Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/ef953197-0915-3076-bf6d-1be0f2c8374a.roa
File:                     ef953197-0915-3076-bf6d-1be0f2c8374a.roa (raw, json)
Hash identifier:          Qw8Lk7Pm0SDgD5RU3GuBh5zOHyqlG/r9cOQOrlC7u1o=
Subject key identifier:   E6:7F:F6:AC:8C:22:24:83:9B:E9:AC:22:A0:BD:1F:42:D4:90:DA:18
Certificate issuer:       /CN=70212b19-99d4-4532-a7e0-a5bdbef20170
Certificate serial:       010D0C9F4328584909E6A090A441DA1296AB7280
Authority key identifier: 10:3A:37:8A:5C:7E:F2:98:FB:74:3D:2C:6D:62:04:89:CA:64:A2:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/ef953197-0915-3076-bf6d-1be0f2c8374a.roa
Signing time:             Sat 01 Mar 2025 02:00:39 +0000
ROA not before:           Sat 01 Mar 2025 02:00:39 +0000
ROA not after:            Fri 30 May 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        216.147.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:09:e6:a0:90:a4:41:da:12:96:ab:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70212b19-99d4-4532-a7e0-a5bdbef20170
        Validity
            Not Before: Mar  1 02:00:39 2025 GMT
            Not After : May 30 01:00:39 2025 GMT
        Subject: CN=bf224b6d-e12a-445e-98a2-2e4dca98572b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:22:d1:cd:46:e1:a9:95:13:65:6a:bf:cc:65:
                    c2:fb:5e:f9:2f:96:fc:f7:25:98:e7:04:a7:db:66:
                    38:5e:6c:83:f2:6c:a4:49:d4:ee:c6:43:50:5e:05:
                    2b:36:6b:e2:d9:6e:68:75:58:02:ef:66:29:f3:08:
                    ab:47:3f:5c:83:ff:ef:72:db:08:ed:ce:14:5f:b0:
                    9a:70:85:64:ce:3c:88:b0:69:24:03:21:32:86:b4:
                    d6:15:78:7b:73:48:1b:9c:32:5e:c8:b0:a8:7e:7f:
                    88:dc:2e:f9:e5:ab:98:1b:dd:b2:41:a9:1c:d6:4e:
                    ae:2e:07:69:ca:6b:27:87:0e:c8:41:db:29:45:fe:
                    0f:a1:41:f8:18:ae:23:93:60:2e:62:0d:97:73:1f:
                    b1:0f:be:42:32:39:a4:2e:95:76:08:7e:8b:b2:d7:
                    c2:cd:b1:ed:ea:db:0d:9c:25:12:6e:fd:6a:4c:a8:
                    46:42:d0:f8:fb:61:b6:9e:62:3f:95:22:11:ae:7d:
                    02:cf:5c:51:85:79:4b:44:89:6a:e1:9b:56:fe:a6:
                    67:01:ca:cb:c6:19:f5:53:83:cf:6c:91:a7:3b:d0:
                    c1:7b:01:7f:3c:81:85:96:b2:97:08:49:8c:a1:71:
                    0e:bb:4d:4a:b4:9f:06:b9:75:1e:e1:15:b4:2b:86:
                    5e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7F:F6:AC:8C:22:24:83:9B:E9:AC:22:A0:BD:1F:42:D4:90:DA:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/ef953197-0915-3076-bf6d-1be0f2c8374a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.crl

            X509v3 Authority Key Identifier:
                keyid:10:3A:37:8A:5C:7E:F2:98:FB:74:3D:2C:6D:62:04:89:CA:64:A2:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.147.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:d9:04:8e:ae:f2:3a:5a:b8:b2:15:60:0f:52:1d:76:69:fe:
         83:24:35:39:d6:1f:82:a5:0a:74:42:d0:58:bf:30:9b:bb:1e:
         f5:c4:31:af:d1:ba:ab:f2:62:21:3e:15:b3:a4:44:8b:ad:ce:
         31:95:e9:33:d8:99:05:ac:db:29:5f:84:d8:e6:2b:f9:30:f1:
         a1:b6:6f:db:64:0b:29:54:6e:30:39:21:5b:db:f4:6c:7b:7a:
         5a:fe:9b:79:1f:05:53:29:77:6e:82:8a:c1:36:54:18:87:21:
         e1:f6:62:94:47:b1:93:f4:28:28:f1:6d:d9:57:90:4f:b3:20:
         c5:ee:2a:3b:95:bc:2a:e5:82:65:52:fa:d6:5e:77:cc:43:54:
         cf:5e:28:6d:b6:43:9e:a6:70:d0:f6:25:46:0c:c6:14:5b:f0:
         3a:26:49:63:11:1b:68:67:a9:c4:6b:f8:07:79:0b:e5:37:9e:
         2d:cb:00:fc:75:71:15:1a:a1:76:b2:eb:28:ea:95:b0:f6:27:
         94:ea:41:e4:82:c8:ae:2f:14:62:2b:0b:2a:f6:69:ff:45:7d:
         ae:80:cd:7f:24:c3:f1:20:33:6f:c1:d7:08:68:bb:71:ac:dd:
         8d:56:c5:00:d5:cd:79:62:2e:a2:0b:c9:66:36:0b:be:7b:37:
         80:05:ab:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:45:31 2025 by rpki-client