Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/d3d8afbd-2ac9-3c4d-8849-a6744709a78b.roa
File:                     d3d8afbd-2ac9-3c4d-8849-a6744709a78b.roa (raw, json)
Hash identifier:          FEHMNc8OUnb+4CAE5gfiaoaLdw4X6pSExBA6yeNYXfk=
Subject key identifier:   2A:F8:DB:8B:FB:03:2C:04:FC:2C:BC:8B:C7:1C:0D:25:34:8C:B0:DE
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F43285848C581849FEB2DC42DDD8B7500
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/d3d8afbd-2ac9-3c4d-8849-a6744709a78b.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        216.252.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:84:9f:eb:2d:c4:2d:dd:8b:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=13f5baf3-25f2-42d8-880b-6af7e34b6c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:76:0e:5d:c8:c3:2a:b8:8d:6e:de:b7:25:c4:
                    2e:72:1e:69:31:27:96:e5:f5:bc:04:2a:ca:a0:b2:
                    8b:8a:15:93:5b:0c:b2:0d:33:6b:e7:8d:f8:31:ac:
                    ac:4d:a5:42:8b:4e:f5:42:8f:ae:59:6e:a1:1c:04:
                    e7:c9:58:4e:0b:43:e5:f5:64:9f:ac:24:5e:0c:3f:
                    65:59:8a:54:92:c7:7a:4c:6c:78:90:59:b5:93:7f:
                    46:3b:aa:c2:54:b4:1c:9a:0f:df:a5:d9:ae:82:e6:
                    ad:cf:a9:b7:23:58:62:e0:31:2e:69:d3:76:32:22:
                    7c:9b:c3:e5:db:67:50:ce:b9:6d:5e:db:48:38:41:
                    f2:1c:79:bd:55:60:22:39:95:8f:84:c9:aa:cb:f6:
                    3c:44:f3:af:90:27:1c:63:d8:31:72:80:b5:a9:bf:
                    9d:4c:05:33:71:90:6e:5e:01:55:b9:b5:19:20:22:
                    bf:0f:9e:79:2f:14:46:b4:12:d8:4c:23:b7:db:f4:
                    a7:b3:39:ef:a0:fa:47:40:90:30:fc:bd:41:fc:51:
                    77:ff:0e:e7:ef:c9:ec:e9:b6:fc:2c:c2:2f:1b:28:
                    8b:06:29:43:f4:11:c4:ea:73:69:34:b0:55:e5:27:
                    95:e6:0a:44:39:a7:d1:e1:3e:9c:41:d7:91:04:7f:
                    2e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F8:DB:8B:FB:03:2C:04:FC:2C:BC:8B:C7:1C:0D:25:34:8C:B0:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/d3d8afbd-2ac9-3c4d-8849-a6744709a78b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.252.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:a7:cd:6c:40:32:7a:82:51:b2:0e:ab:04:12:86:6c:1c:dd:
         63:b1:9d:d5:51:05:e2:a0:b7:f4:ae:ee:50:03:40:32:c7:4b:
         28:55:ab:e2:ff:ec:78:23:b5:55:96:ef:f5:49:66:f2:24:97:
         ea:67:bd:30:36:cf:56:a1:46:f3:53:de:56:5d:f0:b6:48:30:
         db:b9:1a:d5:4f:33:a3:61:5d:11:01:45:a6:a3:ef:83:74:ba:
         29:21:0f:00:8a:f7:8f:07:a4:c9:ca:cc:33:91:c6:c4:6e:64:
         a3:a1:2e:10:92:ae:f2:04:0d:81:b7:6b:db:30:f9:a6:19:7f:
         01:f0:d6:38:57:46:e2:c1:60:07:f6:38:7c:df:8c:5d:df:f9:
         69:6f:b0:66:46:57:74:07:5d:24:4c:22:15:7f:c8:bd:b4:ca:
         f7:80:90:f3:9d:93:cc:64:3a:a3:77:9f:5a:39:a2:2f:3d:81:
         ee:6d:b6:d3:75:f8:c0:55:4c:4f:d2:1e:5d:c2:31:9a:e2:9c:
         8c:50:5e:da:26:07:b1:19:78:12:40:79:f9:7f:c4:5a:bf:a7:
         55:f4:9b:4a:a8:d0:3d:c7:48:f6:e2:d1:50:cf:79:96:43:2b:
         23:c7:1a:9a:ca:2d:42:6d:a5:df:0c:7a:ab:67:6d:63:a1:4c:
         fd:e9:5a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:24 2025 by rpki-client