Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/7d3b77bd-abdf-3d29-ad48-1338b42dac5d.roa
File:                     7d3b77bd-abdf-3d29-ad48-1338b42dac5d.roa (raw, json)
Hash identifier:          ozMlfOcQF0d8i8GO6+rM93FwWTN9H2061KOy1MPe0MA=
Subject key identifier:   78:6A:10:7F:72:6A:A3:C1:A4:F8:A4:8C:15:B4:2C:0F:32:8D:70:88
Certificate issuer:       /CN=02ad5a58-3adf-41cb-9598-b3260591398c
Certificate serial:       010D0C9F432858492CAE84264C20EE244DC6F5E0
Authority key identifier: 28:D5:F6:E6:7B:EE:87:BE:AD:EE:45:FF:5D:19:56:7C:5A:31:45:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/7d3b77bd-abdf-3d29-ad48-1338b42dac5d.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     12097
IP address blocks:        24.140.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:84:26:4c:20:ee:24:4d:c6:f5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ad5a58-3adf-41cb-9598-b3260591398c
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=cf387ee6-744a-4bae-ba0a-a28a73d69b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:19:09:1d:e4:5e:c4:cf:40:d1:ff:82:01:f5:
                    c2:92:47:8a:0d:67:d2:d4:68:a6:e5:4e:c4:23:7f:
                    2b:1e:ff:93:0b:22:d0:51:b5:12:08:fe:a6:f3:db:
                    2e:40:a7:ac:25:32:71:db:af:c7:5f:8a:bd:01:c9:
                    c3:66:4c:bd:2c:11:03:6c:27:98:83:85:12:90:79:
                    40:3f:0f:49:bf:59:0e:fb:f8:74:c1:d3:3c:b9:e0:
                    68:18:6d:db:bf:b6:b2:a6:08:d8:ba:58:49:2d:4b:
                    59:d1:c3:ca:a7:7e:5a:4e:4e:c6:95:b0:ba:26:54:
                    14:a7:e0:e7:a9:60:e5:53:1e:d0:da:15:ec:3c:79:
                    cc:1f:ad:b7:82:20:9e:62:15:42:87:4a:65:39:a3:
                    29:ae:16:cf:40:a3:59:5b:85:89:8b:aa:a2:e7:c6:
                    af:20:88:c8:53:cf:93:da:42:bc:64:a3:26:dd:06:
                    88:7f:f0:92:6d:b9:19:e6:f4:c7:2a:ab:67:ba:43:
                    82:00:b6:d6:2d:10:dc:20:69:0b:50:49:5f:0f:f5:
                    6e:e3:55:1f:25:93:08:e0:5a:6e:6b:4e:10:fc:ad:
                    10:b2:31:76:a3:0d:a0:97:76:ab:fa:2f:60:34:4c:
                    c2:63:e3:10:82:15:d2:66:e7:e8:65:cb:da:d4:8f:
                    94:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6A:10:7F:72:6A:A3:C1:A4:F8:A4:8C:15:B4:2C:0F:32:8D:70:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/7d3b77bd-abdf-3d29-ad48-1338b42dac5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.crl

            X509v3 Authority Key Identifier:
                keyid:28:D5:F6:E6:7B:EE:87:BE:AD:EE:45:FF:5D:19:56:7C:5A:31:45:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.140.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:e7:53:db:05:84:cd:b5:b2:e0:b0:a6:ec:08:a8:9d:20:cd:
         9b:d3:fa:eb:f5:8c:49:c1:d1:e3:55:96:19:8b:74:96:61:c5:
         e9:3f:ae:f6:46:ff:1b:ae:42:64:59:23:f3:ee:76:88:90:a3:
         21:05:dc:59:ca:7d:c6:b8:04:d2:0e:e7:20:18:09:41:49:13:
         16:87:f9:77:b5:40:b5:02:bb:55:f6:ff:40:22:fa:19:7b:70:
         ff:42:6c:25:5c:15:83:aa:28:74:49:d4:4a:bc:af:99:50:d8:
         59:81:8b:d3:b9:5c:d9:b6:09:3c:29:10:00:96:df:e2:28:2f:
         d3:57:67:a4:5b:07:32:40:bf:c3:c3:bc:88:2f:86:a2:c2:9f:
         fc:00:54:ba:d6:f6:40:f6:7d:dd:c5:3b:df:2a:38:e3:12:09:
         6f:d3:be:46:fe:be:68:3a:99:9f:b2:0b:e3:01:2d:74:71:16:
         9f:9d:6e:a7:43:ce:d9:24:64:26:e8:c2:e7:5f:c7:0a:96:e0:
         10:49:0a:96:d0:01:48:68:1b:a2:22:22:a1:83:8c:3b:7b:aa:
         26:9e:12:fa:22:e4:34:24:0d:88:bb:2b:d2:20:e3:6b:49:27:
         a6:12:97:56:7b:39:89:ee:11:85:bb:b3:2b:12:fc:70:35:c6:
         7b:79:7b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:18:48 2025 by rpki-client