Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7e3a02d1-78da-3e9b-96f6-0936d6fbeea4.roa
File:                     7e3a02d1-78da-3e9b-96f6-0936d6fbeea4.roa (raw, json)
Hash identifier:          5d5hz0bdCTV9eLYzWGzFatXrbKLbpVbkP3G37Ihc29M=
Subject key identifier:   21:E1:E8:01:52:3B:A2:B4:08:44:A7:5B:50:4E:86:84:43:CC:B3:E4
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F432858494B6431A7729391C252B34860
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7e3a02d1-78da-3e9b-96f6-0936d6fbeea4.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     395492
IP address blocks:        216.243.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:31:a7:72:93:91:c2:52:b3:48:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=ef56b984-cf59-490e-92c4-d4b5778691d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:de:fc:49:87:53:77:c9:0e:71:bb:96:b3:8c:
                    bd:bf:1a:ef:81:8c:76:58:8c:5e:91:b2:32:a6:9e:
                    1b:7f:b4:2e:50:e3:0a:72:6c:a3:ca:8b:0a:bf:42:
                    ed:cf:52:dd:e4:5c:6c:33:12:1a:2b:9d:5f:e0:93:
                    3a:8d:b1:a8:a0:a8:65:db:52:73:f7:26:d4:9e:52:
                    db:05:09:6b:c2:45:5b:c1:1b:64:d1:0e:f9:c2:e0:
                    ad:6e:60:5e:cd:2b:aa:bc:3a:1f:0d:06:ac:6a:e2:
                    f8:01:93:49:d9:9d:3c:84:90:09:be:a4:bf:72:c8:
                    ac:57:70:03:23:cc:91:80:36:af:86:78:35:91:c0:
                    e2:a4:b5:2d:e0:1c:59:de:8c:30:c5:7b:b7:b3:23:
                    7b:eb:11:4d:4a:74:98:a3:e4:e0:9d:e3:13:06:b2:
                    b8:ed:a2:73:29:ea:6f:2f:c2:63:ee:56:5b:2b:af:
                    ba:83:ef:58:45:3d:fe:af:1d:92:39:2d:b9:66:f1:
                    a7:3e:3a:5c:8b:2c:5a:d0:6d:b9:e2:1c:9d:73:54:
                    c6:7c:25:08:4f:61:65:38:34:79:6d:f5:ee:6d:61:
                    cb:0e:e9:8e:58:ee:04:88:06:6c:87:2d:52:d1:09:
                    b7:8c:92:d0:46:77:18:ee:0f:73:5f:e8:95:3b:98:
                    de:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E1:E8:01:52:3B:A2:B4:08:44:A7:5B:50:4E:86:84:43:CC:B3:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7e3a02d1-78da-3e9b-96f6-0936d6fbeea4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.243.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:61:92:d7:3e:ad:e2:05:25:be:1a:1c:5c:c7:6a:ea:be:a4:
         fa:2f:5e:92:66:ec:f7:bb:c0:dc:16:61:6b:63:b0:39:6f:18:
         aa:a3:db:9b:e3:63:19:4e:2e:2d:f0:88:44:52:df:bb:d0:3c:
         d3:5d:c4:1a:d8:19:f7:c0:c9:ef:6c:bd:f9:5d:a0:c8:2f:9a:
         3e:4b:3e:d9:9e:be:4a:34:e9:cc:18:0f:07:a9:5a:b3:8d:e7:
         de:32:9f:90:fb:40:e9:66:1b:9a:6c:49:66:08:81:d4:d8:a5:
         ab:39:bc:8f:69:d0:81:7e:b0:09:a1:6a:46:f5:36:a0:87:45:
         28:04:bc:54:18:ec:77:2a:d0:0a:a0:48:8d:40:fc:2f:a9:ad:
         19:e2:8e:32:09:08:91:fa:aa:ec:a5:55:5a:08:64:36:11:81:
         03:2e:8d:d1:c8:0e:43:9e:b8:a5:de:dd:e3:05:10:2b:71:8c:
         53:45:0c:0f:df:fb:33:c1:51:4c:bb:f6:b9:69:dd:75:b6:47:
         06:f7:2b:24:6b:c2:d8:94:ca:24:82:f3:c2:46:d9:ec:37:c0:
         fe:24:e1:ee:cd:02:90:39:46:55:9b:08:8e:3c:13:1e:fb:db:
         65:24:12:a7:5f:c2:be:97:3b:84:26:aa:2f:53:64:44:85:a5:
         14:d0:87:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:50:43 2025 by rpki-client