Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/6e425213-8429-3360-84cd-2517f184f4cb.roa
File:                     6e425213-8429-3360-84cd-2517f184f4cb.roa (raw, json)
Hash identifier:          85RL+yGlBGFlLK2Ke044Qm+H/Rzb0gwCWYei1SN+cVU=
Subject key identifier:   29:36:9A:67:09:84:10:40:B2:3E:0A:CF:23:86:64:12:B6:BD:31:E0
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F43285848654A1A41CD93324B5FC36EC0
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/6e425213-8429-3360-84cd-2517f184f4cb.roa
Signing time:             Wed 01 Jan 2025 02:52:50 +0000
ROA not before:           Wed 01 Jan 2025 02:52:50 +0000
ROA not after:            Tue 01 Apr 2025 01:52:50 +0000
asID:                     834
IP address blocks:        216.185.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Feb 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:65:4a:1a:41:cd:93:32:4b:5f:c3:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Jan  1 02:52:50 2025 GMT
            Not After : Apr  1 01:52:50 2025 GMT
        Subject: CN=65fe3f32-f75d-4df3-bfd9-18d7c287f25e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d2:9f:58:b7:f9:98:bd:65:8f:e0:88:bc:9f:
                    4f:f0:6c:27:af:16:47:b0:44:c4:7e:ad:ff:01:4a:
                    36:ae:8d:31:c6:b5:bc:23:65:05:e4:05:1c:d8:c3:
                    af:12:ef:4a:62:9d:b6:97:85:27:b2:17:93:8a:f3:
                    cf:a8:cf:85:09:17:d1:3b:9c:bc:73:ff:d1:01:7b:
                    f2:ad:19:49:92:88:18:d1:e6:07:c7:e4:b9:03:7e:
                    8d:ae:af:64:17:76:4d:4c:bf:8b:4d:e8:fd:a1:c7:
                    d5:60:7c:01:f3:cc:87:63:d2:7d:6d:49:df:2c:f0:
                    30:0a:12:56:f3:62:a2:c6:dd:60:5b:ed:18:94:c6:
                    a3:9c:cc:aa:51:ef:89:2e:f7:34:fa:28:ed:58:d8:
                    51:03:c9:06:07:c1:e2:be:b5:68:dd:ba:32:4b:7b:
                    26:39:41:fa:d1:ba:36:3d:74:bd:42:60:8d:8a:e3:
                    df:64:f5:a8:47:92:d8:0d:08:17:50:f3:f4:42:f9:
                    1c:e8:0d:7b:2d:e8:06:0b:57:c5:20:df:3d:a7:8d:
                    4c:8d:1e:48:ff:09:27:20:67:c4:9c:79:b4:4b:12:
                    11:01:07:f5:24:78:03:e1:0b:f0:2c:b4:5f:0d:d7:
                    d3:e5:e6:93:ef:fa:1d:08:cd:09:5b:3a:9a:4e:78:
                    27:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:36:9A:67:09:84:10:40:B2:3E:0A:CF:23:86:64:12:B6:BD:31:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/6e425213-8429-3360-84cd-2517f184f4cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:8f:a0:9d:7e:f8:17:8b:78:29:c3:1c:3a:f2:68:9b:40:e8:
         7f:d8:39:3b:fe:32:a2:5d:c2:f7:1b:3f:1d:aa:29:db:6c:b8:
         67:3e:62:32:51:12:19:71:e4:77:57:90:2c:16:92:fb:b8:6e:
         bc:63:f2:0c:21:ab:83:a1:1c:58:bf:60:d5:da:4d:4d:bf:be:
         d6:ca:f8:2c:4b:57:df:65:4d:ac:e2:aa:4e:d8:28:6e:81:52:
         2a:b0:dd:23:26:94:10:69:b5:ee:c0:75:f2:6e:d3:c1:c6:43:
         f1:77:33:22:3e:83:7d:1c:f9:ff:73:66:f8:d5:35:91:f1:1e:
         5b:d7:87:00:01:e7:fb:0a:85:4e:32:f7:1c:60:5d:4b:d1:dc:
         de:8c:e0:7c:74:10:f8:67:b0:24:62:fa:b0:3d:90:9f:d2:b3:
         2b:71:e0:6f:3e:ec:5e:a8:33:fa:1c:75:46:d9:cd:9a:8c:73:
         72:f4:69:38:a8:45:75:0b:54:11:07:29:f1:3a:fe:44:11:61:
         b6:ba:ca:64:69:37:92:81:18:da:3b:c2:27:14:aa:a8:56:87:
         6b:5f:ea:37:85:b6:ef:e9:9f:a7:d1:3f:69:4d:f2:5f:30:d6:
         95:46:ea:a7:46:80:5d:29:ed:d3:41:a7:d5:28:7c:8f:ce:c0:
         08:42:ff:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 15:54:40 2025 by rpki-client