Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/f062c13e-fd56-3fbd-8691-84166862a4bf.roa
File:                     f062c13e-fd56-3fbd-8691-84166862a4bf.roa (raw, json)
Hash identifier:          h1yLYl2lQrIHTB6Sg8r/9jEZkH20WARqhAPEye9cx7c=
Subject key identifier:   88:A3:C8:0C:8D:73:0D:06:1B:07:88:F2:7B:35:93:33:03:35:71:FA
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285849683EB202BE2EFFB58EA68800
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/f062c13e-fd56-3fbd-8691-84166862a4bf.roa
Signing time:             Thu 03 Apr 2025 21:04:13 +0000
ROA not before:           Thu 03 Apr 2025 21:04:13 +0000
ROA not after:            Wed 02 Jul 2025 21:04:13 +0000
asID:                     43260
IP address blocks:        216.24.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:68:3e:b2:02:be:2e:ff:b5:8e:a6:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Apr  3 21:04:13 2025 GMT
            Not After : Jul  2 21:04:13 2025 GMT
        Subject: CN=3ee6b9b2-bcf9-497a-a48f-cf457f3ba49c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b7:4c:55:a8:d4:5d:7f:86:10:9e:73:6c:12:
                    35:ad:ca:7a:ac:7f:ed:4f:4e:db:e0:2d:e2:39:70:
                    ea:e1:33:d7:3c:5f:93:06:2a:19:ef:6d:ed:e3:3d:
                    d5:d6:39:0f:49:4a:23:40:bf:29:56:a0:a3:71:d7:
                    7f:86:64:04:66:2b:53:81:54:dd:6c:13:cb:94:af:
                    05:3f:29:76:70:7f:a0:2a:13:b6:0b:c3:b6:a8:26:
                    48:72:d0:fc:2c:33:2f:9e:4a:07:de:4d:40:cd:69:
                    06:4c:02:35:5c:16:2e:10:df:8f:35:6c:d7:46:a4:
                    13:7a:65:19:e3:8f:62:62:4c:8f:71:f2:5e:90:53:
                    c1:22:06:ab:b6:53:24:22:2b:59:05:2b:ab:e0:a0:
                    fd:f5:87:0b:b3:3e:42:ba:9b:6b:2d:4d:28:69:a6:
                    61:18:19:12:f2:82:08:82:7e:77:31:77:13:27:87:
                    c3:89:9b:fe:12:f6:da:a5:7e:f1:fa:c6:cb:25:f5:
                    f1:ad:48:6f:02:0a:d0:ff:72:5d:68:4a:64:6e:ae:
                    e6:68:44:4a:a3:e1:4e:70:c5:21:c6:4b:60:49:1a:
                    3f:cd:b7:d6:cc:b5:a8:11:76:62:4d:8c:c1:69:44:
                    77:0a:24:64:81:b2:f5:c2:2e:6e:f1:8c:35:9f:3e:
                    44:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A3:C8:0C:8D:73:0D:06:1B:07:88:F2:7B:35:93:33:03:35:71:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/f062c13e-fd56-3fbd-8691-84166862a4bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:29:32:13:ee:8f:e2:77:52:9e:ed:11:03:76:42:a6:ff:e7:
         d8:82:9c:bb:e6:37:6a:c6:ad:b5:ea:9a:d8:36:b1:ca:3d:c8:
         9f:f0:ad:34:a6:51:ae:c3:67:50:a8:9f:cf:20:94:c4:92:b5:
         c5:e4:c1:5b:45:f4:33:ad:38:11:4f:bf:1b:56:c1:d5:e6:aa:
         78:93:2a:e5:67:30:26:13:8b:b7:05:62:ce:0b:dd:76:90:ee:
         f7:80:1b:18:ec:28:bf:7a:33:f0:3c:d7:3f:fa:c0:af:93:e6:
         37:f9:d4:85:5e:75:1a:3b:b6:9e:91:c9:28:fd:0f:a3:4f:19:
         64:ab:28:ce:94:fd:10:89:19:50:36:e6:7f:59:45:73:b5:ed:
         ad:94:45:28:34:fb:bb:24:80:57:36:98:b7:dd:c2:ff:3b:a2:
         07:21:a0:13:90:4d:f4:da:0a:46:ff:17:a5:ff:56:79:a6:eb:
         0f:d2:cf:0b:4c:5a:a1:69:f3:28:53:f6:16:73:04:07:89:5e:
         65:db:9b:47:67:d6:13:14:c2:89:ce:e0:3c:4e:28:62:6c:a7:
         86:4d:15:a5:25:23:80:cc:bc:e5:c2:28:fc:1e:d5:4d:b3:37:
         0a:47:46:b9:03:d7:18:cb:1c:78:57:74:0a:a7:b9:6f:e3:da:
         cd:84:03:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:48:39 2025 by rpki-client