Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/be870cf7-5d45-3116-afeb-edc5f5b3ae8d.roa
File:                     be870cf7-5d45-3116-afeb-edc5f5b3ae8d.roa (raw, json)
Hash identifier:          HMTd7kuK5zwQ6v1Bi4NW/t/yXaxGTI11LzBylfk2uPA=
Subject key identifier:   C3:2A:38:75:1C:29:FD:9F:E7:99:DB:7F:50:61:29:52:D8:41:9A:FE
Certificate issuer:       /CN=28d0c262-8ea2-444a-ab1e-6d07c3483e45
Certificate serial:       010D0C9F4328584917DC3168266AD44DB1655C10
Authority key identifier: 7B:FD:21:C3:F3:A0:5F:FC:74:CB:DE:A6:8F:D9:34:04:EC:8B:08:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/be870cf7-5d45-3116-afeb-edc5f5b3ae8d.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     7018
IP address blocks:        216.150.72.0/24 maxlen: 24
                          216.150.74.0/24 maxlen: 24
                          216.150.75.0/24 maxlen: 24
                          216.150.77.0/24 maxlen: 24
                          216.150.78.0/24 maxlen: 24
                          216.150.79.0/24 maxlen: 24
                          216.150.80.0/24 maxlen: 24
                          216.150.81.0/24 maxlen: 24
                          216.150.82.0/24 maxlen: 24
                          216.150.83.0/24 maxlen: 24
                          216.150.84.0/24 maxlen: 24
                          216.150.85.0/24 maxlen: 24
                          216.150.86.0/24 maxlen: 24
                          216.150.87.0/24 maxlen: 24
                          216.150.88.0/24 maxlen: 24
                          216.150.89.0/24 maxlen: 24
                          216.150.90.0/24 maxlen: 24
                          216.150.91.0/24 maxlen: 24
                          216.150.92.0/24 maxlen: 24
                          216.150.93.0/24 maxlen: 24
                          216.150.94.0/24 maxlen: 24
                          216.150.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:31:68:26:6a:d4:4d:b1:65:5c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28d0c262-8ea2-444a-ab1e-6d07c3483e45
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=8c47552c-8f35-4a22-808b-14e6305e0f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2d:97:fd:2d:bf:26:9e:54:0e:33:cd:3c:f2:
                    1e:55:e5:28:3e:d7:1f:63:52:c2:d8:66:26:65:eb:
                    da:79:ee:66:3f:74:de:99:6f:18:fc:6b:b5:1c:ad:
                    50:7c:7d:91:67:c4:be:8d:00:04:93:15:f7:08:9d:
                    85:84:2d:8b:d7:0c:db:23:d7:37:46:ec:4e:45:3c:
                    44:70:30:0a:a0:7a:24:f1:3d:6c:e1:c4:2a:06:19:
                    38:85:9a:1e:a5:14:01:dc:cd:c8:c5:2c:b4:d4:28:
                    1b:06:11:64:04:0b:b4:ed:0f:05:95:aa:be:a7:f4:
                    10:fb:b3:a0:1b:c2:6e:e5:fd:82:48:2a:3c:69:ac:
                    ca:27:99:57:04:7c:94:bd:21:35:6a:86:67:c4:9b:
                    c7:a4:fe:02:32:f0:3e:0d:0a:39:8b:7b:2b:05:ea:
                    dc:57:c3:4a:e7:db:47:20:96:bc:f4:8d:24:22:a4:
                    7f:2c:d5:c1:92:f3:07:57:6b:f5:25:1e:02:28:2b:
                    f9:ee:e5:92:6a:d3:99:d3:30:e4:ec:1d:47:49:30:
                    b1:74:61:32:ea:04:f5:24:9e:54:c3:d3:05:68:49:
                    88:a9:62:23:9b:a8:c1:62:dc:a4:27:21:17:59:79:
                    ba:bb:c7:16:cd:95:2d:eb:a5:0e:4b:4a:f4:a1:6e:
                    45:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2A:38:75:1C:29:FD:9F:E7:99:DB:7F:50:61:29:52:D8:41:9A:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/be870cf7-5d45-3116-afeb-edc5f5b3ae8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.crl

            X509v3 Authority Key Identifier:
                keyid:7B:FD:21:C3:F3:A0:5F:FC:74:CB:DE:A6:8F:D9:34:04:EC:8B:08:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.150.72.0/24
                  216.150.74.0/23
                  216.150.77.0-216.150.95.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:a6:99:23:20:25:d4:63:79:bb:8d:87:30:e3:a4:19:16:a1:
         09:ce:c3:8f:55:bc:59:e3:79:90:0b:79:92:a7:0d:03:79:f6:
         ed:52:db:1c:19:a4:d4:2f:c5:43:cf:ea:ac:36:a6:0d:66:03:
         e0:8e:a6:db:24:05:94:f3:f5:19:c1:1c:89:fe:ea:1f:72:a0:
         2d:9a:e7:ae:fb:9a:e4:83:00:11:8b:68:fa:f2:4a:62:60:7f:
         19:3b:cc:3e:9a:c6:b9:42:a5:2d:04:3e:8f:6b:73:d9:e7:5f:
         13:cf:27:b0:7a:6c:80:35:71:cd:d4:b9:78:46:11:41:91:1e:
         68:71:70:14:b5:ae:6e:f6:d6:e7:c4:6d:1f:c6:b2:58:2e:34:
         a9:8b:67:27:81:95:da:ef:d3:6d:7a:8e:0d:0e:f3:c9:dd:37:
         a3:73:d9:8e:1c:7e:05:0d:ec:06:f4:24:09:96:a4:35:53:cb:
         02:55:cd:71:6d:83:c3:7e:39:19:d2:f5:cf:4b:5f:de:92:08:
         86:04:dd:d2:94:e5:ce:f7:97:c5:bd:17:7d:c9:29:90:16:f2:
         b5:c6:d3:39:2f:07:ae:41:73:06:e9:5e:ee:50:09:d7:63:05:
         0d:0d:8a:e2:89:e2:95:78:73:ec:61:08:be:3a:38:0a:f1:9e:
         37:37:35:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:20 2025 by rpki-client