Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/3031be04-c9ee-3fa9-9063-9c6d4e1c9d62.roa
File:                     3031be04-c9ee-3fa9-9063-9c6d4e1c9d62.roa (raw, json)
Hash identifier:          HgeOtTKTcZeU9wqPUHg4QA9cVStiJhZGurpdOKVqnLA=
Subject key identifier:   C2:1D:80:28:43:02:AE:AE:4E:A1:CF:81:53:06:CB:78:5F:41:A6:86
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858491AA6C2B53852A3B2AE406D20
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/3031be04-c9ee-3fa9-9063-9c6d4e1c9d62.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     15290
IP address blocks:        216.13.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:c2:b5:38:52:a3:b2:ae:40:6d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=3a7492b8-febe-4430-88c2-a69d5827935d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cd:00:3d:2b:45:5c:43:4d:c9:a9:1d:42:ca:
                    10:ce:11:35:7a:0b:21:7b:94:99:81:16:46:58:a2:
                    90:fb:27:dd:53:ae:1e:e5:65:46:75:48:ae:5d:e1:
                    9a:55:61:96:d7:ca:c9:6e:ec:d8:6d:94:e6:2f:37:
                    1c:41:ab:8a:eb:83:66:d4:38:64:b1:c0:36:72:6d:
                    64:3e:08:2e:8f:29:a2:03:52:16:fe:92:19:99:ec:
                    14:da:4b:b5:eb:6d:9e:5f:4c:60:cf:be:23:c3:2e:
                    58:40:1d:a2:ea:d9:aa:fc:e9:13:2a:13:96:5c:3d:
                    b4:76:1d:b8:5e:c3:62:f8:dd:97:6b:c0:d6:7c:62:
                    cb:5f:7a:e7:ab:73:53:b2:fb:85:76:2a:51:11:24:
                    b4:02:c0:03:7e:28:49:07:77:e2:76:2f:d4:14:80:
                    e2:72:0c:fc:2e:96:64:0b:e4:21:5d:55:92:f5:09:
                    5c:c7:68:15:00:dd:68:05:83:61:1c:f4:bf:ce:52:
                    9f:3a:63:ff:50:b9:c8:89:ee:8c:e4:df:69:bc:51:
                    bd:bc:81:2f:32:d2:e1:a2:f9:07:22:74:5a:6f:01:
                    04:08:f7:b0:3d:b8:b5:e4:75:24:af:03:77:14:a2:
                    40:da:c3:2b:7d:70:f8:d6:40:8a:fc:18:37:2c:0a:
                    07:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:1D:80:28:43:02:AE:AE:4E:A1:CF:81:53:06:CB:78:5F:41:A6:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/3031be04-c9ee-3fa9-9063-9c6d4e1c9d62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.13.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:40:c8:a0:c2:aa:8c:15:51:16:28:9f:88:93:e7:87:11:2f:
         25:e1:ce:eb:b6:4f:0d:16:8c:02:5c:76:15:77:94:8d:67:97:
         78:b9:ce:ab:14:83:d5:8f:41:eb:f7:1e:0f:b7:5d:31:31:c6:
         fb:56:87:19:76:da:45:b5:c9:62:a5:da:bd:2c:dd:82:4a:a1:
         66:9e:4d:f8:96:18:5d:35:78:76:7c:d9:f6:76:70:d6:18:58:
         47:53:f9:73:5b:1b:8e:59:79:05:45:61:ae:d6:a5:8a:6b:02:
         0c:3a:3e:c3:b7:30:f4:a7:ad:72:6e:ef:6a:35:26:ae:91:a3:
         08:9f:ff:5b:96:df:25:a3:ab:cb:9b:16:d1:b4:04:db:8f:57:
         83:00:5b:45:fe:88:72:50:ba:8f:e9:3e:0d:2b:20:f6:1b:ee:
         aa:2d:c5:da:4c:f5:53:27:51:4d:0c:92:c2:3a:88:cd:74:9f:
         bd:e2:a1:9b:b8:16:70:df:3c:aa:dd:a0:11:77:a9:c7:2f:ab:
         0b:12:d8:c9:c4:6f:a3:bb:f2:b8:9b:08:64:50:e2:54:65:df:
         8f:3c:a0:ec:62:5b:57:f7:d9:87:7e:48:56:92:03:a9:c4:80:
         de:21:44:cc:94:34:5f:d3:78:4c:b7:5f:d2:06:c6:fd:fa:ae:
         6a:f8:89:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:27:34 2025 by rpki-client