Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/2e3a3ab9-357d-3aac-b443-a642499d1c7d.roa
File:                     2e3a3ab9-357d-3aac-b443-a642499d1c7d.roa (raw, json)
Hash identifier:          tHupr2j0JnKnZ9RGZr4WG7aQUXu29SqXr780fizPfrE=
Subject key identifier:   3E:C6:CC:10:94:B4:87:44:FC:AB:27:2E:82:85:01:3E:47:C4:2A:C9
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F432858494F93EB838A3A4D8B877CA800
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/2e3a3ab9-357d-3aac-b443-a642499d1c7d.roa
Signing time:             Wed 26 Mar 2025 01:00:40 +0000
ROA not before:           Wed 26 Mar 2025 01:00:40 +0000
ROA not after:            Tue 24 Jun 2025 01:00:40 +0000
asID:                     852
IP address blocks:        216.180.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4f:93:eb:83:8a:3a:4d:8b:87:7c:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Mar 26 01:00:40 2025 GMT
            Not After : Jun 24 01:00:40 2025 GMT
        Subject: CN=92ad3a56-85e4-46ec-b441-c21deb01af26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:95:60:81:9b:87:66:27:43:fe:3e:c9:91:37:
                    f6:ba:f8:97:9e:8e:06:0f:f0:0a:75:a4:cc:6c:7c:
                    84:24:ee:e2:e6:d6:23:6c:71:f6:29:ba:14:a9:91:
                    8a:17:88:ff:2d:af:68:f9:3d:0c:23:7f:aa:c5:52:
                    95:ef:03:4a:a6:47:12:70:35:79:14:7b:d4:9d:5f:
                    0c:11:27:d0:bb:97:fa:bd:36:f8:5a:73:2b:af:71:
                    3c:5b:7d:4e:2a:a6:11:41:52:78:a1:91:e9:68:f6:
                    ae:dc:e0:cd:d9:df:34:a5:3d:9f:8f:ae:c1:ed:c1:
                    64:11:aa:e1:0b:7e:da:59:25:c4:47:d6:7d:e3:9a:
                    0a:da:bd:90:d2:c9:44:fa:7d:be:a5:3e:71:1b:3e:
                    69:19:4c:18:d3:d4:98:4a:f9:a8:b8:0e:21:60:ec:
                    27:b9:96:c8:89:a6:5b:3c:57:04:d4:58:fa:63:16:
                    ad:49:18:66:44:55:f9:13:69:50:7e:8f:f6:96:f8:
                    90:cf:16:db:d1:f8:29:1b:ca:fa:bd:76:38:f6:c4:
                    b4:e4:f7:b7:06:e6:75:55:ac:c8:38:14:c7:9e:89:
                    f7:33:ce:dd:9c:dc:4c:c3:4b:18:0c:d1:30:8a:41:
                    8c:f7:30:2f:9e:ce:85:64:e9:41:b8:9d:19:7f:ec:
                    5d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C6:CC:10:94:B4:87:44:FC:AB:27:2E:82:85:01:3E:47:C4:2A:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/2e3a3ab9-357d-3aac-b443-a642499d1c7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.180.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:90:93:ec:4d:45:1a:48:08:7a:c1:1c:4f:26:49:49:62:78:
         e5:50:2e:1b:d2:a6:6b:1a:db:8f:0e:2a:4c:f0:7c:7d:71:ad:
         06:10:c8:ef:17:58:e8:6d:72:36:35:30:ca:fc:4d:27:b5:14:
         eb:83:df:05:75:41:4f:8d:66:45:b1:e2:23:2b:6a:73:44:61:
         1e:54:e5:82:35:8d:a3:1c:bf:90:a7:7f:5e:8d:ab:e6:3b:35:
         c8:8c:d0:2b:03:af:25:cc:0b:79:05:26:89:3f:68:4b:dd:33:
         fb:7b:ae:d7:05:b5:7a:45:f2:3b:72:e2:40:8a:a2:00:08:b3:
         bc:16:8f:1a:15:15:e0:5f:d2:6e:8d:c6:89:49:8b:e6:5f:c5:
         06:58:7d:eb:8c:ec:5e:fc:d9:02:7b:6e:b9:bd:0b:71:8b:bf:
         e3:55:d0:f0:35:2c:9a:21:c3:70:b0:1a:0e:21:a9:db:f5:e7:
         e2:91:19:51:06:c7:6b:91:c0:57:9c:35:27:ea:fd:77:da:52:
         a4:6d:d5:62:9a:a9:56:6a:79:82:49:c3:4f:97:6d:c3:b5:97:
         17:d8:c0:e5:dd:21:55:50:ea:2a:dc:46:97:5a:61:55:cb:d4:
         22:39:c7:f3:cb:ae:7d:1f:6b:b7:44:33:03:2c:2f:56:bf:38:
         1b:03:7e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:41 2025 by rpki-client