Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/099a6177-074f-3801-a40d-53cbd0937cc0.roa
File:                     099a6177-074f-3801-a40d-53cbd0937cc0.roa (raw, json)
Hash identifier:          MlHz+ayPKcG08mW17M7tdPu7otKKU3tryxXUSYVmFbI=
Subject key identifier:   D8:03:BF:A6:1F:5E:BB:35:45:82:9B:1C:BC:D2:FD:BC:63:5D:68:3E
Certificate issuer:       /CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b
Certificate serial:       010D0C9F43285848A830B1984C4D015653E6DEC4
Authority key identifier: 90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/099a6177-074f-3801-a40d-53cbd0937cc0.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        216.205.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:b1:98:4c:4d:01:56:53:e6:de:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=cf4fa5bc-e29a-4449-a0dd-0e4b733b7b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:04:3e:85:f6:ca:ca:dd:05:9f:e1:16:f5:a5:
                    45:a2:19:b1:29:d7:20:f2:c0:7e:e6:b7:3d:29:b8:
                    5a:e6:b0:94:d4:7b:8d:f8:33:a5:b0:bb:43:e8:a1:
                    12:07:53:5f:ff:2f:01:cf:81:5f:43:c1:13:65:89:
                    b3:e0:ca:e5:e0:ed:80:24:7e:70:2b:ea:c7:fb:75:
                    65:fc:08:28:07:4e:75:6f:7f:ac:60:e1:ec:50:f8:
                    ac:92:4e:f0:ac:dd:ea:f8:b4:42:78:d7:a3:f2:98:
                    f6:36:37:4a:75:d0:69:15:aa:7e:f7:b7:e6:43:8d:
                    a9:c4:60:e0:81:de:59:d8:de:97:e6:59:db:10:b5:
                    e7:a8:2f:52:b6:e5:57:93:a3:46:5d:ec:d0:a3:6b:
                    0a:04:35:37:bc:e6:0a:64:dc:14:d9:06:e3:4e:de:
                    c1:03:8c:d9:10:1e:66:fb:2a:d9:fa:15:67:94:26:
                    56:43:df:3a:7f:a6:f1:a6:38:b6:18:87:00:fd:a2:
                    88:7a:67:64:7e:96:db:4d:69:5b:3a:a2:7a:d7:95:
                    de:10:b2:d5:03:97:98:22:df:55:88:09:51:09:cb:
                    9f:1b:65:0e:35:56:52:4a:34:56:2e:f6:9c:b9:3c:
                    eb:ba:59:ec:3d:99:5a:fd:fb:de:ce:ed:5c:11:a8:
                    bc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:03:BF:A6:1F:5E:BB:35:45:82:9B:1C:BC:D2:FD:BC:63:5D:68:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/099a6177-074f-3801-a40d-53cbd0937cc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl

            X509v3 Authority Key Identifier:
                keyid:90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.205.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:c4:68:7e:2d:5f:b0:60:7a:1c:87:f1:a8:0a:d4:d7:f0:07:
         c5:0e:68:1b:c6:46:2f:0c:a9:bb:db:61:8f:dd:0a:f4:77:81:
         38:5a:fb:f4:0e:7b:e8:7b:61:d4:ad:ed:f2:8a:88:b3:74:0d:
         7d:ac:8f:43:6b:fc:21:f5:72:e2:de:aa:2e:81:ea:5b:83:53:
         cf:f8:81:64:b1:7d:bf:c8:0c:df:3e:0b:67:1d:68:a7:bf:23:
         eb:0b:d6:b7:e5:f4:4e:4d:67:3a:8e:d6:da:96:37:fd:e8:73:
         7a:d1:ae:de:76:73:34:b2:ee:cc:56:12:60:d4:ca:d5:89:cd:
         6d:7b:9f:4b:95:a4:eb:82:99:3d:2c:f6:26:3d:27:cc:d1:a5:
         17:10:3d:ff:fc:44:19:b0:9c:36:68:32:c6:c7:ec:ae:68:8c:
         ef:96:9e:a8:82:13:f4:43:43:3c:7b:59:4e:ef:91:25:83:a0:
         64:10:bf:a4:a2:a9:63:84:19:df:6a:32:85:15:90:29:bf:bd:
         45:5c:79:d7:4d:70:99:7d:b5:de:2d:c3:fd:8f:91:71:95:b5:
         60:51:3f:7c:94:a3:bd:c1:27:59:f5:76:95:52:1e:3d:c2:b1:
         db:cf:d0:74:9a:fb:88:5a:fb:d4:8a:a7:eb:ac:d1:0b:12:4b:
         29:fa:1a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:06:44 2025 by rpki-client