Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/7d531f9e-76a1-3265-8dbf-50528122e4ef.roa
File:                     7d531f9e-76a1-3265-8dbf-50528122e4ef.roa (raw, json)
Hash identifier:          TYXKjOwsOf+B4avzzhfgximc+j5vpArt+p/qnLjUG2A=
Subject key identifier:   28:DF:7A:0A:82:8A:49:9C:71:4B:00:E9:38:CB:36:F7:3A:86:2F:3D
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858491AA6C202E935E588FF22A100
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/7d531f9e-76a1-3265-8dbf-50528122e4ef.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     15290
IP address blocks:        216.13.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:c2:02:e9:35:e5:88:ff:22:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=7671787a-7833-406f-bf1b-2b6c5dafb637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:56:29:d3:0e:65:a1:d5:99:49:d2:04:07:43:
                    a9:ee:bc:2c:20:77:7b:3b:8b:1e:68:27:88:ae:e5:
                    e4:28:e6:09:c7:41:36:aa:02:3c:ba:7a:5b:8d:c7:
                    70:18:9d:58:eb:88:f0:07:6b:3a:99:05:c3:e0:7c:
                    6c:fe:5e:6c:06:fb:9e:46:83:ec:db:0e:43:48:1b:
                    09:91:8f:5f:58:16:3f:ed:af:89:1c:b2:2b:18:c6:
                    9c:32:94:ce:fc:81:38:a8:f3:c2:26:51:95:6c:06:
                    8a:78:31:f8:16:e8:df:05:26:05:07:2f:c7:cd:25:
                    a8:d7:8c:04:de:a4:80:4a:20:27:d7:ff:c4:b1:c9:
                    cc:42:5e:e1:73:6a:e1:df:d0:67:3d:38:2a:f3:1d:
                    67:81:da:7c:a4:35:18:4c:5d:52:f9:92:08:d6:e0:
                    06:06:80:f6:e6:b1:6b:17:cb:dd:7a:8c:d6:35:12:
                    df:3a:40:78:1a:b4:d9:a3:25:fb:3c:5b:73:61:41:
                    1a:7d:5b:d0:aa:b5:f5:4b:07:50:eb:40:a2:13:ca:
                    61:87:8a:bd:86:54:c1:62:45:f9:cc:90:93:11:d6:
                    a2:33:c9:ab:37:5b:04:2d:0d:27:ef:a2:07:77:ae:
                    d2:39:c4:82:f6:ab:9e:69:26:b3:ed:92:a3:ea:d8:
                    66:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DF:7A:0A:82:8A:49:9C:71:4B:00:E9:38:CB:36:F7:3A:86:2F:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/7d531f9e-76a1-3265-8dbf-50528122e4ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.13.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:84:e6:5e:a9:5b:43:91:7c:0d:b9:65:04:6d:5e:d7:47:d1:
         d2:4b:0b:82:b9:58:51:bf:16:7f:40:ff:09:05:5c:9a:f3:b1:
         45:a1:0a:d0:3f:f9:7a:d7:c6:9a:0e:19:fb:e3:36:ab:bb:59:
         90:1a:29:da:24:b1:d6:bc:f6:c0:e5:68:6f:a1:0c:a9:3d:ed:
         72:5a:dd:55:f5:0b:c8:a3:f6:37:c9:94:12:ff:66:d4:d0:d0:
         7e:c4:86:17:b6:c1:2b:8d:8a:d8:b0:86:43:69:fa:e5:e3:0b:
         c5:2c:11:23:13:8a:85:12:c8:02:2a:d5:ed:f0:47:af:a9:67:
         54:b5:a6:cd:af:90:d9:88:36:cd:93:6a:af:30:02:ac:d1:71:
         3b:d9:1d:eb:6a:d4:ce:81:ea:e3:58:22:25:76:5f:2a:c5:0a:
         f6:30:04:5f:cb:fc:c8:23:25:ce:8d:ff:b0:0d:ee:65:48:0d:
         df:84:3d:38:f2:3a:46:ca:7a:fd:d4:e2:f9:49:b3:1e:5d:78:
         7f:9b:fd:5f:58:8a:43:d7:ff:e5:36:d3:89:01:a5:c3:dc:49:
         ba:01:01:c5:a2:f5:a0:9d:2f:ea:99:46:3e:50:d8:35:9d:64:
         75:4e:fd:bf:9d:1e:68:ad:0c:35:5f:4e:ea:22:67:6f:5c:d8:
         af:b0:e1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:55:36 2025 by rpki-client