Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/91378d63-a95d-3670-a5df-9ecffe86cc19.roa
File:                     91378d63-a95d-3670-a5df-9ecffe86cc19.roa (raw, json)
Hash identifier:          caMaeF43lv8lG173sCY68ay3s9R6XJ5r2dqokhp4/OM=
Subject key identifier:   06:0F:3B:4C:2F:D2:B5:15:30:59:86:45:7F:2F:4C:0B:FC:46:76:7C
Certificate issuer:       /CN=61939bbc-e50f-4ced-8482-e7c4008e3583
Certificate serial:       010D0C9F432858496FAF10ACC2DC4AADCAB337A4
Authority key identifier: 3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/91378d63-a95d-3670-a5df-9ecffe86cc19.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     397453
IP address blocks:        216.120.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:af:10:ac:c2:dc:4a:ad:ca:b3:37:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61939bbc-e50f-4ced-8482-e7c4008e3583
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=968eaa06-c9fa-4e1e-b7e5-45fa8d10d9d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:50:1d:e0:50:91:6d:7a:ee:9d:fa:ed:48:e5:
                    8d:77:11:26:b7:96:c5:5a:8e:46:0b:a0:5f:2d:85:
                    b2:3c:b0:f4:cd:de:34:f6:6f:f5:41:0b:b1:d1:47:
                    de:29:58:ce:16:7e:4f:9c:46:7e:85:13:ee:7f:55:
                    bb:5e:32:c9:00:a0:9c:01:e6:75:ec:84:72:87:3f:
                    97:09:2f:4e:69:ab:38:75:20:15:20:ce:c1:73:19:
                    cc:e0:07:97:6c:9e:2e:15:51:2d:88:52:35:12:d4:
                    74:85:d9:73:81:fd:b6:c5:78:79:09:fb:2f:9d:a5:
                    45:15:af:24:69:12:f9:6a:b9:34:e3:17:5e:a4:c2:
                    cc:14:ac:5f:2f:69:d5:4a:05:c0:e8:74:db:27:6f:
                    9e:95:13:17:77:8e:00:82:b3:19:e5:e5:0e:53:38:
                    22:0c:fc:65:47:8a:bd:f1:73:f5:64:49:2f:c9:b7:
                    2c:ee:9d:7a:12:6f:87:e5:e6:af:36:da:09:d2:82:
                    b4:37:f2:5f:fd:99:54:59:e6:07:44:85:cb:e4:ed:
                    50:9e:2f:64:1f:b3:bb:93:37:d6:81:3c:db:4e:33:
                    de:78:c0:47:8b:bb:7b:7a:58:a3:72:89:c9:18:c3:
                    98:7a:34:4c:c7:08:53:6c:86:2a:c9:e5:7d:21:ad:
                    ae:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0F:3B:4C:2F:D2:B5:15:30:59:86:45:7F:2F:4C:0B:FC:46:76:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/91378d63-a95d-3670-a5df-9ecffe86cc19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl

            X509v3 Authority Key Identifier:
                keyid:3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.120.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:e1:ce:ca:d9:e7:21:51:99:c3:12:f8:83:c1:cf:74:3f:74:
         0a:85:20:e0:8a:63:fa:54:80:9d:c7:27:93:9d:a2:12:b7:ca:
         f1:80:0b:5c:e4:75:28:aa:03:53:c5:de:35:d3:7d:a6:ca:51:
         0a:b1:c5:88:ec:98:54:1a:04:a0:fb:fe:11:8e:bf:f8:26:24:
         65:8e:d4:0e:a1:4d:79:5e:1c:56:49:e5:a5:27:39:52:95:13:
         9a:83:ad:d4:61:4b:4d:87:d5:75:0f:98:9a:90:30:b1:63:e7:
         79:e0:3f:e7:79:48:0d:ff:2d:2c:ed:a7:8f:6a:0d:e0:9b:f3:
         30:bb:d4:bd:db:5c:69:0a:88:6f:04:ed:26:ee:bb:03:77:46:
         d9:0c:49:cb:69:52:5c:43:cb:2b:c9:1f:54:3c:91:b6:40:78:
         ab:e1:b9:37:e2:1c:9f:73:f6:c4:7d:a4:c7:0d:21:92:64:4c:
         1a:85:f0:63:c4:0d:43:bc:2c:39:04:4e:09:0c:e5:5c:2f:a3:
         75:bc:53:ad:e0:56:a8:15:02:8d:84:f1:0d:bc:5a:3b:72:d6:
         9d:94:73:12:30:2d:f2:6c:76:d4:bf:af:c6:d0:5b:79:89:46:
         21:f1:1c:b1:5a:9b:43:ea:b3:1a:f1:9c:a1:0f:4c:b4:5a:a7:
         c6:72:57:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:54:02 2025 by rpki-client