Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/14d99b8d-e9e6-3492-986a-ec3e59a13b78.roa
File:                     14d99b8d-e9e6-3492-986a-ec3e59a13b78.roa (raw, json)
Hash identifier:          oib3dZIjAU2xFXsB1EuXxDS5Vuf8mbJMloQBF4remaU=
Subject key identifier:   6C:39:07:92:DB:08:24:E5:92:CE:62:2B:FE:FE:2B:70:0C:B7:66:42
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F43285848ADC61618A6CD7AA02BF1ED80
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/14d99b8d-e9e6-3492-986a-ec3e59a13b78.roa
Signing time:             Mon 27 Jan 2025 02:00:39 +0000
ROA not before:           Mon 27 Jan 2025 02:00:39 +0000
ROA not after:            Sun 27 Apr 2025 01:00:39 +0000
asID:                     21743
IP address blocks:        216.185.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:c6:16:18:a6:cd:7a:a0:2b:f1:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Jan 27 02:00:39 2025 GMT
            Not After : Apr 27 01:00:39 2025 GMT
        Subject: CN=114376fd-cfd4-41cb-a3aa-583696483666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ce:2d:84:b5:6a:9a:29:ff:50:99:48:7c:df:
                    9b:66:25:cd:de:7b:71:e8:03:85:c2:3b:f5:cc:46:
                    c5:01:50:f5:c0:11:45:4c:82:47:c9:52:35:f2:63:
                    fa:fb:20:58:c0:3a:8f:93:5b:3a:bc:f3:d9:74:b0:
                    89:67:7b:1d:b9:e7:d7:0e:cb:14:5b:34:f8:53:91:
                    90:5e:eb:53:5e:94:64:27:b9:c8:78:13:34:10:9d:
                    f6:5b:61:04:56:d4:ec:76:8f:8a:a9:55:bb:bd:2f:
                    5b:6b:b1:ed:67:42:34:c5:b8:70:56:5f:cc:7c:d2:
                    0b:82:f7:b7:f5:8d:10:e0:40:c3:fe:77:5f:d6:3e:
                    a8:97:ec:d1:bb:fe:4d:13:57:c9:c5:3e:45:e6:00:
                    e6:ee:d3:f7:73:0c:14:81:32:e4:f5:f6:4f:27:08:
                    6c:2e:bc:a7:87:83:45:74:85:35:83:e6:67:46:48:
                    30:be:05:6f:93:70:e8:63:86:79:e8:fc:1d:c0:ea:
                    c6:59:60:de:89:e1:18:c4:50:ed:a6:85:ea:7c:35:
                    58:e9:fc:89:d5:0b:8b:3d:ef:f6:cf:3e:56:80:b1:
                    0d:c9:f5:79:e5:ad:99:8c:ae:11:a2:1f:66:de:4a:
                    db:b0:f9:73:91:4b:fd:6f:7f:9f:aa:31:4a:b8:eb:
                    d9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:39:07:92:DB:08:24:E5:92:CE:62:2B:FE:FE:2B:70:0C:B7:66:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/14d99b8d-e9e6-3492-986a-ec3e59a13b78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:25:eb:e5:a4:ba:d0:8b:de:4d:f8:26:ae:82:94:37:bb:1f:
         fc:8b:76:97:a1:03:26:89:f8:e9:8d:9e:d7:bc:22:61:33:51:
         20:ed:b9:44:cd:e8:78:ff:59:b9:37:4a:9f:20:d8:be:b7:65:
         19:30:7a:c3:cd:ee:36:38:24:1c:f0:d6:72:e2:0f:0f:c5:b9:
         c9:96:48:93:c8:3c:9c:13:11:85:2f:11:13:db:78:42:66:83:
         e3:c5:48:72:38:2b:2f:73:68:59:ce:89:c5:99:da:93:d6:6e:
         65:95:f0:8c:99:18:2a:28:55:56:0e:08:33:69:1c:fb:7d:b0:
         ff:27:9a:a5:cb:a6:61:2d:c7:77:39:88:66:7c:7b:41:72:37:
         1e:96:7e:40:b4:f9:bb:b9:1a:05:14:6f:d4:40:a4:35:94:a2:
         86:0d:48:85:4f:8c:20:cc:ac:01:ec:25:71:41:97:31:2b:b3:
         6b:31:26:45:03:35:15:fc:a0:01:b3:24:de:47:80:b6:62:d4:
         c1:4d:f4:43:82:8b:b2:5e:f6:3b:d2:d0:d3:a6:c4:fe:1c:18:
         4a:83:27:0f:fe:04:ea:d1:73:e8:7a:77:a9:43:f7:bd:16:f8:
         f0:52:c6:f2:a0:0f:71:2a:6f:2a:b4:81:2d:89:c3:eb:05:5e:
         83:b0:85:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:01 2025 by rpki-client