Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/956f8675-a9b9-3539-bb3b-c281d2d58d9c.roa
File:                     956f8675-a9b9-3539-bb3b-c281d2d58d9c.roa (raw, json)
Hash identifier:          Wsdh1QSe2QTGIgpt/dNZ+zcjP+rR+gY43FESMUfi0Hc=
Subject key identifier:   E6:55:14:E1:8B:6B:94:00:7E:C7:E0:C2:86:0E:BE:D9:F3:6C:95:39
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858491AA6C2FB2A8D8E2F9C9FB140
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/956f8675-a9b9-3539-bb3b-c281d2d58d9c.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     7385
IP address blocks:        216.123.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:c2:fb:2a:8d:8e:2f:9c:9f:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=b40ed7f8-3fca-4994-a5a5-7b83c7711629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9b:a8:84:c6:0a:70:3c:29:d9:27:0d:af:16:
                    79:b2:8f:4d:5f:f0:42:26:35:85:25:f3:3e:21:e2:
                    7e:70:ea:b8:db:e5:05:58:01:85:2e:e2:57:46:9f:
                    0d:2d:d7:1c:bb:93:0a:7e:79:20:4d:a1:b1:e0:25:
                    c6:f9:f2:37:b2:8f:5c:7c:48:92:b1:37:90:9b:9c:
                    c3:3c:4a:57:4e:2e:6a:bc:71:93:7d:25:ac:8f:99:
                    24:36:0e:1b:7c:3d:43:e2:bd:88:52:cc:5c:1e:10:
                    c3:22:98:e7:07:01:10:7c:a5:62:35:44:2e:60:0e:
                    d3:f9:54:5f:61:20:de:fc:c5:9d:64:34:b8:d3:8e:
                    33:47:c5:f6:e3:71:4b:34:4b:04:93:0e:c8:e2:17:
                    be:c5:a8:22:a7:12:87:ee:ba:b9:2d:1c:4e:a7:65:
                    ba:66:d2:cf:5d:e4:f1:62:a6:23:fa:d8:e4:c2:74:
                    c8:2a:cd:94:6a:f6:22:ce:dc:1f:04:5a:90:e2:91:
                    ef:5c:6c:04:dc:78:fe:30:d6:12:c3:c6:96:f7:21:
                    e8:85:e9:0c:a9:84:54:f9:77:88:48:cf:b4:5a:ae:
                    d7:b9:28:69:39:3f:6c:7b:29:70:54:1a:23:a3:d0:
                    c9:35:dd:fc:55:28:d4:ec:6f:79:ef:bd:95:54:b5:
                    d4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:55:14:E1:8B:6B:94:00:7E:C7:E0:C2:86:0E:BE:D9:F3:6C:95:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/956f8675-a9b9-3539-bb3b-c281d2d58d9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.123.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:00:97:45:72:0f:63:d2:2d:ab:c4:c4:d6:5c:e4:dd:46:e7:
         cb:21:e0:b0:5c:fc:9c:d5:eb:c6:c5:62:74:c1:3e:fd:97:1f:
         52:50:cb:69:12:1a:c7:e1:c1:e0:ab:d3:05:8b:44:a9:2e:b5:
         69:b1:f9:a3:99:71:62:80:7d:f0:dd:e6:c4:b1:30:8c:b0:28:
         0b:0c:4d:d2:39:68:cc:88:64:9b:c1:45:f4:5f:5c:ee:fe:0a:
         05:74:ca:72:99:93:09:2b:a0:1c:51:79:d0:18:87:cd:aa:d7:
         e0:d1:9b:51:64:7a:c1:f3:d6:53:d5:8a:0c:a1:65:e5:3f:7e:
         66:04:86:9d:4e:0d:09:96:8c:02:69:5e:dc:bd:40:2b:1d:8d:
         cf:60:14:cf:3b:eb:f3:1d:d7:c9:0d:ad:fa:c7:dd:57:4d:e7:
         70:6e:c6:58:2d:b2:dd:51:50:e7:aa:77:e8:fb:cd:8d:8f:87:
         ff:f6:7e:32:83:b6:60:c0:a1:e7:f6:5f:7e:8c:9c:58:4e:de:
         05:cc:c0:3d:da:4e:3b:d0:39:05:ec:93:af:1c:0e:2c:95:c7:
         e3:fc:70:68:2c:2f:af:03:3b:7c:49:53:16:6e:8c:ae:97:9d:
         26:4a:90:1c:70:15:7a:9e:8a:29:f9:6b:35:d8:78:23:69:c7:
         fd:c2:e8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:28:49 2025 by rpki-client