Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/4ea91928-cdb4-3b83-aefe-7adad22882fd.roa
File:                     4ea91928-cdb4-3b83-aefe-7adad22882fd.roa (raw, json)
Hash identifier:          tv+ROiHEN8idP+uESCqVtEy+h5u+cmQRmBg1ofMxMLs=
Subject key identifier:   59:B6:99:4D:08:28:F7:12:78:61:24:6B:DC:C6:DB:E6:2E:0C:8C:B8
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584961B99711BEEBF695FF92DE00
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/4ea91928-cdb4-3b83-aefe-7adad22882fd.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     12083
IP address blocks:        24.214.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:97:11:be:eb:f6:95:ff:92:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=a7e1cc6c-cc04-42df-9fc5-95c75053e3d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:36:77:4e:25:09:95:f6:78:4a:67:a4:53:09:
                    82:5e:e0:0a:83:7e:82:3c:97:a4:ee:68:e6:18:0f:
                    ad:82:34:2d:ca:ef:25:3a:4f:82:67:0a:ac:08:67:
                    af:ee:85:b7:4c:46:c9:0c:72:3b:aa:c2:3c:7d:3c:
                    e1:ac:61:90:86:9b:aa:c8:3a:cc:df:65:49:7f:fa:
                    ff:fc:5c:7f:e9:e9:4a:e6:5d:f2:78:c4:ce:b3:c5:
                    a9:53:ba:ea:06:e3:65:4b:cb:4e:95:77:14:ec:b9:
                    d1:da:c4:32:df:c4:e3:fc:8a:2e:18:d0:f4:37:68:
                    8b:0e:00:f3:af:2e:59:2e:1e:aa:4b:ca:32:ef:1e:
                    7a:21:bd:f6:8b:a9:35:59:48:18:f3:d4:ef:79:a4:
                    b4:c9:5d:a0:2e:1c:45:95:64:a0:ef:0e:6c:e3:3e:
                    f1:49:a7:67:96:0c:fe:48:60:b1:cb:2f:70:e7:d3:
                    2d:43:ab:51:21:84:c1:ee:e0:a9:31:27:ca:94:79:
                    58:c0:8f:1f:2d:9a:0e:87:97:b1:f1:a5:8b:bc:53:
                    7c:61:ff:a3:50:29:b0:36:e5:b1:f3:e7:72:d2:97:
                    7c:ed:dc:f6:05:8d:e4:49:36:da:42:3d:27:d0:c7:
                    6a:24:42:4e:68:63:13:d7:a3:55:17:8b:99:54:4b:
                    66:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B6:99:4D:08:28:F7:12:78:61:24:6B:DC:C6:DB:E6:2E:0C:8C:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/4ea91928-cdb4-3b83-aefe-7adad22882fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.214.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:5d:db:ef:fe:91:cb:25:59:ee:cd:32:ca:c0:69:a4:86:1e:
         87:b2:0f:53:b8:2a:5c:cc:6e:35:55:89:1c:30:43:e3:62:68:
         b9:ef:6b:39:9d:8c:a5:cb:00:ce:c5:7a:b5:5e:6c:fe:76:9e:
         28:5d:35:6e:72:0b:88:51:66:db:34:71:8a:c4:57:c3:b7:4b:
         67:b3:e4:8d:7a:90:20:4c:28:a4:62:ef:b9:ca:42:84:b7:94:
         ae:9f:f2:6a:c3:2b:10:02:b5:18:a7:c9:48:35:3f:4d:0e:c4:
         bb:42:51:be:b2:7c:89:4d:e5:7f:24:3a:40:4e:62:e3:d6:e0:
         02:cb:e1:9f:39:c6:db:64:16:b3:be:30:c3:a1:6c:0b:9c:ac:
         24:31:8d:68:a4:d9:3e:94:67:26:07:1a:f1:fb:86:59:28:20:
         9c:76:b5:74:b0:16:2a:d2:80:fb:40:6c:64:4d:65:7a:04:01:
         4b:7e:d5:da:6b:2c:78:95:8c:38:ca:8c:93:97:16:ea:95:e6:
         67:5c:37:72:95:8c:46:b4:ae:cf:d6:34:42:0f:b0:49:a4:b6:
         85:53:4c:e9:c7:4c:52:9f:e0:c2:24:ad:46:15:2d:63:7c:39:
         83:a7:ad:93:da:a4:be:37:3f:df:44:51:16:8e:e3:d4:db:ff:
         d6:e7:b8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:19 2025 by rpki-client