Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/fb2b11f2-5f85-34c3-85cd-34ce64cc2b62.roa
File:                     fb2b11f2-5f85-34c3-85cd-34ce64cc2b62.roa (raw, json)
Hash identifier:          g7mZHKXopJUsGgSwAg1OA3UXcRASfjEYPF2KlOz7xMU=
Subject key identifier:   00:F7:FA:28:4D:96:67:DF:A9:A7:EE:60:FB:8D:D6:3B:6D:DF:A6:02
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F43285848ADC61609752EDDFB29213F00
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/fb2b11f2-5f85-34c3-85cd-34ce64cc2b62.roa
Signing time:             Mon 27 Jan 2025 02:00:39 +0000
ROA not before:           Mon 27 Jan 2025 02:00:39 +0000
ROA not after:            Sun 27 Apr 2025 01:00:39 +0000
asID:                     21743
IP address blocks:        216.185.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:c6:16:09:75:2e:dd:fb:29:21:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Jan 27 02:00:39 2025 GMT
            Not After : Apr 27 01:00:39 2025 GMT
        Subject: CN=8db6f3f2-fd51-46da-b368-70ebc0871449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f3:7f:53:25:c4:d7:ec:b7:f2:67:d0:95:2a:
                    3c:38:b2:00:47:4c:e9:2e:ca:7b:37:92:c1:49:ef:
                    27:94:1a:43:f2:80:7e:46:31:e9:91:c4:d4:74:17:
                    8e:1b:9b:78:18:7c:59:e5:e1:20:17:77:33:b9:31:
                    f4:b7:da:c9:ef:d5:20:a7:19:99:f5:5c:bb:2e:d1:
                    a8:8d:42:f1:7e:55:90:89:25:a0:f2:2a:b6:86:25:
                    d5:7f:72:26:94:d6:61:be:4a:5a:cc:e7:d1:ea:89:
                    29:38:b0:6a:1a:4f:39:6d:5d:28:78:28:95:45:8e:
                    2a:68:51:8c:3f:ed:a8:e9:7c:62:b1:5a:3f:8f:1b:
                    4b:a3:06:3c:99:30:ff:3b:ab:85:a1:6b:aa:3f:76:
                    90:92:c8:a4:55:c3:77:27:6d:6a:6c:0f:0d:63:ad:
                    45:a0:ef:4d:d4:a3:b6:34:2a:7f:3e:da:29:6a:9b:
                    08:d7:3c:0c:19:e2:8c:b4:89:e3:d6:72:46:f7:5b:
                    38:8a:6d:56:ad:1e:ab:d8:0d:95:8d:4f:cd:90:e2:
                    26:e0:ff:9b:86:06:14:5e:ff:32:1a:37:fd:46:fb:
                    a3:bc:3b:d3:d3:92:90:be:c0:23:38:eb:97:59:bd:
                    fd:13:2c:43:15:11:97:66:94:be:94:3c:21:ab:39:
                    91:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F7:FA:28:4D:96:67:DF:A9:A7:EE:60:FB:8D:D6:3B:6D:DF:A6:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/fb2b11f2-5f85-34c3-85cd-34ce64cc2b62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:46:44:2c:8d:bb:cc:2d:8a:73:49:ae:db:9f:e3:e3:78:e4:
         e9:18:32:30:52:17:c9:8e:63:5d:bf:b4:f0:3f:32:a5:7a:da:
         f2:11:12:49:08:2c:bb:89:a1:44:f8:d3:30:68:6e:ae:16:92:
         79:7a:4b:58:10:3e:3d:a7:4b:74:2b:73:63:9b:55:89:56:5b:
         d1:3e:c1:23:7b:b9:3b:69:36:f5:64:67:49:fa:64:28:dd:82:
         d9:e2:70:a2:0b:dd:24:59:6b:76:31:e2:92:c9:fd:ac:c4:3e:
         15:cf:a6:0a:be:2e:19:fe:7b:be:c2:2a:7a:f3:12:c5:6f:ac:
         5a:b1:a5:e9:91:af:03:4b:4a:90:5d:9b:cc:87:13:36:d4:63:
         8f:96:4e:1c:cb:18:98:35:cd:2e:0f:db:6c:c1:fe:00:66:93:
         ea:3c:d9:97:38:a7:eb:3f:a1:3a:01:8d:96:af:6d:82:fb:7e:
         0d:75:ad:bd:14:11:0e:d2:53:1a:58:5d:db:f1:da:b8:d5:85:
         87:99:04:2a:ee:85:31:46:9e:69:00:9b:12:ca:5c:c4:fe:2b:
         5c:27:90:3c:2d:ae:a7:c7:56:70:11:0e:c7:ad:64:72:42:34:
         00:38:01:6c:d9:a9:19:96:a8:8d:47:21:14:f4:b4:ee:eb:a4:
         ef:f8:b9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:54 2025 by rpki-client