Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/2f4d68a2-02ee-3b78-97bd-f8cdbd0f6232.roa
File:                     2f4d68a2-02ee-3b78-97bd-f8cdbd0f6232.roa (raw, json)
Hash identifier:          uR7ytvBUoHn541HBIBcLk32Lg3w/WvkggzpvcCvVT1c=
Subject key identifier:   3E:31:48:0E:BD:4A:EE:1F:28:72:83:14:2E:AF:84:A2:F2:7E:85:0E
Certificate issuer:       /CN=397724ba-b516-4bac-893a-fcaae9e60f35
Certificate serial:       010D0C9F43285849244E8132FEA77ECBBA654CA0
Authority key identifier: 1D:42:77:C5:31:A9:37:CC:E7:05:AD:CF:2B:3B:6B:3F:B7:EA:2C:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/2f4d68a2-02ee-3b78-97bd-f8cdbd0f6232.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     11686
IP address blocks:        96.4.0.0/15 maxlen: 32
                          207.191.176.0/20 maxlen: 32
                          2610:128::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/397724ba-b516-4bac-893a-fcaae9e60f35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/397724ba-b516-4bac-893a-fcaae9e60f35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:81:32:fe:a7:7e:cb:ba:65:4c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=397724ba-b516-4bac-893a-fcaae9e60f35
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=e6320b5b-a795-4dd1-aa69-cc62408a5c03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d5:83:09:98:00:ae:42:0d:49:80:f0:77:c2:
                    63:89:bf:4b:f8:27:9d:d1:da:1b:d6:c4:3e:d6:87:
                    ab:98:cf:29:13:d1:a6:49:1a:b0:49:94:62:18:4e:
                    e9:94:48:76:07:45:6c:58:04:91:3f:da:f8:fe:cb:
                    95:36:f1:d5:d7:9c:5c:a0:de:7b:05:e2:d8:1d:22:
                    59:80:72:85:98:fd:be:63:37:4e:ba:39:c3:2a:ca:
                    20:de:b7:6d:41:2a:e6:8f:ee:cc:24:72:0e:7b:2e:
                    89:d2:e2:e8:41:7d:94:03:18:23:14:24:a1:e4:fc:
                    1a:c9:45:bc:22:96:39:d2:76:c0:0b:48:c9:c9:db:
                    05:e8:fe:47:41:9f:bf:09:d2:e4:8d:14:20:9c:ec:
                    04:09:97:2b:67:d4:12:33:ee:d9:a8:0a:b5:4c:c8:
                    1e:f5:53:60:7e:6e:9f:7f:ca:bf:1f:02:6f:64:42:
                    79:54:6d:ac:c2:da:f7:0a:43:33:24:25:f1:23:eb:
                    71:d0:3a:3c:82:6d:f2:4d:08:cf:03:ad:87:2b:be:
                    8d:f8:e7:28:35:c9:8b:79:52:c1:cd:3c:33:8a:8e:
                    67:70:14:41:0d:77:e8:fb:e1:43:5c:f6:9b:5c:7a:
                    33:40:09:75:2a:e7:a0:1f:10:4b:f1:e9:ac:af:cc:
                    4a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:31:48:0E:BD:4A:EE:1F:28:72:83:14:2E:AF:84:A2:F2:7E:85:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/2f4d68a2-02ee-3b78-97bd-f8cdbd0f6232.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/397724ba-b516-4bac-893a-fcaae9e60f35.crl

            X509v3 Authority Key Identifier:
                keyid:1D:42:77:C5:31:A9:37:CC:E7:05:AD:CF:2B:3B:6B:3F:B7:EA:2C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.4.0.0/15
                  207.191.176.0/20
                IPv6:
                  2610:128::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:c2:8a:20:e6:49:82:33:d8:48:d3:34:78:7c:c7:38:01:df:
         f5:17:17:dc:3f:7c:4a:38:aa:68:66:d8:67:2f:0f:1d:c9:05:
         7b:3a:7c:3b:11:3c:94:92:0a:6d:d2:af:ed:be:d3:fd:0b:be:
         f7:ee:d7:63:e0:b9:2d:d0:fc:16:16:90:11:c5:50:13:ad:25:
         e9:1e:84:8c:ee:38:74:bd:8b:6a:16:7d:d9:7b:c8:b7:8e:8d:
         88:cf:fa:e9:83:c7:c0:67:d5:a0:ca:ec:9d:a1:0d:2f:6e:47:
         56:ca:66:7c:bd:7b:40:66:04:0c:34:66:7a:72:a7:01:87:05:
         cd:18:6e:36:f9:1d:f5:a4:74:03:fd:b5:76:4f:d8:68:30:b6:
         af:f9:5b:e4:10:d6:2a:bd:62:71:1a:f1:b6:2a:03:6f:62:40:
         2b:5f:5c:6b:d5:40:cf:27:86:f0:dc:2b:3c:67:53:db:2b:e1:
         aa:6c:19:72:ec:75:96:22:b3:37:9c:ea:7d:cd:18:37:dc:70:
         a4:f0:79:15:e7:08:96:b9:e9:53:e2:2d:90:29:ed:d6:8a:d7:
         43:6a:80:f1:e0:48:27:b5:77:a1:c4:23:ac:af:3a:2b:97:f3:
         a3:53:96:6c:53:03:ce:61:c4:21:2c:e8:da:96:d9:b6:a4:d7:
         bc:53:44:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:07:26 2025 by rpki-client