Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/f73fce6c-36be-32ce-a7c5-47174ce97ee2.roa
File:                     f73fce6c-36be-32ce-a7c5-47174ce97ee2.roa (raw, json)
Hash identifier:          juMTe0KAizjIDi8p02VsiN0LZVZENygco5AheSKCMpA=
Subject key identifier:   4E:85:A6:E5:25:AB:DA:B7:AF:0F:20:A6:37:1D:0E:3C:FA:68:81:2A
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F43285848090FBE0597FC7C44780E2000
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/f73fce6c-36be-32ce-a7c5-47174ce97ee2.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     55002
IP address blocks:        216.68.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:be:05:97:fc:7c:44:78:0e:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=7628033c-18fa-4bd3-b7e6-99a0ae61fbcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:21:93:35:04:b2:9e:25:07:ca:8c:1c:63:e4:
                    8c:8b:21:34:4f:60:99:23:ab:69:4a:bb:90:ed:4c:
                    00:5d:d9:1d:9c:17:97:e4:3a:6a:33:79:55:3d:ae:
                    0b:6d:93:40:56:0d:2d:a0:1a:15:fd:ea:a3:e4:2e:
                    7d:76:6a:c6:55:c8:2c:21:0c:80:f7:5d:c1:6b:00:
                    09:39:1b:c4:04:cd:8c:6e:3a:60:30:75:e8:97:85:
                    72:09:bf:55:b3:a7:59:98:de:2a:02:81:94:7f:34:
                    55:e0:c2:4e:4a:e0:7a:0e:7a:76:90:b8:fa:86:31:
                    65:a1:11:7d:c2:95:f7:2f:56:fe:76:fe:50:32:f5:
                    5a:a4:04:5d:bf:49:2a:c9:39:6a:06:8c:5a:34:da:
                    11:fb:5a:1f:88:bc:3e:06:d9:96:1f:d6:5a:71:a9:
                    33:45:cb:5c:5e:58:f6:4a:f5:c8:83:fe:3c:72:80:
                    a6:3c:17:6a:3f:7c:5a:69:b8:ec:67:fc:cb:3e:4e:
                    91:4b:3b:aa:f9:88:66:38:69:a3:f3:e5:d2:17:cf:
                    dc:67:a3:ee:85:76:e2:a7:89:5b:50:52:bc:99:97:
                    0e:c2:16:3e:31:21:6c:eb:40:27:72:cb:1a:15:9e:
                    3b:72:01:ee:16:3a:b1:d8:02:e0:ce:f0:33:3a:6e:
                    f7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:85:A6:E5:25:AB:DA:B7:AF:0F:20:A6:37:1D:0E:3C:FA:68:81:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/f73fce6c-36be-32ce-a7c5-47174ce97ee2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.68.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:0d:fa:22:34:b7:80:9a:69:56:33:87:98:6b:0c:04:ce:60:
         12:4e:a1:dc:db:06:dc:f5:81:fd:70:ae:61:14:b5:68:72:bf:
         fd:68:1f:6d:39:7e:6d:5a:e7:42:f1:ce:37:60:d2:6f:7e:0b:
         d0:99:88:b9:3b:a1:bd:36:aa:1b:bb:93:4f:c0:c2:84:45:5c:
         50:75:84:c3:fd:f9:c3:40:30:4a:a1:23:19:fc:86:db:35:83:
         47:15:43:b2:ef:4b:70:a6:3b:19:8c:41:71:1c:d5:44:a0:36:
         3a:6f:71:53:c5:6e:8e:5d:a4:b9:d2:fe:02:c0:ff:49:ad:18:
         5f:89:17:13:40:db:4a:8f:cd:e8:ab:68:0a:e9:d8:44:6c:3e:
         bf:2e:1b:ee:5d:6b:4c:5a:91:e6:13:ea:95:57:30:5d:72:21:
         fc:56:fc:23:a1:7e:df:cd:fc:5c:ad:01:a7:92:37:e4:56:e6:
         fa:7a:d5:6e:5c:d0:31:49:a3:3e:df:49:fb:dd:d9:77:34:a4:
         87:7f:aa:5a:e5:2e:34:25:1c:19:f0:7a:9f:c9:d3:aa:9a:8e:
         ef:06:7e:66:94:6b:ea:4e:49:7f:20:a6:73:b9:dd:75:08:98:
         0c:f8:bb:c1:fe:7e:35:7e:db:e0:42:10:10:20:6f:99:a5:c0:
         88:97:04:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:35 2025 by rpki-client