Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/d2611ab3-092b-36f3-a9b3-f89c07a1cf5b.roa
File:                     d2611ab3-092b-36f3-a9b3-f89c07a1cf5b.roa (raw, json)
Hash identifier:          Bpfe6NmbW+B+A3H6SdYq54GXEfXXR8avS2ujCSJ6B9U=
Subject key identifier:   79:03:C2:2E:27:FD:09:06:08:44:B0:2B:FF:6F:30:E5:0E:A4:0D:39
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584961B99F9D1CD005165FBA1140
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/d2611ab3-092b-36f3-a9b3-f89c07a1cf5b.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     12083
IP address blocks:        24.35.16.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:9f:9d:1c:d0:05:16:5f:ba:11:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=00656137-4939-4e82-bde0-699d737bbfb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9d:ea:6b:5b:61:23:07:27:3c:43:ff:62:29:
                    8b:c9:c5:8d:a7:2a:7e:3e:4e:2e:b6:fa:59:fb:a7:
                    b5:65:e6:ad:51:89:f6:82:60:53:47:89:35:7a:77:
                    5e:43:42:93:55:30:bb:77:39:18:88:21:06:af:ad:
                    a6:71:d7:3f:35:21:f0:05:09:ea:7e:d0:69:e6:17:
                    a0:e2:1e:19:40:23:8b:38:e7:26:14:4d:e2:7d:27:
                    80:07:d8:4d:12:76:c6:cf:b3:ee:cb:15:ac:24:77:
                    65:d2:d6:b4:64:51:b7:1e:80:c8:08:6f:e3:b6:81:
                    d1:30:92:44:58:4f:c0:41:d8:c0:e4:2d:3b:70:f4:
                    64:c0:02:77:b4:ad:f3:46:4c:08:5c:87:56:d0:be:
                    8c:d0:04:a2:d5:d6:4a:fe:06:dc:cd:8d:62:3d:6d:
                    84:33:19:7b:8d:0c:c7:e3:66:86:75:88:64:d5:05:
                    4f:71:97:f9:65:67:dc:6e:d6:ea:48:bf:ec:36:c9:
                    cc:7f:dd:08:a4:35:43:cb:11:1b:db:ed:c2:d8:d2:
                    08:54:3a:7a:ae:3f:d8:6b:96:e8:64:18:13:77:33:
                    72:22:56:19:2d:3a:51:05:49:03:01:8a:7d:95:7d:
                    6d:ed:46:c4:e8:b7:a4:f4:d1:5a:60:55:f5:47:5e:
                    f0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:03:C2:2E:27:FD:09:06:08:44:B0:2B:FF:6F:30:E5:0E:A4:0D:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/d2611ab3-092b-36f3-a9b3-f89c07a1cf5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.35.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:1e:32:de:f0:c5:66:59:13:7d:92:73:fc:af:0f:bc:bf:c9:
         60:a9:53:3e:fd:b1:46:74:10:88:22:10:05:ba:f0:f7:5e:ae:
         c9:90:19:ef:d2:28:ba:39:9a:0b:91:ab:fe:2d:34:d1:9a:6e:
         02:b3:75:23:21:fa:ed:5d:9e:a8:bb:90:8d:23:76:bb:2b:97:
         f4:be:b7:09:4c:9a:79:d0:af:c8:f7:80:e6:14:35:04:f5:d8:
         6b:ed:ae:9a:96:0c:2c:9a:ce:ae:9e:29:a0:be:75:43:8c:80:
         62:73:5d:16:8f:ff:bd:04:97:a0:b9:bd:43:de:df:07:54:09:
         a7:e9:0e:29:6a:eb:0a:51:bc:f8:85:32:31:b3:b8:88:b9:f2:
         2b:fd:51:0e:35:27:7c:0e:19:ec:f7:62:c6:d0:a6:7b:44:a8:
         97:89:d1:9b:fd:6a:18:04:2d:44:7b:65:ee:c0:60:29:dd:fa:
         25:98:27:bf:9c:d5:a7:91:32:0a:9f:0c:b3:18:01:3d:d9:24:
         62:25:f6:10:12:da:0a:ba:15:f6:34:53:10:55:a2:ba:c3:8c:
         e0:7b:84:99:8a:0e:65:1d:0c:3c:db:52:63:6b:31:b2:a9:70:
         f5:5d:f2:0c:86:6a:0e:fc:ff:c3:12:06:b1:03:d8:93:10:5b:
         cd:97:21:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:03 2025 by rpki-client