Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/c3e18ddf-50c8-3c2b-961b-6ce9f03a95d8.roa
File:                     c3e18ddf-50c8-3c2b-961b-6ce9f03a95d8.roa (raw, json)
Hash identifier:          Dblpt2bpDcbVLEVGRuQek5GnU6noGFZLSGvFfGDrni8=
Subject key identifier:   C8:DA:02:3E:06:FC:61:4A:C8:45:A1:BA:FF:23:A1:32:5A:5C:8C:6C
Certificate issuer:       /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial:       010D0C9F432858483E1ABE56178CE93330666640
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/c3e18ddf-50c8-3c2b-961b-6ce9f03a95d8.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     11650
IP address blocks:        216.71.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:be:56:17:8c:e9:33:30:66:66:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=39af0516-128c-4802-955e-cd6b45dd4875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cb:78:3e:7a:da:f6:d2:13:a6:04:89:af:89:
                    c2:ea:72:b8:a4:f4:84:b6:1d:42:6e:11:00:94:71:
                    aa:86:6d:77:a2:db:60:1b:e2:7f:a5:5d:21:b2:ac:
                    65:cf:9b:12:ab:3d:b1:e3:5a:9f:43:90:0b:f9:73:
                    d7:49:b4:f6:06:53:97:7a:8e:f0:fa:c6:0f:89:2e:
                    51:73:6e:a3:2e:de:af:44:15:3b:37:66:c2:cf:ff:
                    9d:5c:6c:38:67:ab:c7:3a:0f:4e:20:c6:74:ae:6c:
                    64:0c:88:38:c2:87:c7:e6:95:fb:e5:81:a3:b2:d5:
                    cd:74:be:72:2e:31:7d:55:16:d6:72:25:09:3d:a6:
                    06:98:d7:5c:20:33:a6:2d:9c:95:90:53:70:b0:74:
                    b0:fa:db:48:ec:88:65:a2:99:90:45:fc:95:74:63:
                    1a:c2:7e:d1:b0:d2:89:f1:b2:f5:97:06:05:58:f3:
                    f0:c4:d2:70:c0:ef:c6:9b:42:1e:2d:77:e5:eb:1e:
                    0b:7d:d7:32:7a:b8:93:76:18:eb:7c:07:bc:fb:aa:
                    8d:db:42:d6:51:1d:f5:87:f4:a5:10:5e:8a:91:62:
                    46:2d:03:25:4c:cc:34:48:4a:be:ac:03:be:cb:52:
                    06:0c:a9:37:6f:b0:47:3d:5e:73:89:28:59:fc:93:
                    36:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:DA:02:3E:06:FC:61:4A:C8:45:A1:BA:FF:23:A1:32:5A:5C:8C:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/c3e18ddf-50c8-3c2b-961b-6ce9f03a95d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl

            X509v3 Authority Key Identifier:
                keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.71.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:cf:1d:76:47:e5:52:be:2e:cb:40:8f:26:c9:17:d3:88:71:
         8f:a9:76:f3:c0:ab:f1:2a:ec:d7:b6:0f:0c:83:aa:a8:a6:a8:
         02:4f:b0:b6:3a:ff:2a:e5:78:04:17:11:3d:d9:c6:ef:5a:a8:
         4e:c0:eb:c0:ea:6d:fd:1a:db:85:aa:11:da:1f:35:96:ff:7e:
         ce:2b:18:51:0e:58:23:21:b9:b1:a6:6c:3b:cc:15:f8:d7:f2:
         77:7f:23:e3:bb:67:51:28:8d:54:46:d4:a2:24:e2:7a:bb:5d:
         72:33:48:2a:54:20:22:af:8b:d5:03:2c:f7:9b:ad:87:7d:a1:
         5d:8c:c4:c3:32:30:25:46:d9:10:1d:57:32:19:ed:2f:4a:d6:
         20:75:0c:8b:4e:1e:ac:96:3b:5e:99:c2:50:5a:df:21:f2:9f:
         4a:37:6f:0d:b2:aa:4c:df:aa:b8:f0:15:77:86:e9:9f:45:55:
         74:82:c4:c9:59:f7:4d:0c:d5:a1:c0:9c:00:95:c2:cc:9e:d9:
         82:31:ab:e3:9a:35:a6:41:f8:62:eb:32:15:73:09:fd:48:33:
         27:6b:f7:4e:2c:22:2a:ee:65:00:78:d8:0a:c1:b4:42:67:59:
         88:62:31:e6:a3:84:e0:12:6a:31:67:ec:59:d2:41:76:f3:4e:
         70:e8:75:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:52 2025 by rpki-client