Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/97e022f6-a708-3b9e-a075-e35149216c0d.roa
File:                     97e022f6-a708-3b9e-a075-e35149216c0d.roa (raw, json)
Hash identifier:          1BtG8ZC+HYgs74gZ41dd2avkXWrFTieJoT+WjAuY8TU=
Subject key identifier:   07:F8:45:59:AF:CF:EB:88:DC:35:84:1F:98:FC:EA:C2:61:0E:7A:E4
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F432858490881780C80E9E79C377FA600
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/97e022f6-a708-3b9e-a075-e35149216c0d.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     7265
IP address blocks:        216.47.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:78:0c:80:e9:e7:9c:37:7f:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=eb3d810d-93e9-4be2-b6c0-813068e6a11e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fb:b4:b0:8b:25:eb:af:4f:c6:b4:a5:29:8a:
                    ad:70:ae:e3:78:fd:14:17:28:43:6a:b0:f5:84:2f:
                    31:3f:55:b9:5c:3a:bb:2f:03:e3:07:0e:66:c4:86:
                    3f:4d:2d:05:db:ab:5d:19:64:f0:df:21:69:75:d5:
                    0b:22:55:a3:ac:48:43:3a:83:04:bd:02:e4:4a:26:
                    42:d3:8f:b7:9e:7e:1e:4a:27:76:e0:4d:12:a9:5f:
                    3b:e9:69:c2:ba:ae:fc:2d:24:ef:2b:c4:46:e8:88:
                    61:19:ad:19:57:00:f1:29:69:32:43:db:8f:c4:52:
                    b4:42:a8:ab:4f:a4:f2:f2:5e:fa:b9:e9:1a:e8:15:
                    98:72:e4:aa:d9:ed:46:95:a9:65:4b:00:7d:58:1b:
                    59:28:07:ff:ef:b7:fc:15:d0:64:c3:40:99:22:4f:
                    49:6b:71:83:6f:5b:2c:7d:fd:51:17:a7:ad:ae:7c:
                    34:c1:18:f5:20:bc:5b:70:07:a4:6a:a4:05:4e:fb:
                    93:cc:db:21:f1:26:f5:c1:f0:13:e4:76:b4:1a:f4:
                    7c:58:98:7b:c5:f1:7e:9b:fb:99:d6:05:32:04:59:
                    63:75:c9:43:9c:8a:fd:4c:33:3d:f9:c6:8a:7d:6e:
                    68:23:88:28:c0:b2:0b:54:28:d0:7e:69:21:57:94:
                    1f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F8:45:59:AF:CF:EB:88:DC:35:84:1F:98:FC:EA:C2:61:0E:7A:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/97e022f6-a708-3b9e-a075-e35149216c0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.47.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:af:c9:8c:f1:dd:36:75:da:3e:46:03:3f:b5:19:3d:86:ef:
         30:12:ec:75:0d:1f:82:02:d4:88:af:e9:45:15:3c:9a:30:05:
         57:a8:a3:01:84:be:07:f2:c2:f7:1d:e3:64:3e:d3:c6:27:92:
         da:81:aa:48:54:c4:bf:72:17:1f:e8:65:de:15:d0:1e:44:8a:
         34:8e:2b:cb:d7:70:7f:e8:9b:0d:57:df:eb:57:14:cb:b1:5c:
         f4:d7:a1:27:42:31:44:0b:db:b4:df:1a:4c:d6:d0:67:76:ac:
         27:b7:7b:3d:4d:c2:08:ae:9c:aa:96:4f:3c:81:8a:3c:7b:27:
         e7:78:25:4c:ec:76:91:ed:59:39:0d:34:63:e3:02:97:4f:0a:
         c7:d6:2c:23:6c:f5:d3:b5:b4:f4:91:aa:5e:04:1b:e8:05:64:
         75:e1:39:8a:e7:87:9d:36:fd:b0:a8:d0:73:e3:d7:20:96:c8:
         9a:56:64:e1:d4:45:2f:ff:e0:31:5b:ba:76:2d:02:42:1a:a7:
         ed:33:e0:af:cf:dd:55:21:d7:b5:be:2e:84:84:ad:6c:09:37:
         1e:da:f7:f4:f9:24:a2:58:d3:6f:e1:a1:7f:87:a9:21:a9:a2:
         07:d2:8a:2b:97:1c:15:f2:5e:83:64:96:74:3b:59:ed:e6:89:
         ee:d5:a8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:13:02 2025 by rpki-client