Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/5063a991-71e3-386f-a2ce-1837542c302c.roa
File:                     5063a991-71e3-386f-a2ce-1837542c302c.roa (raw, json)
Hash identifier:          DULH4hmv8OWjatuQPRpUS5iDFuRwQ1jYJlx4Xkf9BR4=
Subject key identifier:   5F:53:93:DD:08:EF:38:DC:A9:8F:B6:A8:4E:D4:9A:F0:10:50:10:40
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584937D93335264D2A8B9FDA9400
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/5063a991-71e3-386f-a2ce-1837542c302c.roa
Signing time:             Mon 17 Mar 2025 13:00:52 +0000
ROA not before:           Mon 17 Mar 2025 13:00:52 +0000
ROA not after:            Sun 15 Jun 2025 13:00:52 +0000
asID:                     36511
IP address blocks:        216.230.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:37:d9:33:35:26:4d:2a:8b:9f:da:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Mar 17 13:00:52 2025 GMT
            Not After : Jun 15 13:00:52 2025 GMT
        Subject: CN=f6eb7dd7-3503-4dfb-b4aa-3e59de47cf38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ff:53:7b:4d:38:08:81:1c:f6:3a:3f:c0:21:
                    dd:72:1e:3c:58:ac:f5:60:a0:7e:96:65:6f:f8:6a:
                    c8:55:12:00:dc:d9:13:9c:69:6e:8b:04:fd:19:ea:
                    cf:37:96:fb:09:46:a0:0d:17:ad:8e:57:c3:ba:6c:
                    59:e4:91:fa:a7:05:9b:97:b4:18:0a:b8:53:71:bc:
                    8e:e5:16:2a:8e:0f:c2:59:d6:69:2f:c7:4f:84:b9:
                    a7:cc:21:a2:00:03:2d:8a:7f:c1:6f:1a:58:e2:4b:
                    57:7a:5b:8c:39:e9:98:33:06:78:2d:a6:6c:f7:1d:
                    0b:b1:e7:b7:7c:0c:1a:92:bd:fe:44:a1:c2:fa:fe:
                    2c:79:e9:72:cd:60:90:97:63:3b:b5:2e:c7:fd:6f:
                    a8:2e:82:88:c5:35:64:37:c2:d2:b7:49:fd:ba:64:
                    36:d1:94:c7:27:6b:39:52:f6:46:37:98:e0:0d:a7:
                    62:fb:04:ce:06:8a:99:0d:0c:86:bd:02:c6:59:f1:
                    b4:a8:eb:1e:84:36:a9:d5:e7:22:f3:a6:ee:79:a2:
                    a0:be:79:46:4b:5a:84:90:1a:e1:bb:58:05:6d:c2:
                    80:50:b5:29:13:4c:be:41:11:9b:1c:44:66:ca:00:
                    56:df:df:c3:1a:02:f5:c4:b0:4c:57:c8:dd:26:4b:
                    1e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:53:93:DD:08:EF:38:DC:A9:8F:B6:A8:4E:D4:9A:F0:10:50:10:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/5063a991-71e3-386f-a2ce-1837542c302c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.230.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:51:7f:a9:7a:8c:10:45:7a:b2:e6:1f:5f:f1:26:d9:76:58:
         64:61:8b:43:f4:dd:4f:cf:85:3c:da:53:d9:b8:08:e2:30:68:
         2f:95:1b:c1:eb:72:79:37:ee:bd:ee:90:34:0f:85:19:49:4a:
         5f:13:a1:ef:f1:7e:d5:f5:f0:74:69:aa:72:75:05:03:6e:0c:
         c4:bc:90:1a:8e:99:71:4e:c4:3e:3c:59:ba:f7:ab:47:2a:a6:
         3f:06:c3:3e:72:a5:3c:32:ab:0a:35:a7:b5:22:00:37:79:56:
         8e:61:65:0d:1c:1c:d5:c7:2a:87:cd:a5:d0:ec:2a:dd:03:b9:
         93:b1:d4:d1:f4:1f:6e:4d:5f:53:db:c9:f7:2a:0a:54:33:4f:
         ae:ae:dc:37:33:0f:1d:4a:64:b6:7f:4b:e1:2c:3e:f0:e9:ef:
         18:a0:ec:bb:20:99:e8:23:cc:75:d3:00:b3:5d:8f:85:b5:74:
         71:c8:7e:38:af:30:f8:8c:44:0c:aa:11:16:17:b1:d0:47:ae:
         82:cc:61:d6:93:3c:0c:6e:4a:82:6d:d9:6d:2a:f5:c6:61:63:
         42:4b:21:65:45:29:d4:f5:38:e7:08:22:f3:f9:23:a7:57:27:
         ce:7f:a4:61:79:a7:a3:54:b7:70:4a:ff:54:94:9b:2e:4e:66:
         95:bb:48:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:47:07 2025 by rpki-client