Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/ec1ddf1c-ca8c-3475-a09c-368212c2e735.roa
File:                     ec1ddf1c-ca8c-3475-a09c-368212c2e735.roa (raw, json)
Hash identifier:          F4hOWm7rnM+sL1J8ay4qwrBu0/kwBWurMlViRS/j3S0=
Subject key identifier:   E6:29:11:06:6F:B3:8A:C3:F4:CD:2C:EE:C3:F6:09:6F:9F:7A:9B:00
Certificate issuer:       /CN=b031f288-aa10-4c6d-b640-6749f212c6b7
Certificate serial:       010D0C9F432858492CAE8E7062D7C006D0612500
Authority key identifier: A7:28:DE:7B:DB:D3:74:3B:97:C7:D9:08:68:12:83:7C:A7:31:E7:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/ec1ddf1c-ca8c-3475-a09c-368212c2e735.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     19905
IP address blocks:        24.225.112.0/20 maxlen: 24
                          216.172.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:8e:70:62:d7:c0:06:d0:61:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b031f288-aa10-4c6d-b640-6749f212c6b7
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=e7c7ea16-faf2-4169-8592-78e1a8f08df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0b:aa:8b:af:b2:67:47:90:25:fa:4b:0e:cc:
                    64:45:ca:3d:8b:26:8d:73:56:07:0a:77:9a:cf:50:
                    8e:3a:5d:a1:02:0e:3e:a8:7e:90:28:f3:f4:92:e8:
                    7b:4e:82:a4:83:47:21:5d:44:6c:a4:8c:c7:8a:f9:
                    d4:3b:f4:99:e2:6b:1d:65:dd:ab:1f:37:74:61:8e:
                    35:27:7a:24:0f:03:24:61:68:80:22:65:85:c0:eb:
                    aa:5d:ce:31:6a:13:4a:a7:dc:3e:38:35:88:e4:5b:
                    82:bd:0a:38:0e:09:49:bd:bf:e8:7a:a1:53:a7:c8:
                    80:29:a6:ad:ad:36:61:de:b5:6f:48:92:5b:91:ec:
                    42:de:af:9c:32:13:60:b4:fc:35:ba:84:e7:96:9d:
                    ae:19:b6:87:c5:08:df:12:a7:ba:51:82:b2:65:1d:
                    7e:1f:b4:22:70:4c:5f:d8:11:32:a9:ae:d1:5d:a4:
                    85:2c:21:4c:24:69:1f:d3:9c:83:22:8f:43:22:ac:
                    fd:ad:89:54:13:48:f6:f7:34:99:11:d2:8e:46:79:
                    08:0b:a3:29:4e:7d:04:cc:6d:91:fe:07:95:c4:f7:
                    28:9a:33:66:cf:37:db:d2:e4:49:5d:55:fa:69:02:
                    e7:b2:35:8b:a5:c6:40:c3:01:ac:3a:1b:54:e4:de:
                    44:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:29:11:06:6F:B3:8A:C3:F4:CD:2C:EE:C3:F6:09:6F:9F:7A:9B:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/ec1ddf1c-ca8c-3475-a09c-368212c2e735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.crl

            X509v3 Authority Key Identifier:
                keyid:A7:28:DE:7B:DB:D3:74:3B:97:C7:D9:08:68:12:83:7C:A7:31:E7:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.225.112.0/20
                  216.172.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:83:b3:6c:85:4b:f6:67:ce:5e:a4:5f:ee:27:79:0b:ad:a3:
         93:3a:97:31:3f:83:b6:3b:e5:97:10:04:93:f1:19:f9:1f:0e:
         26:02:ef:a0:c7:63:fb:7c:19:b4:b7:8b:a5:e0:dd:61:b2:61:
         cf:53:2f:9c:2f:cd:aa:0c:20:b5:da:37:d8:fa:61:f3:40:8f:
         85:50:42:7c:48:1d:a3:0e:73:7c:47:e5:f1:4a:c9:a1:70:4c:
         3e:0f:11:6d:31:17:1d:b8:82:2f:0a:e6:d7:da:28:6f:2f:5f:
         ba:4c:73:f6:57:d9:00:ee:1d:c5:7c:77:91:04:9d:c4:0e:d9:
         f8:c0:ed:79:01:37:8b:e4:4d:8e:aa:29:21:c9:a6:9c:fe:c1:
         7c:85:f2:64:2b:b0:d8:7b:f4:94:72:c5:02:11:4a:3b:d4:d2:
         30:08:a8:4c:ea:6f:58:36:c8:b3:7a:98:57:35:57:95:8a:41:
         6f:6d:c6:81:82:f8:b5:a2:2d:ff:dc:50:26:9a:22:c8:6b:00:
         31:8b:d7:00:6e:b8:0f:6e:53:20:af:a8:d5:1a:e0:ee:7e:62:
         b2:6e:cd:9f:c1:80:e7:0c:5c:4f:7f:98:13:d8:ca:97:a0:d2:
         66:67:24:cc:19:04:df:14:f9:63:b7:5c:d4:5f:25:32:4b:27:
         f1:dd:e5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:38:42 2025 by rpki-client