Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f24ecd30-b881-30cd-bcfb-c8d0542aee52.roa
File:                     f24ecd30-b881-30cd-bcfb-c8d0542aee52.roa (raw, json)
Hash identifier:          XIAexVGKKn54bces30FmXbQbAGIKUQD/9p0/2fN56LY=
Subject key identifier:   AC:C0:BB:16:26:57:CF:C0:95:6C:E0:CA:70:48:06:D3:9F:4F:49:75
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F432858494B6421572339DD421C5D3000
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f24ecd30-b881-30cd-bcfb-c8d0542aee52.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     11404
IP address blocks:        67.218.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:21:57:23:39:dd:42:1c:5d:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=50e40de5-ffda-407a-9abf-5f5436a9bf20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c1:e3:14:07:53:70:c9:77:69:f1:ee:9e:14:
                    e9:a4:ab:d2:96:fb:80:83:36:39:82:e1:28:02:0d:
                    ec:d6:0c:88:4b:97:30:ce:a1:f9:7d:38:e2:76:3b:
                    dc:97:86:82:c3:2e:e5:81:41:e3:25:4a:c1:bf:49:
                    6b:35:7f:a3:8b:0d:a2:d5:17:c0:f8:2f:1f:a2:4d:
                    f7:09:9b:c6:7a:e0:95:d9:46:15:6c:3b:ee:4f:e8:
                    b0:b3:3b:1d:47:bb:46:45:24:bf:05:36:92:56:73:
                    96:a2:c6:80:11:e6:b4:02:56:66:e2:96:6e:60:6d:
                    21:bb:ea:67:e2:d1:09:d7:bb:3d:65:cd:6f:59:12:
                    00:a7:ca:6a:af:4e:f7:b6:7d:28:60:9a:0f:9d:0a:
                    98:80:86:26:4e:89:b9:40:f0:49:ca:1a:cb:74:b4:
                    41:6b:bb:93:c4:08:e6:ab:45:01:b0:d2:01:cc:52:
                    5e:d0:e0:39:73:90:ba:50:27:a7:d2:a4:71:fc:b3:
                    8a:b1:2f:e9:63:08:27:6a:39:58:96:10:68:ea:33:
                    d7:f7:a5:06:ed:07:65:84:9c:2b:eb:0b:f7:b2:a9:
                    8b:2f:e0:58:68:3f:d1:4f:2c:0a:b9:7a:ef:2f:4b:
                    31:d9:59:8a:39:f6:ae:34:a9:f9:44:70:5a:98:b3:
                    78:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C0:BB:16:26:57:CF:C0:95:6C:E0:CA:70:48:06:D3:9F:4F:49:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f24ecd30-b881-30cd-bcfb-c8d0542aee52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.218.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:a8:5f:2c:4c:71:2a:59:33:22:c3:ed:1a:7a:99:ef:98:66:
         e1:3b:25:1b:40:3f:6f:f5:83:3c:cd:26:40:02:2d:91:87:50:
         db:57:84:9a:d4:44:20:41:78:d3:cf:81:1b:44:b7:e0:55:b3:
         6b:73:66:e2:69:73:7d:7c:2c:22:f7:71:0b:b9:d1:27:c2:3c:
         2f:bf:ab:e2:5a:a4:ee:5e:ed:47:bc:81:ce:af:3b:fd:01:46:
         8b:f3:6e:c5:b2:89:7c:c3:73:a0:ae:bf:a3:88:47:7b:e9:75:
         34:9e:8e:ef:0e:62:70:a0:c3:6e:83:c6:06:6a:08:92:84:2d:
         93:57:e8:d3:dd:74:88:ef:08:eb:f1:3c:0e:33:7b:cb:e2:68:
         10:41:f3:58:1f:2e:45:7f:8b:21:82:63:cc:41:fd:ed:e6:8c:
         ea:2f:4b:cf:53:c7:0a:c1:ce:8e:1e:02:4a:27:d5:16:86:0a:
         94:09:37:8b:4b:16:db:82:1c:98:5f:e9:41:cb:e8:5a:72:d1:
         57:68:6a:b2:86:c8:b9:03:3d:42:09:81:1c:db:64:85:c1:23:
         3c:bf:67:10:20:24:c1:fc:ba:9c:13:1c:c0:33:3b:58:56:d7:
         9f:85:31:d6:5b:23:2b:6e:14:f6:01:2b:48:0a:c3:41:a1:a9:
         d9:2f:c1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:06:17 2025 by rpki-client