Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/a662b604-8a40-31fd-848a-cd7f0cad04af.roa
File:                     a662b604-8a40-31fd-848a-cd7f0cad04af.roa (raw, json)
Hash identifier:          rufnAGmV8iFBseWtCAAPztPMkA4WPgzgAyqqvdVYTdI=
Subject key identifier:   CA:12:AD:62:EE:53:C5:34:20:1B:09:5D:2D:36:15:31:45:07:D3:50
Certificate issuer:       /CN=5248b6be-3e69-4e67-8c1c-9f85fde15922
Certificate serial:       010D0C9F43285848F65BD2193FE6FD66E1913C00
Authority key identifier: 5B:92:2A:D2:78:10:1C:9D:3D:E7:DF:B2:09:20:35:F6:D0:75:24:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/a662b604-8a40-31fd-848a-cd7f0cad04af.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     396982
IP address blocks:        204.62.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/5248b6be-3e69-4e67-8c1c-9f85fde15922.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/5248b6be-3e69-4e67-8c1c-9f85fde15922.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:d2:19:3f:e6:fd:66:e1:91:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5248b6be-3e69-4e67-8c1c-9f85fde15922
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=fe141693-7d51-4cb9-a345-e44201df0c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:af:33:0a:22:c9:e6:6a:88:1c:75:b4:9c:c6:
                    5e:15:0c:14:81:99:9d:f9:66:6b:ed:9f:09:64:31:
                    7b:95:e9:56:a4:f1:b2:bb:31:68:46:2e:a5:b1:13:
                    b2:22:b9:40:f7:ac:ce:89:09:ff:50:1c:ea:0d:64:
                    09:f2:82:e7:5f:40:61:35:ed:b8:f7:71:c7:9b:ec:
                    bd:24:96:69:41:5b:28:4e:2b:e8:fb:16:47:58:48:
                    e5:ea:93:04:5d:f0:60:99:f9:b3:84:00:73:8e:8e:
                    4b:3b:5f:75:66:40:68:e1:cb:70:38:35:98:cb:fc:
                    98:c8:8f:57:07:e7:89:a6:a0:a4:0f:c4:30:af:07:
                    4a:8a:05:88:3c:c5:b5:97:32:ca:c9:d3:f3:a0:27:
                    06:50:cc:5a:e3:2e:b3:4a:2c:12:0e:99:d4:f7:86:
                    e2:c2:5b:b5:de:b9:ca:52:4e:da:35:48:66:65:1c:
                    8f:fe:9e:ed:de:6f:b3:fd:e0:0f:aa:af:42:da:2c:
                    d4:c9:35:ac:df:8e:2c:9c:82:95:bd:57:df:87:40:
                    de:81:53:ea:14:0e:e9:ac:77:d9:b5:8a:11:36:be:
                    d4:79:d3:5d:6a:05:a1:75:fe:5a:98:f6:e4:60:76:
                    6e:a5:97:ff:d5:74:9c:a4:64:41:d6:5a:c9:76:56:
                    e5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:12:AD:62:EE:53:C5:34:20:1B:09:5D:2D:36:15:31:45:07:D3:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/a662b604-8a40-31fd-848a-cd7f0cad04af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/5248b6be-3e69-4e67-8c1c-9f85fde15922.crl

            X509v3 Authority Key Identifier:
                keyid:5B:92:2A:D2:78:10:1C:9D:3D:E7:DF:B2:09:20:35:F6:D0:75:24:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.62.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:a7:20:0b:b1:98:d7:63:96:2f:24:6c:14:8e:b4:62:08:83:
         75:df:cd:8d:44:d6:50:7f:00:3b:23:67:5e:bc:d8:4d:a8:01:
         06:1c:35:a8:5f:79:5f:88:89:e8:a2:c9:0d:6f:f1:d2:d4:44:
         11:3e:84:6d:e1:d3:b8:3f:56:3d:d6:7c:be:17:12:0f:ec:3d:
         f5:41:9d:10:95:c8:b8:b4:dc:0e:16:50:c3:e6:f3:23:d5:60:
         da:66:c6:ac:0e:3c:4e:22:5b:4e:9a:f7:d3:c6:69:b8:7b:9e:
         5b:dc:b8:ea:18:40:11:0f:41:83:01:af:01:2a:94:b6:01:a5:
         54:db:76:31:56:2a:c4:08:c4:99:bf:08:3d:35:8d:83:9c:cd:
         13:5f:c4:d7:0b:4a:7c:82:0c:2e:ef:50:68:3f:40:96:b0:16:
         2a:4d:31:b9:8b:99:e6:d1:31:47:bf:8d:d2:07:69:0c:a8:c6:
         94:08:e5:17:f1:8a:27:1e:6f:ad:1e:3f:36:d0:cd:2e:7d:d2:
         54:15:77:04:8b:10:69:74:b0:1b:f0:e5:43:82:39:d3:0d:c3:
         ea:8d:b3:3c:7b:6f:9f:36:fe:58:d8:f2:2f:ad:bc:b9:06:29:
         a1:74:95:5a:63:e9:e8:86:fb:3b:02:f0:c2:81:f9:2a:ce:be:
         9b:f2:f6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:15:28 2025 by rpki-client