Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7/31044689-5617-3cd5-a65d-c714e253e409.roa
File:                     31044689-5617-3cd5-a65d-c714e253e409.roa (raw, json)
Hash identifier:          A5yytc4aBktZV5+4hZC9RGomLD2npYT8id6kWzR0Gi0=
Subject key identifier:   81:62:EF:AF:12:17:34:D5:DF:C0:44:CA:A0:F6:06:D1:21:58:DD:BD
Certificate issuer:       /CN=a3fc976b-6294-4c7f-adf9-0a124c38f9a7
Certificate serial:       010D0C9F43285848A6CB6757F24E615DA108E280
Authority key identifier: BC:48:F4:17:89:7B:A1:47:3A:31:97:75:CD:A6:4D:B8:00:A8:ED:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7/31044689-5617-3cd5-a65d-c714e253e409.roa
Signing time:             Fri 24 Jan 2025 14:00:52 +0000
ROA not before:           Fri 24 Jan 2025 14:00:52 +0000
ROA not after:            Thu 24 Apr 2025 13:00:52 +0000
asID:                     399111
IP address blocks:        216.73.136.0/22 maxlen: 32
                          2607:3cc0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a6:cb:67:57:f2:4e:61:5d:a1:08:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3fc976b-6294-4c7f-adf9-0a124c38f9a7
        Validity
            Not Before: Jan 24 14:00:52 2025 GMT
            Not After : Apr 24 13:00:52 2025 GMT
        Subject: CN=cd759566-5056-42fa-b201-c359c115143e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2e:15:06:87:42:ab:f1:d3:ad:4f:5c:22:2a:
                    70:d5:00:36:e1:1d:8e:00:8f:2f:50:df:58:25:ae:
                    f1:9d:01:ca:19:62:d3:ad:ae:70:ab:73:e6:fd:0a:
                    26:8c:0f:cf:03:14:ae:36:bf:bd:67:fd:49:c8:f5:
                    34:f6:94:ed:06:d6:15:74:a3:6f:1f:01:ef:84:07:
                    5c:ba:5f:75:cb:f8:d8:7a:f3:2d:b4:34:4d:a1:a1:
                    2e:be:01:5d:a5:b5:52:c8:07:ed:ea:b5:27:fc:96:
                    2d:47:d3:8a:2f:b1:f0:e3:2b:9a:53:67:c1:7e:3e:
                    77:6a:92:2d:82:cc:e4:e5:82:61:85:6e:91:20:41:
                    24:09:60:31:8a:33:33:b0:ea:5b:9f:f5:0c:27:68:
                    66:11:c0:08:88:4a:75:d3:f5:d0:f0:ad:9e:98:bc:
                    c2:17:1d:c7:b1:9d:6f:a6:c9:47:1d:44:6b:99:6e:
                    d5:78:c1:9a:e0:fd:d4:50:5c:28:c0:cf:90:5c:07:
                    f1:91:65:d0:42:9c:61:b3:9d:b9:3b:63:ce:4b:f5:
                    e4:07:c5:11:8b:3c:c8:eb:b2:4f:7b:d6:df:68:e1:
                    9b:a5:3a:60:88:40:54:11:56:83:17:c3:6f:f0:e1:
                    71:f7:9b:01:cb:2e:2c:f1:bc:91:7e:78:32:7e:cd:
                    00:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:62:EF:AF:12:17:34:D5:DF:C0:44:CA:A0:F6:06:D1:21:58:DD:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7/31044689-5617-3cd5-a65d-c714e253e409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.crl

            X509v3 Authority Key Identifier:
                keyid:BC:48:F4:17:89:7B:A1:47:3A:31:97:75:CD:A6:4D:B8:00:A8:ED:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.136.0/22
                IPv6:
                  2607:3cc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:e5:89:60:91:20:d2:93:aa:8a:d9:1f:5e:de:40:2a:dd:ce:
         c5:aa:a8:39:d5:a6:dd:53:61:bd:93:17:42:80:1c:61:c1:b4:
         17:2c:5b:50:8e:9e:52:df:3b:f6:59:93:ae:d1:a9:92:c5:b1:
         2a:60:52:a1:19:0d:16:ff:85:16:2b:5a:98:73:a9:1a:80:3b:
         3b:4a:41:5a:71:cc:f2:8e:0f:c0:4c:1a:7a:2b:4e:1f:e5:0f:
         7f:e8:9d:d3:63:33:3e:3f:04:fe:3c:23:6a:82:59:6f:2e:12:
         29:87:84:31:aa:2a:30:00:4a:ff:0f:f6:f5:85:be:08:75:cd:
         ca:99:59:30:81:fd:ee:64:65:eb:f5:72:40:e6:db:2a:da:aa:
         c8:85:f3:b7:11:70:12:87:2e:e5:f3:ab:12:3c:f3:04:d4:68:
         f3:f7:e7:15:e8:4d:c4:7a:be:b6:90:46:5b:1e:0d:80:61:4a:
         1c:44:80:6f:d4:52:33:7d:5f:14:22:a5:cf:bb:1d:87:0e:5b:
         80:39:aa:06:96:e3:0e:60:25:41:7a:3a:a3:0e:41:e8:9f:2d:
         13:4d:96:a6:89:68:7e:ab:bb:9c:0c:45:8a:e5:11:b2:33:63:
         6e:d8:68:57:60:3c:c4:77:2d:4a:d2:8c:c7:d4:5f:cf:86:b2:
         ae:d0:99:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:18 2025 by rpki-client