Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2de5309f-2941-3cb8-9d7b-3d214fc87564.roa
File:                     2de5309f-2941-3cb8-9d7b-3d214fc87564.roa (raw, json)
Hash identifier:          3m1nbJ8/XARlFtTXQJxyKjcO0ZRgLgkSHcpsq0DK7G4=
Subject key identifier:   A6:2A:A3:E5:37:71:CD:68:21:3D:E4:89:63:75:0B:BE:21:27:E0:4E
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F43285848E9CBE94DE691B6046A31E680
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2de5309f-2941-3cb8-9d7b-3d214fc87564.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     27203
IP address blocks:        216.68.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:e9:4d:e6:91:b6:04:6a:31:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=6d40fa0e-70ae-4222-abcd-16adff56911a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5b:48:d6:06:1c:1e:9e:33:ee:c1:54:93:35:
                    cb:b5:b4:3f:d2:6c:84:15:9f:a1:0b:d4:9c:d7:33:
                    6f:52:11:af:8b:9f:79:46:07:3b:a7:03:98:82:c4:
                    72:39:42:c6:b7:fb:3f:94:ff:aa:14:5f:c5:54:49:
                    c3:16:50:ec:5b:2c:c1:92:ff:2d:c2:55:9d:6c:31:
                    ed:ef:ab:86:ec:0f:29:89:cb:13:d7:a4:8c:a7:9f:
                    1a:f8:bd:53:91:32:be:b7:eb:e0:72:d4:a4:de:db:
                    99:28:32:ef:0f:14:31:c8:56:26:c8:3b:b7:d1:bc:
                    c2:fd:a5:3e:ae:47:fc:6e:50:86:f6:a9:8a:5f:7d:
                    db:71:2e:77:38:97:34:c8:2d:f6:eb:91:73:10:ed:
                    18:3e:ee:1a:ef:fc:82:f0:fa:a1:6b:d5:61:09:bd:
                    02:a7:73:86:ab:37:d6:70:6c:6e:6b:a5:ae:9b:4a:
                    a8:c1:de:97:b4:ec:8d:fe:d9:45:dd:8f:59:4d:08:
                    a4:b1:ce:db:a2:a6:73:b0:73:47:08:5a:88:35:8a:
                    fc:38:35:56:d2:1e:1a:48:2d:10:31:4d:a2:62:56:
                    5b:ef:1d:c1:a0:80:5f:0b:60:33:17:37:d1:93:53:
                    66:e7:ee:f0:51:e2:00:ba:54:32:8b:97:df:04:35:
                    f3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2A:A3:E5:37:71:CD:68:21:3D:E4:89:63:75:0B:BE:21:27:E0:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2de5309f-2941-3cb8-9d7b-3d214fc87564.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.68.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:46:0f:b0:96:99:50:5b:2c:e7:84:2d:62:e2:2b:7c:57:a8:
         28:c7:64:72:5d:ea:9a:70:a4:9a:58:88:d1:57:45:a5:3f:c4:
         bd:96:7c:68:2c:37:19:57:41:b3:33:ce:25:49:a1:27:ae:e7:
         9f:5d:03:f4:e0:f1:01:d8:42:d0:bd:00:d2:fa:8a:23:f1:34:
         96:e9:63:40:38:cb:ae:65:23:3d:ea:76:48:80:16:77:a8:f2:
         90:fe:5e:b2:53:67:e5:7a:a1:6d:57:3b:f8:4b:3f:3d:d1:b2:
         45:b6:71:fc:03:85:76:f0:aa:3c:a3:8d:20:d6:db:dd:22:ef:
         c9:de:1e:92:9a:97:e9:a8:d2:2d:9a:34:1e:db:dd:09:9d:f6:
         e8:f2:71:50:59:e8:bf:4f:f5:52:9a:94:ba:a0:8e:53:16:3b:
         16:ee:54:a2:3c:c2:37:03:8f:12:2b:41:7a:c6:6a:51:54:b6:
         f5:8f:01:ec:14:6b:dd:d7:f2:a7:f2:df:20:8d:df:66:d1:e6:
         c7:ec:54:f0:ca:05:4d:16:1e:60:75:be:89:18:3b:92:32:dd:
         bd:21:54:55:30:dd:9c:2c:37:5d:19:e8:ca:82:3a:14:6c:eb:
         af:50:b6:fd:d6:33:42:2e:3b:73:20:44:8f:3e:e8:0d:c8:b3:
         7a:b4:2c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:16:51 2025 by rpki-client