Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/0ab2f64f-8c57-3852-8f47-167a711d141d.roa
File:                     0ab2f64f-8c57-3852-8f47-167a711d141d.roa (raw, json)
Hash identifier:          qa5/MaQ3gdEd4jrqtfTbi6YMDSD3xKLJYHWOkrrHHFI=
Subject key identifier:   4D:D9:0C:08:B0:B7:42:D0:F5:A3:47:AB:06:33:83:FB:48:AF:3C:C2
Certificate issuer:       /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Certificate serial:       010D0C9F43285848547035BACC8BFD27B1F0FAC0
Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/0ab2f64f-8c57-3852-8f47-167a711d141d.roa
Signing time:             Thu 26 Dec 2024 02:00:40 +0000
ROA not before:           Thu 26 Dec 2024 02:00:40 +0000
ROA not after:            Wed 26 Mar 2025 01:00:40 +0000
asID:                     58182
IP address blocks:        216.52.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:54:70:35:ba:cc:8b:fd:27:b1:f0:fa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
        Validity
            Not Before: Dec 26 02:00:40 2024 GMT
            Not After : Mar 26 01:00:40 2025 GMT
        Subject: CN=dc43f47a-6787-48f2-8dc7-39b9c7bf976f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f2:0c:28:9a:56:37:80:f1:52:df:1f:d3:26:
                    34:ca:b5:09:b7:cf:64:c3:bd:cb:a6:57:cd:ac:5e:
                    2f:ac:a4:2f:54:9c:fb:bb:83:5e:c2:d8:5a:04:d6:
                    c7:9e:60:78:e4:c5:73:15:c7:5d:b6:b1:b2:49:0e:
                    ae:0a:b9:e0:27:36:6f:a0:49:0d:f0:dc:f3:dd:08:
                    06:69:9a:9d:78:e7:06:ca:d7:6a:a3:73:4a:1e:2d:
                    82:74:2d:90:13:be:12:44:49:0c:83:4e:70:b5:4b:
                    86:fb:23:76:93:4d:4f:5a:75:6f:cd:3c:bc:32:a7:
                    cf:6f:53:af:fc:88:6c:2d:9a:55:c0:05:77:dc:5b:
                    5e:2d:1d:29:3e:ea:e2:8c:60:c6:09:6c:40:60:2e:
                    36:e8:e6:6f:a0:0d:19:e4:9c:b2:41:fc:22:f8:8a:
                    23:43:82:57:0e:14:b7:2d:53:98:fb:36:17:49:dd:
                    cc:20:a2:3b:2d:a6:14:62:e7:4b:09:1c:0e:9a:0e:
                    bc:36:45:97:8f:b3:2d:6d:40:b8:f3:b3:93:8d:9e:
                    8b:e0:26:03:d6:c7:79:f1:bf:ce:d2:86:79:7c:94:
                    d7:0d:3f:99:b0:08:26:55:b4:d8:32:da:12:0a:5b:
                    b1:ea:8b:b5:52:05:d6:0d:15:c6:f5:15:a4:92:dc:
                    47:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D9:0C:08:B0:B7:42:D0:F5:A3:47:AB:06:33:83:FB:48:AF:3C:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/0ab2f64f-8c57-3852-8f47-167a711d141d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl

            X509v3 Authority Key Identifier:
                keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.52.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:d9:b9:0f:e3:fc:2a:26:c3:c9:ce:6f:a9:20:1d:0a:d7:78:
         91:19:b1:cf:d6:ae:61:39:3a:ae:fe:dd:84:69:e6:b1:60:8e:
         59:7a:ab:54:d0:7f:21:bf:31:c9:dd:8b:6e:ea:57:11:e1:b4:
         22:98:b8:40:ff:65:60:14:04:63:a4:93:d8:45:64:2f:f0:03:
         f0:50:af:84:2f:dc:a5:9a:8c:5c:e5:ab:2e:88:f1:6d:18:32:
         c9:ba:f2:bc:1f:d5:9e:78:23:b5:b9:39:f2:bd:96:4c:7a:ec:
         9e:a9:73:08:32:88:9a:fc:40:c7:73:03:01:b5:2e:4a:ee:aa:
         89:b5:d4:53:a0:0e:19:2b:b1:80:d8:1f:eb:94:ea:0a:97:07:
         5d:85:5e:1f:11:04:bf:39:c1:e7:93:08:b1:f0:0c:42:9a:1d:
         ac:e8:99:d1:ff:93:a0:e1:1b:7a:44:d2:bb:21:d1:e5:1f:ae:
         fa:c4:2b:e3:2d:e2:d2:01:5f:27:b8:cc:9b:2f:a1:4f:e8:c8:
         62:92:38:d3:1a:8c:0d:1f:0c:b3:73:f6:d4:ab:9c:ab:77:de:
         1f:f4:ed:86:cd:1e:26:3a:39:e8:bb:32:cc:2b:fe:b2:6a:bc:
         92:ca:46:bb:58:ce:2e:57:56:60:f4:8b:fd:9a:74:db:83:cf:
         fd:53:ba:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:55 2025 by rpki-client