Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/296efd2d-ae2b-3d93-869b-9ade48095004.roa
File:                     296efd2d-ae2b-3d93-869b-9ade48095004.roa (raw, json)
Hash identifier:          F2GvpvCCDNCkeYJ+v3jP/3zBI1widiQLbunhLp8ioCA=
Subject key identifier:   E0:EE:58:FA:83:47:6C:B1:27:FC:14:8F:48:2A:B8:7D:32:78:E2:70
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285848FD56CF8F47683DE374481F00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/296efd2d-ae2b-3d93-869b-9ade48095004.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     7018
IP address blocks:        216.213.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:cf:8f:47:68:3d:e3:74:48:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=b5e1fcbe-f350-41bc-860e-c042ba070065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:59:42:d7:42:55:2b:b6:01:1b:f2:6c:a2:ff:
                    3c:0c:5e:d0:ac:58:79:2c:1e:a7:a7:60:1c:ab:a5:
                    44:0f:40:99:5a:2e:79:67:ec:9b:58:05:8f:1c:fd:
                    62:06:b2:fd:57:fe:a3:cc:a0:55:c5:26:c5:49:a0:
                    d0:27:95:64:16:d3:24:ea:6c:46:7a:39:b8:f2:13:
                    d7:ec:c0:17:4d:ca:66:da:cd:03:53:01:c2:0f:54:
                    24:de:d4:1e:9b:57:8d:04:1a:77:02:18:ae:ec:ef:
                    32:31:09:dc:8b:35:d9:81:12:16:79:fa:01:c4:4a:
                    44:e1:00:81:4c:41:a0:a2:cf:ef:6a:2e:bd:91:ed:
                    85:4c:a8:62:15:a5:a8:6c:4b:bc:37:92:52:6c:8c:
                    f6:2d:cf:ba:76:1d:54:54:55:90:35:7d:17:ae:5d:
                    f4:29:8a:f8:e2:65:06:e1:15:d7:da:56:4c:cc:9d:
                    60:3c:a9:7c:98:a0:b1:ad:6d:f5:b2:b5:9a:af:39:
                    43:81:3c:7c:c5:68:58:fb:40:84:6e:78:d0:50:98:
                    e5:ef:3b:76:8f:2e:f7:fa:16:cd:8c:6c:b9:fb:b6:
                    cd:97:1b:f4:2e:d8:59:97:e3:9f:27:d1:e8:1d:bb:
                    f3:c7:ea:38:4d:fe:ab:39:bf:69:81:32:e7:5d:c4:
                    7d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:EE:58:FA:83:47:6C:B1:27:FC:14:8F:48:2A:B8:7D:32:78:E2:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/296efd2d-ae2b-3d93-869b-9ade48095004.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.213.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:66:e4:b9:f9:d5:87:2e:6c:f3:18:b3:6d:5c:e5:bb:e9:17:
         68:34:35:bd:97:2f:b5:3e:ca:e7:e6:84:b8:ee:8d:7c:62:7a:
         fe:26:3b:88:bc:cc:96:f0:22:b7:6a:76:4e:f9:da:ef:54:bf:
         4d:33:49:f7:a2:77:57:50:0e:91:51:e2:95:ca:ae:b9:a3:12:
         e4:84:5b:07:81:6d:dd:34:33:0b:95:76:e8:d7:c3:fc:9e:58:
         bd:74:1a:a3:a5:1b:22:66:ef:25:cf:bb:a5:00:b5:43:ae:db:
         5b:7e:e2:5c:7b:02:b4:fc:c6:ef:65:b4:ee:c6:d0:4c:bd:9f:
         86:f7:2d:6d:d2:a2:ad:3b:7b:98:94:82:71:5b:28:5c:6e:d6:
         fd:e5:fa:c8:d7:14:c9:ab:41:fe:02:5b:83:e0:e2:7d:b1:db:
         6f:e6:fc:53:02:84:49:af:e7:d3:76:ee:a7:f4:bd:dd:05:76:
         2e:f6:39:8f:7f:92:c4:dc:2a:57:b8:78:c7:f1:ef:85:2c:9b:
         32:7e:07:ce:59:c5:92:3b:1c:0a:fc:6c:5f:0c:1f:2e:c7:f5:
         9a:e9:7d:c4:c6:d8:a2:a5:01:cb:39:f7:7b:56:a4:b3:92:bf:
         e5:41:cd:cc:7b:6a:ae:52:b7:30:77:f4:94:32:f0:af:60:cc:
         54:6b:d0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:03:12 2025 by rpki-client