Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/70c136ea-0cb9-3ed3-a923-d617d9c8975b.roa
File:                     70c136ea-0cb9-3ed3-a923-d617d9c8975b.roa (raw, json)
Hash identifier:          qwronJw/79R7rCil9HnH8eBQhE2eok80QnDc4cA04LU=
Subject key identifier:   59:64:82:60:F3:81:63:BE:BD:53:79:CB:B2:50:82:0E:C2:82:BC:45
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F43285849446949704F05A755D81DAD80
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/70c136ea-0cb9-3ed3-a923-d617d9c8975b.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     396375
IP address blocks:        216.30.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:49:70:4f:05:a7:55:d8:1d:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=9714293d-6249-4fa9-aee9-4752788301d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1a:de:64:ec:61:da:6a:f3:60:43:49:fa:26:
                    0b:bf:4e:ff:84:9f:59:60:25:86:5b:65:e6:52:97:
                    30:70:7c:1b:1b:44:50:ca:5b:f4:93:16:09:bf:98:
                    de:16:a3:b0:48:fe:f5:2a:af:de:f5:76:16:3c:fd:
                    2a:08:23:d7:54:40:e7:c0:43:24:00:81:a8:0e:ea:
                    06:7a:81:29:40:c5:00:3a:35:27:4e:d3:4a:9e:78:
                    62:65:a6:fa:00:14:59:3f:cf:a4:5a:27:03:be:80:
                    21:9e:3e:49:43:c8:98:8f:03:51:36:a0:82:ef:f0:
                    b1:7d:e7:03:1a:89:f5:61:8d:22:5d:89:3b:df:64:
                    97:30:4b:9d:97:5f:d8:b7:96:ac:a7:39:85:28:21:
                    28:48:c1:44:a9:ea:a4:ae:27:a1:a5:b8:ab:7c:eb:
                    94:4f:44:60:57:34:c8:16:06:e4:58:4d:50:51:21:
                    15:c3:82:35:61:5d:0a:0d:94:e9:f0:cb:9a:1b:b3:
                    10:96:c1:72:f7:7b:29:de:1d:fe:dd:59:30:dc:1e:
                    bf:95:e0:b1:f4:55:d0:f5:9b:e0:2c:1e:e8:96:05:
                    ee:01:b2:e4:63:80:31:98:e2:c4:12:2e:2f:ab:6a:
                    8f:14:bf:8c:38:21:ed:be:9e:1f:43:86:bb:e0:ab:
                    7f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:64:82:60:F3:81:63:BE:BD:53:79:CB:B2:50:82:0E:C2:82:BC:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/70c136ea-0cb9-3ed3-a923-d617d9c8975b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.30.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:64:5f:b4:75:8e:db:2c:ae:c2:21:12:71:2b:3e:cc:30:57:
         60:32:2e:a5:f9:ec:48:17:65:a2:b7:ac:20:6d:66:b8:73:f7:
         4d:97:83:eb:30:75:08:d6:80:2f:80:94:5f:96:3f:91:04:89:
         ff:a9:7a:a6:13:cf:f1:74:29:ba:1b:fa:12:30:3b:74:30:c3:
         e2:05:f1:4a:d8:0c:7e:d1:7e:0e:32:c2:67:8d:9e:a8:48:ad:
         b3:e7:f9:45:48:ba:9e:21:62:7e:b9:d0:66:7b:80:95:58:7a:
         28:98:a7:33:37:32:fe:d1:36:4b:4c:bb:d6:e3:c2:d3:13:d0:
         d5:9a:ce:e1:49:6f:80:06:ed:db:07:2a:fe:c0:f5:6f:82:a5:
         78:22:5a:ee:a0:be:61:f3:da:97:3c:7f:65:25:46:78:7e:25:
         61:10:8d:b3:fc:e0:4d:6e:68:43:6a:15:83:00:c5:a3:a0:dc:
         79:0b:c8:39:06:b1:72:51:62:1f:81:51:12:14:2a:10:79:fe:
         c5:56:50:7f:a9:cf:1d:29:4b:6b:5e:ed:5e:37:e8:e2:bf:04:
         fe:2b:dd:2d:df:ae:b5:2f:36:32:e8:f8:11:42:25:5d:88:23:
         32:02:28:79:6a:05:b0:57:27:9d:f2:07:3d:45:64:34:3d:48:
         80:49:83:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:24:11 2025 by rpki-client