:d8:24:c4:8f:fb:e8:
                    75:06:7f:89:07:f5:2c:70:d0:8d:b8:86:9b:a4:99:
                    8e:f2:95:8d:de:70:47:10:67:f8:17:17:0c:ab:58:
                    09:c6:cf:aa:a3:d3:ef:42:ee:3f:49:d7:f4:31:f7:
                    26:53:a3:7b:e9:2d:54:50:ca:97:e6:dd:bc:3f:ca:
                    76:11:98:b2:80:d5:80:c6:8d:41:ea:a7:41:7e:e1:
                    a5:ef:73:4e:21:5a:00:0a:a7:22:80:61:a7:22:27:
                    3f:dd:cb:2c:75:b3:e7:2d:da:95:26:9a:46:40:db:
                    c7:9c:20:e7:82:67:35:91:45:61:e4:68:a3:ac:9d:
                    1e:6a:a1:0e:97:b1:fb:ce:9a:72:49:22:41:a1:5c:
                    cf:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EB:C6:DA:58:B1:D1:E3:EC:A2:BA:36:AC:70:27:CA:28:72:B6:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2c998f78-e91f-34b3-b1fb-62f532bbc284.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.68.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:07:54:95:24:cb:c2:6d:4a:8e:f5:17:a5:78:fd:92:31:e3:
         f5:33:79:9b:88:5d:d7:8f:47:3a:c7:3b:a9:1d:bc:53:63:3d:
         da:e4:ad:97:c8:55:ae:4b:b9:9b:47:d7:36:dd:ba:98:bf:90:
         a1:f1:c6:8e:d7:d0:a2:7d:16:0f:31:cf:8d:66:86:36:f7:68:
         ab:fd:b3:f8:f5:c6:bc:f5:2e:32:3e:53:49:06:8c:20:c3:77:
         7c:48:b9:e0:97:11:c4:98:0c:7f:1f:1a:30:57:81:40:8d:48:
         5d:1d:3c:c2:89:e3:07:17:a9:24:0c:7c:dc:e3:ac:b4:e4:3b:
         8b:b5:2a:ef:3c:e5:85:ea:8e:77:b3:31:f3:d8:6a:92:ea:7e:
         01:b9:33:25:fc:39:69:4c:ab:15:06:1a:1b:d0:0b:a6:a2:91:
         73:1f:60:8b:74:15:86:6c:21:92:ce:84:09:ff:27:2a:49:a6:
         be:6f:18:e9:5e:7b:3d:46:60:ea:4f:05:b9:4a:94:bb:31:f9:
         73:25:7b:d8:b7:90:c5:a2:4d:8b:a1:dd:b4:ed:56:04:4e:fb:
         89:57:a7:65:76:ef:83:e0:00:99:18:83:ee:73:0e:67:04:3f:
         0d:11:4d:c8:ba:98:66:9d:8c:ee:b6:b4:09:e4:77:56:c9:23:
         47:01:93:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:11:35 2025 by rpki-client