Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/726827c4-59ed-3868-b71b-ddd0717211e6.roa
File:                     726827c4-59ed-3868-b71b-ddd0717211e6.roa (raw, json)
Hash identifier:          vQyXwqxx1sQTaXqNWYwIF52zPAgmwY6yih70aF9vccE=
Subject key identifier:   26:DC:DB:4D:50:1D:F2:02:36:24:7B:69:09:5D:85:05:7F:AE:F0:1E
Certificate issuer:       /CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
Certificate serial:       010D0C9F43285848451573579C1FB36E0B4D2100
Authority key identifier: 9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/726827c4-59ed-3868-b71b-ddd0717211e6.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     14618
IP address blocks:        216.24.225.0/24 maxlen: 24
                          216.24.226.0/24 maxlen: 24
                          216.24.227.0/24 maxlen: 24
                          216.24.228.0/24 maxlen: 24
                          216.24.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:73:57:9c:1f:b3:6e:0b:4d:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=260352c1-6cd1-42b8-b5e8-99032824272d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:24:7f:ed:a5:0d:1f:e2:a3:d8:9b:bd:9c:9f:
                    61:10:e2:8e:20:e9:78:05:7a:59:09:4d:ef:2b:ac:
                    f6:42:d2:f5:5a:0d:c4:b7:a1:3e:b1:20:dd:19:8e:
                    f2:af:ad:91:f6:b6:d5:d1:63:45:88:46:38:04:7e:
                    58:00:9f:1d:23:48:c4:ca:9c:71:93:55:a4:5d:91:
                    32:75:60:57:a4:25:6f:54:2d:da:87:b0:59:f7:c4:
                    e5:71:2a:51:df:27:24:9b:fd:34:ee:6d:e3:9c:d4:
                    d4:b0:71:a8:3e:f7:48:ba:d0:26:3f:94:d9:cd:c3:
                    18:fc:87:02:03:c4:13:2a:bd:2a:dd:0d:56:9c:18:
                    c3:d7:db:48:b0:4b:05:e6:d4:03:d3:c1:19:62:2f:
                    ce:8c:e1:cd:3e:6e:e4:e3:64:9c:96:e0:f6:ad:6f:
                    3d:1c:7b:5d:c5:ce:35:83:f2:79:bb:31:fd:fd:18:
                    d5:24:03:0d:e8:2c:c1:ae:15:72:a9:43:93:cc:a2:
                    74:3a:cf:98:1a:f4:6b:8c:35:a6:5a:d2:df:82:49:
                    77:df:34:b6:c6:db:a9:63:78:0c:3c:ae:2f:48:f0:
                    d6:1a:06:df:f3:ce:40:aa:cf:c9:ae:bb:a7:9c:12:
                    c6:4e:ec:65:31:d0:d4:7c:06:33:73:2a:27:73:81:
                    9b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DC:DB:4D:50:1D:F2:02:36:24:7B:69:09:5D:85:05:7F:AE:F0:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/726827c4-59ed-3868-b71b-ddd0717211e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl

            X509v3 Authority Key Identifier:
                keyid:9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.225.0-216.24.229.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:78:79:87:48:26:a3:a1:ad:fb:da:e1:f4:40:3a:6b:fe:f2:
         59:3c:f1:02:3a:43:fd:b6:4f:05:b1:11:e0:e4:4c:bd:f2:04:
         43:8b:b7:d3:af:ef:ce:d0:24:ce:91:3f:0e:a5:98:94:d4:f5:
         84:02:36:0c:51:cb:ce:bd:79:b5:d3:22:f8:d8:f3:ab:3c:a7:
         92:64:56:a8:7f:06:ff:e3:0a:af:62:ec:39:f7:66:58:c6:b9:
         d6:9c:d8:0c:43:57:df:22:1e:a0:d8:fe:d0:7c:81:d4:59:44:
         f6:50:e6:cb:fe:6a:eb:f9:a3:a3:e9:b7:dc:82:32:86:83:ad:
         a6:08:64:d7:1a:6d:eb:26:9b:b4:df:fb:58:85:66:b0:4b:5c:
         bc:60:2e:ce:c9:c8:f2:00:de:39:07:f5:61:31:80:ad:1a:e2:
         19:6d:dd:64:01:ad:5b:be:50:fc:68:26:39:0b:b7:a5:27:ab:
         de:23:81:c0:4e:ed:58:21:08:f2:9f:36:13:db:5e:0f:81:dd:
         55:6d:57:90:09:f1:dd:c4:de:ae:e4:47:af:66:cc:74:cb:7e:
         f5:86:77:80:02:15:50:e7:8b:87:56:1e:0f:7a:2b:7e:dd:08:
         d4:85:03:f6:af:b3:11:43:d6:30:63:54:b6:6f:81:a1:38:6e:
         a3:a7:58:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:09 2025 by rpki-client