Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/0d5fa410-ef94-3d14-a35f-6f222ba43aaf.roa
File:                     0d5fa410-ef94-3d14-a35f-6f222ba43aaf.roa (raw, json)
Hash identifier:          YUi9woftZNFgYO+997T/rM3efqJiIXmSR1IQJmaY+Hg=
Subject key identifier:   F5:D0:A8:27:BA:CD:62:2F:30:DF:32:FD:08:E2:67:4D:DC:D7:C8:FA
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584937D93DA7DC55556BCCA44C40
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/0d5fa410-ef94-3d14-a35f-6f222ba43aaf.roa
Signing time:             Mon 17 Mar 2025 13:00:52 +0000
ROA not before:           Mon 17 Mar 2025 13:00:52 +0000
ROA not after:            Sun 15 Jun 2025 13:00:52 +0000
asID:                     834
IP address blocks:        216.185.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:37:d9:3d:a7:dc:55:55:6b:cc:a4:4c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Mar 17 13:00:52 2025 GMT
            Not After : Jun 15 13:00:52 2025 GMT
        Subject: CN=d1f7dad4-4ba4-4211-b600-1a8c7d7fdbbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9c:43:7e:e5:40:26:03:be:8c:9f:67:6d:8f:
                    e9:87:09:d0:5d:82:31:45:84:41:2a:0f:a8:37:bb:
                    90:61:8b:61:4d:a6:b1:98:d2:f8:71:f4:dd:dc:2f:
                    b9:91:81:1e:f5:4d:7a:c9:78:0f:de:a3:28:b0:68:
                    c7:cf:90:ab:89:99:cc:7b:62:7d:46:b6:44:f5:69:
                    d9:cd:82:c4:15:11:6d:a4:5c:2d:74:c5:08:b8:74:
                    27:7c:c3:66:55:75:fb:04:ec:59:4f:81:49:01:ea:
                    7c:3a:a3:e4:2f:53:59:d1:a1:f7:e8:f0:1c:48:d5:
                    d9:84:31:13:f5:7f:13:75:48:db:f0:8d:8e:88:e3:
                    42:9d:c1:88:de:03:c2:5d:3d:9f:ba:9d:8d:47:3d:
                    f3:21:95:20:7c:dd:49:83:ef:0c:13:3c:0c:ac:55:
                    1f:98:0f:18:d3:7f:b9:54:48:df:67:3b:6c:00:51:
                    4a:7d:64:af:e5:93:81:59:ab:cd:ab:4e:ca:48:65:
                    1c:13:46:06:08:04:83:7e:0b:03:95:28:8d:1b:09:
                    20:d3:77:fb:a4:d9:95:ef:63:be:d6:4c:49:34:68:
                    42:c9:42:27:7e:cc:ca:ce:b5:0f:f2:74:fe:8a:b7:
                    ad:d1:78:62:ee:9c:25:1f:b7:f5:40:da:bd:88:c6:
                    c0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D0:A8:27:BA:CD:62:2F:30:DF:32:FD:08:E2:67:4D:DC:D7:C8:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/0d5fa410-ef94-3d14-a35f-6f222ba43aaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:48:be:8d:d2:7f:b2:af:b5:a4:b9:c1:c2:42:f1:d1:63:df:
         38:37:06:b0:64:24:a2:ff:bf:81:90:a3:e4:07:e3:b9:f9:ef:
         bc:da:eb:92:c6:a8:7f:e5:f0:2c:16:4d:a2:10:ac:49:6c:b8:
         20:34:fb:40:39:b6:94:b2:72:b7:d6:fb:d2:5c:e8:e3:a6:17:
         61:50:d3:a1:1d:d7:7e:bf:71:74:b3:3c:1b:bd:7e:e5:78:2d:
         d2:78:a1:4a:35:98:75:3e:2a:86:2b:0f:c5:de:1c:ba:4d:53:
         be:51:f3:d7:4c:d9:5a:1f:aa:f1:64:a0:d5:05:47:52:14:ff:
         a0:ba:04:b8:18:a8:76:4a:8e:a9:9c:df:b1:69:f9:32:3a:1b:
         73:50:f8:cb:a6:a6:40:e6:03:1b:0f:97:84:50:41:cb:cd:06:
         56:ce:a6:73:41:40:33:7c:8f:8e:cd:a4:33:21:82:69:86:b6:
         98:e1:6c:8e:bc:0d:3e:fe:c2:66:7a:64:95:c6:bc:4b:d5:df:
         0d:bc:20:03:2e:90:b3:a8:db:e7:ea:05:de:69:fb:28:e2:77:
         3d:13:b7:f4:83:fe:be:ab:04:5e:ff:49:b4:f2:30:80:78:f6:
         41:8d:2d:0a:f1:ce:13:74:bd:e5:ef:56:7f:f3:96:dd:aa:63:
         87:d6:4e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:14:53 2025 by rpki-client