Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df40300-8848-4804-b649-542a9282fc5a/58ed16bf-b56a-3053-b4df-89344ad4388f.roa
File:                     58ed16bf-b56a-3053-b4df-89344ad4388f.roa (raw, json)
Hash identifier:          uspkinW4fApcphLkFSPbwFxxRXrsc/1hIAO3KSiJb5A=
Subject key identifier:   D5:43:5E:45:7D:12:66:E5:0A:94:7D:37:EC:4F:AE:9F:1B:87:EB:76
Certificate issuer:       /CN=1df40300-8848-4804-b649-542a9282fc5a
Certificate serial:       010D0C9F43285848F65BD43868BF6516261794C0
Authority key identifier: 57:1F:F8:FA:73:44:CF:A1:D9:BC:8A:97:81:47:9D:B3:D5:4D:F9:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df40300-8848-4804-b649-542a9282fc5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df40300-8848-4804-b649-542a9282fc5a/58ed16bf-b56a-3053-b4df-89344ad4388f.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     12266
IP address blocks:        216.229.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df40300-8848-4804-b649-542a9282fc5a/1df40300-8848-4804-b649-542a9282fc5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df40300-8848-4804-b649-542a9282fc5a/1df40300-8848-4804-b649-542a9282fc5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df40300-8848-4804-b649-542a9282fc5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:d4:38:68:bf:65:16:26:17:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1df40300-8848-4804-b649-542a9282fc5a
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=886f07b3-a307-49e1-9d32-17488b99206d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bf:4f:fa:b0:79:bf:8a:d0:0a:73:6b:b5:1b:
                    ea:f4:c2:98:42:8e:61:57:a1:25:02:87:12:d0:05:
                    5f:be:45:33:38:2a:8a:cf:31:7b:00:fc:45:68:b7:
                    6b:a6:3e:fd:d5:ad:a2:c2:98:09:c9:b9:35:ef:91:
                    75:6a:e0:28:48:cc:ad:a5:a1:98:30:cf:4e:02:45:
                    6c:e5:b9:35:84:59:e9:be:f5:0d:cd:60:57:e6:1a:
                    f2:e6:86:17:a8:c6:e7:7f:85:03:51:91:d1:d6:79:
                    f8:c5:33:d2:40:43:9b:8b:d0:f2:02:5e:50:11:75:
                    39:f0:49:25:34:24:18:6e:3c:21:da:47:db:0a:e5:
                    e0:c2:11:ce:16:62:e3:83:64:16:7a:d1:7d:4e:4d:
                    93:1e:78:0f:38:18:21:6d:91:b1:07:ae:79:20:49:
                    8b:b3:01:5b:a1:c0:70:0a:d3:8f:d5:e5:6e:08:66:
                    02:b2:90:62:1d:c6:e8:03:ef:fa:83:5a:c3:7d:72:
                    e1:7f:c1:64:a6:ff:63:42:3e:4b:bb:28:df:79:e7:
                    25:7f:4d:f1:82:e1:84:10:60:3c:47:00:f9:86:24:
                    23:fa:d0:9c:30:34:57:75:a0:bc:05:d0:e1:37:9d:
                    38:b9:9c:67:69:d8:cb:85:b0:62:6b:ce:81:ba:5a:
                    81:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:43:5E:45:7D:12:66:E5:0A:94:7D:37:EC:4F:AE:9F:1B:87:EB:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df40300-8848-4804-b649-542a9282fc5a/58ed16bf-b56a-3053-b4df-89344ad4388f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df40300-8848-4804-b649-542a9282fc5a/1df40300-8848-4804-b649-542a9282fc5a.crl

            X509v3 Authority Key Identifier:
                keyid:57:1F:F8:FA:73:44:CF:A1:D9:BC:8A:97:81:47:9D:B3:D5:4D:F9:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df40300-8848-4804-b649-542a9282fc5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.229.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:c7:ff:ee:5e:6a:19:27:99:c4:63:32:aa:39:39:8d:e2:f3:
         35:66:ce:21:84:6a:2e:24:b7:b6:a1:cd:60:fb:ac:c8:6e:5c:
         5d:cf:89:48:19:0a:60:0b:60:33:b9:66:20:60:e1:8f:97:89:
         5b:9e:6e:24:b2:e8:e9:f6:44:ba:7d:0f:ef:3d:b9:10:f4:d5:
         c9:ba:ee:1f:f8:ac:d5:36:4b:74:64:cb:1c:bd:da:c0:60:dd:
         53:db:39:c4:61:f2:9f:4d:b4:bc:04:94:22:b8:d8:12:f2:02:
         25:69:ab:e7:90:c7:c3:c6:58:03:f3:de:34:c8:53:13:b3:73:
         f0:02:bf:88:97:e9:aa:c3:1d:3c:35:64:06:4e:2c:a3:60:01:
         5d:c7:7f:b3:96:aa:b9:b4:c8:a4:fb:87:85:60:36:9d:61:3f:
         f4:05:60:cd:55:10:33:02:7c:ae:21:7d:00:c5:61:e6:0b:6f:
         8b:ae:28:c9:6b:00:bf:0a:3a:40:3d:a7:c8:38:1e:37:c6:2b:
         b6:84:c4:8f:31:0d:a7:8f:53:52:44:14:df:d6:2f:04:19:25:
         ba:1d:1a:3a:24:a8:4e:3f:57:54:a0:d9:66:54:45:39:84:b2:
         b5:b9:e9:2c:53:de:b8:ee:88:2a:b0:52:a6:07:94:7d:a2:c2:
         a0:1c:03:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:24:31 2025 by rpki-client