Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/3031be04-c9ee-3fa9-9063-9c6d4e1c9d62.roa
File:                     3031be04-c9ee-3fa9-9063-9c6d4e1c9d62.roa (raw, json)
Hash identifier:          EgBdAzQnXuGyhCTRi271WpfZmEZK4gG5EVCUxMebJ4U=
Subject key identifier:   20:34:C4:A8:EC:4E:7F:F7:4F:87:94:21:32:95:D9:76:CA:BE:3D:E1
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858483B50079342F039E00EBBC640
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/3031be04-c9ee-3fa9-9063-9c6d4e1c9d62.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     15290
IP address blocks:        216.13.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:07:93:42:f0:39:e0:0e:bb:c6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=9bd4ca59-4d7c-4697-8b74-3d3aa1595f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:37:eb:4a:8a:a5:47:34:32:77:4f:6f:7e:88:
                    d8:45:c7:e3:25:61:40:44:83:72:2c:75:0e:1b:3d:
                    b6:97:82:1f:22:50:f7:bb:2b:0d:0b:cf:64:bf:ba:
                    01:45:08:41:31:20:36:b6:fb:6e:5c:8b:d1:1e:7f:
                    d3:23:cf:5b:35:7c:f8:08:8d:25:b3:e8:08:ce:96:
                    2d:34:09:2b:c1:d1:0a:28:ba:6d:6a:af:34:35:85:
                    7b:98:6b:f8:22:1e:9f:8d:cf:45:de:fd:7f:0a:1d:
                    b6:1b:c5:d6:85:c0:6b:09:a7:f3:50:e0:e7:a5:f7:
                    34:2f:39:a7:9e:0a:ff:71:15:b5:15:7d:5a:0a:fb:
                    7f:d5:61:91:43:85:e4:04:ac:ff:5b:5d:48:a2:ce:
                    77:45:a1:1a:f8:42:bd:75:81:1b:97:a0:6d:4e:71:
                    fa:52:dc:cf:21:61:53:9c:e2:27:27:cd:56:e7:7a:
                    80:75:56:f9:55:69:c9:c3:e0:31:05:70:32:dd:21:
                    73:e7:2a:ac:2d:80:e8:b9:b6:c3:6e:bc:b6:d9:f8:
                    3f:5b:07:22:b1:f5:c4:54:a5:28:4d:4d:bf:1b:1f:
                    75:d4:f3:f5:9b:9d:cf:4e:4d:93:f2:90:35:d6:64:
                    ee:eb:87:51:67:2c:00:32:a9:4b:2d:be:b9:4a:4f:
                    9e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:34:C4:A8:EC:4E:7F:F7:4F:87:94:21:32:95:D9:76:CA:BE:3D:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/3031be04-c9ee-3fa9-9063-9c6d4e1c9d62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.13.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:d8:df:ac:41:d0:af:2f:60:de:ac:27:bf:b9:8d:66:87:74:
         d5:2d:b7:b4:3f:76:0d:e3:4e:ab:42:8a:f4:9c:92:43:24:1b:
         7a:64:b0:f0:2e:f4:25:27:0e:dd:00:f7:3e:ad:32:56:f4:b2:
         18:9c:83:8f:2a:81:d7:7e:99:64:11:a1:37:5d:2d:24:29:d6:
         aa:06:75:ed:97:4c:f8:e1:d8:de:cf:b3:4f:b9:d9:ed:fc:3a:
         bf:6f:b7:bc:a8:d7:c3:03:2c:9d:a5:32:92:bf:b5:81:63:9c:
         8a:78:3a:91:3f:6d:31:79:62:40:21:0e:ea:0e:9e:b1:a1:92:
         fc:c6:da:a2:33:9b:c7:8d:c6:9b:f0:0b:84:ed:be:ee:97:04:
         9d:26:0e:22:8a:95:15:8e:4b:12:36:04:97:18:84:bb:dd:62:
         88:91:14:43:90:40:05:f6:ab:d5:a5:29:36:68:43:1b:bb:b8:
         4d:ad:36:82:68:82:16:01:e0:ef:c5:08:7f:23:28:3b:3c:f6:
         eb:c1:77:64:ab:72:c4:93:a5:36:1e:91:b9:85:f7:65:5b:3e:
         44:03:55:7c:5c:b2:72:20:91:20:15:43:61:af:4b:00:8b:89:
         ea:e5:02:61:f4:f5:14:ba:b8:75:8e:2b:a9:f9:8f:05:b0:4f:
         5c:fb:df:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:35 2025 by rpki-client