Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e293468d-cdac-3962-8d4c-0e8fb1431a70.roa
File:                     e293468d-cdac-3962-8d4c-0e8fb1431a70.roa (raw, json)
Hash identifier:          Q09qcRmZrdWxWBPqWopOrWO+FzlEmfngFnIkufiCQCA=
Subject key identifier:   F6:BE:E4:2F:E7:52:21:AC:3A:B7:ED:05:1A:50:1F:64:B7:DA:14:4B
Certificate issuer:       /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Certificate serial:       010D0C9F43285848D6410FC9C65C8C3D2570C718
Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e293468d-cdac-3962-8d4c-0e8fb1431a70.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     397422
IP address blocks:        67.59.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:0f:c9:c6:5c:8c:3d:25:70:c7:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=842df186-6ab2-4bd0-bc30-9bcc09ba0937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:06:59:55:a0:c7:67:d4:f1:e2:fc:1d:97:b3:
                    05:57:fd:23:8a:c8:3b:6f:2f:07:01:06:ad:9c:10:
                    16:9a:e5:39:0d:e7:39:f7:01:af:57:07:d0:2c:3c:
                    13:d7:49:4e:35:d7:69:96:24:d4:48:b5:f8:da:43:
                    1c:78:3a:cf:86:ac:51:74:fc:f0:59:1e:2d:3e:73:
                    89:1b:fe:bd:4d:39:46:c5:53:38:97:16:7a:ba:b0:
                    93:3e:da:25:e0:37:8a:88:87:98:9d:fa:27:00:1e:
                    c4:60:f8:4e:d9:dd:d5:4a:b6:48:c1:65:99:e4:43:
                    b8:b5:0e:cd:69:ac:24:b5:d7:87:00:a3:d4:ab:24:
                    0c:b5:a0:7f:f4:2c:32:ab:8b:51:40:9b:37:d0:d4:
                    6a:af:ad:f2:75:f7:fa:46:52:c7:48:f0:00:ce:ab:
                    44:d8:73:7c:83:24:0b:0f:2c:18:13:13:cc:86:b6:
                    e0:b6:87:64:0d:c9:4a:4d:a3:11:17:ea:27:ba:f5:
                    a0:f5:10:1b:fd:5e:c5:6d:5d:40:c3:f2:1a:c7:f5:
                    ce:34:02:57:04:de:84:dc:bd:3d:2f:a2:fe:93:d0:
                    13:7d:5b:49:50:8d:8b:00:f6:59:83:60:a7:a1:4f:
                    bc:cf:18:59:92:54:79:64:2f:35:df:22:cc:ef:3c:
                    04:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BE:E4:2F:E7:52:21:AC:3A:B7:ED:05:1A:50:1F:64:B7:DA:14:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e293468d-cdac-3962-8d4c-0e8fb1431a70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl

            X509v3 Authority Key Identifier:
                keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.59.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:d3:ef:14:45:d3:bd:24:51:72:66:61:a8:eb:d9:bb:ba:f0:
         c7:26:e6:f6:fb:3e:a2:99:a3:fc:ee:c9:b0:96:7c:ba:ab:e3:
         f9:4a:f8:46:77:50:81:11:4d:91:8c:9a:4f:62:e3:a5:46:35:
         14:9f:9e:ef:cf:d1:09:d2:e9:4c:7b:83:d5:9f:1a:38:a0:c8:
         9e:72:53:d9:58:34:5e:3e:ff:bd:ff:dc:d9:df:86:fb:5c:7f:
         56:cb:59:a7:f4:8c:1f:57:cb:2e:be:af:21:46:93:22:17:03:
         a7:00:d1:59:96:d1:54:1d:62:44:da:4d:48:bb:07:ed:57:6c:
         4b:8e:77:59:f3:57:e8:62:ea:16:ec:6a:6b:fd:18:ef:e0:a7:
         80:ec:a3:dc:a2:bf:00:3b:91:4d:87:54:43:cf:66:36:c8:a3:
         7e:52:1b:6d:5f:c1:44:61:38:31:6a:3f:9a:4b:98:ba:df:e1:
         6a:da:3b:01:aa:a6:0f:74:6f:2d:86:58:bb:1c:63:49:d5:41:
         19:2d:eb:de:1c:47:a9:38:e9:c0:82:62:b9:63:20:70:28:ff:
         e4:fe:6d:ad:09:8f:e5:6a:db:b2:0c:a3:99:e1:13:5f:f2:02:
         f4:77:c5:15:59:5d:13:5e:03:cf:74:c0:ac:98:8c:60:98:79:
         1f:56:82:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:56:16 2025 by rpki-client