Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c3b1050a-5a56-3bcf-9875-56f7a6cfde5f.roa
File:                     c3b1050a-5a56-3bcf-9875-56f7a6cfde5f.roa (raw, json)
Hash identifier:          KuygZNnLMAN7okNTzvAreYWAcCf7631bJTyGLrIeR0E=
Subject key identifier:   16:CC:4E:19:D4:A3:75:D1:E0:6C:E4:A5:B0:74:49:0A:18:A1:18:A8
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F432858489BA0B33A9DB303BA03E60E80
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c3b1050a-5a56-3bcf-9875-56f7a6cfde5f.roa
Signing time:             Mon 20 Jan 2025 14:00:51 +0000
ROA not before:           Mon 20 Jan 2025 14:00:51 +0000
ROA not after:            Sun 20 Apr 2025 13:00:51 +0000
asID:                     33236
IP address blocks:        216.110.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9b:a0:b3:3a:9d:b3:03:ba:03:e6:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jan 20 14:00:51 2025 GMT
            Not After : Apr 20 13:00:51 2025 GMT
        Subject: CN=50a36424-b558-47b4-a48e-71320fadc862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:46:cd:3d:d0:0f:e3:88:04:01:ba:3d:86:58:
                    02:16:e1:a1:79:f7:13:49:48:1f:68:9d:3b:06:7e:
                    3a:b1:38:61:b0:6c:b6:f9:5e:e1:a2:10:8a:4c:ae:
                    c5:2c:63:a9:e3:3e:83:a0:9c:33:ec:ba:1c:67:2f:
                    91:ff:10:da:d4:b0:dc:1d:92:5a:5b:ee:a9:d4:ef:
                    44:d3:d5:bd:90:09:49:73:ba:0b:4a:0d:92:61:d2:
                    1b:3e:50:f3:a0:cc:1d:3d:64:a9:62:72:69:f7:56:
                    87:a5:37:22:e0:40:27:b5:be:86:c8:e8:80:83:c4:
                    8a:4f:18:35:02:2d:76:49:7f:ba:4e:44:e4:e9:49:
                    eb:dc:61:70:9d:c3:dd:5d:b6:e8:49:6a:69:48:60:
                    c2:22:3f:ef:54:14:fc:f9:30:ea:25:dc:9e:22:81:
                    0a:d1:78:e1:34:07:13:6c:de:7b:fb:cc:d8:4a:d4:
                    1b:68:f5:6b:21:f0:67:9b:51:b1:8f:4a:b9:00:67:
                    d6:29:f7:5d:5b:4f:d7:bb:5b:84:6a:40:84:aa:c4:
                    2e:5b:d0:79:59:9c:cf:90:8e:d0:d9:61:fc:2c:73:
                    42:95:e6:ad:14:1d:7e:14:24:24:f7:e5:ed:c7:12:
                    d4:7c:2e:25:99:ca:af:76:07:46:ea:f7:d8:de:99:
                    6e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CC:4E:19:D4:A3:75:D1:E0:6C:E4:A5:B0:74:49:0A:18:A1:18:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c3b1050a-5a56-3bcf-9875-56f7a6cfde5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.110.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:e4:ac:da:03:a1:24:cf:07:82:c0:bd:eb:4f:0a:ca:17:1d:
         04:34:70:ed:58:3a:b1:2e:80:90:f1:ce:de:16:b9:56:8c:33:
         11:81:b5:90:bb:c0:7c:37:36:e8:81:e5:be:c9:35:b5:81:c0:
         67:8d:8b:cb:d0:56:6f:f3:27:67:cb:77:96:e5:5e:74:b8:f4:
         20:bf:9b:8f:0a:d2:2a:2d:84:04:a4:ff:b5:b9:0c:cc:c8:b3:
         9d:03:a0:45:b8:e2:a6:56:88:cf:48:54:1f:3d:aa:51:20:f7:
         02:ef:14:f3:97:18:eb:34:19:05:79:90:d9:97:95:b1:9b:b3:
         6d:e0:42:02:85:eb:6b:e9:90:86:76:ac:b4:3d:38:6b:34:c5:
         72:9e:9b:ac:46:dc:93:be:43:ef:24:b9:18:af:82:8a:b2:7b:
         46:91:9f:1f:91:34:e3:f2:bc:e2:e9:e0:a3:a9:52:42:6d:d5:
         9f:6e:ce:4f:30:8f:30:a4:03:d8:80:2e:5f:66:db:66:be:fd:
         73:8f:f3:d6:8f:9e:fb:43:73:f4:c6:66:3e:78:9d:2a:95:73:
         c0:5a:da:36:a4:72:ee:0e:06:f0:2b:ae:03:f2:68:04:34:43:
         41:a8:91:48:87:2d:1b:d6:9a:93:89:6a:ad:25:6e:c6:5a:66:
         32:86:6e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:11:58 2025 by rpki-client