Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/24563349-a664-362b-a317-02cb1d641489.roa
File:                     24563349-a664-362b-a317-02cb1d641489.roa (raw, json)
Hash identifier:          lj/ynz9TEdvPJxaCYoAgI224GW/+ujc9YckigXPYinE=
Subject key identifier:   30:B0:3D:1C:C6:D0:20:45:90:65:A1:06:AC:FF:33:84:88:62:C8:53
Certificate issuer:       /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Certificate serial:       010D0C9F43285848F22C68FC903D56339F88A6C0
Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/24563349-a664-362b-a317-02cb1d641489.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     35874
IP address blocks:        69.58.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:68:fc:90:3d:56:33:9f:88:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=631bf536-fe23-41b8-80be-620e7040243e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:17:8e:1e:e8:03:43:2b:c2:fe:99:8f:3c:e3:
                    d3:60:73:9f:35:82:75:01:75:be:9a:26:1d:06:2d:
                    42:3d:68:4c:6a:84:48:44:19:45:01:9d:f7:5c:ba:
                    49:15:9a:a9:d1:71:37:6e:1f:3d:a5:eb:b5:25:30:
                    fe:02:67:11:35:e8:7c:d7:74:9b:75:aa:55:fd:21:
                    87:a1:cf:0a:15:3b:6a:65:6a:4c:5f:cf:ca:15:16:
                    7f:d5:19:b8:a3:4b:e5:b3:d6:c3:7d:b2:01:3a:89:
                    ce:b5:fb:bf:7e:84:92:80:db:65:48:41:6e:1d:18:
                    70:a0:dd:3c:98:55:a1:a8:e8:44:f4:40:f8:be:54:
                    26:69:59:ff:43:3d:04:5f:a8:a9:c6:6c:28:5a:91:
                    68:a3:27:29:8d:00:bd:2f:1c:a4:71:62:29:3b:ff:
                    e7:97:03:ac:b1:c9:91:e7:4c:bd:a5:fd:46:92:d5:
                    9e:5e:3f:56:87:a2:6d:94:0b:4d:eb:69:06:a0:2b:
                    a1:0b:8c:e7:39:b9:64:5c:75:24:3e:f9:f2:27:ee:
                    66:ca:26:9e:f5:3b:89:3e:39:23:c9:e7:28:01:65:
                    83:fc:94:85:2d:42:82:72:e3:00:67:93:e8:fe:c5:
                    7b:6a:f6:58:60:88:f5:4c:09:fa:04:2a:4e:fe:bd:
                    bd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B0:3D:1C:C6:D0:20:45:90:65:A1:06:AC:FF:33:84:88:62:C8:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/24563349-a664-362b-a317-02cb1d641489.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl

            X509v3 Authority Key Identifier:
                keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:a2:b8:e8:17:22:75:7b:ea:54:ab:5c:6a:f2:16:d7:ee:eb:
         61:e5:dd:c9:97:70:97:58:5a:0c:84:6f:56:a5:5c:3d:59:e4:
         92:33:94:64:51:91:4c:63:0e:44:ca:27:33:05:ed:b0:1b:9a:
         ca:d3:64:af:dd:3c:76:45:58:28:8a:6c:20:af:84:ac:e7:54:
         cc:b8:ab:da:40:ed:6f:87:9d:6c:cd:06:ea:93:fb:4d:42:72:
         a4:bf:c7:24:77:7d:2a:fe:46:df:a1:42:1f:83:2b:89:53:dc:
         46:0d:37:98:d7:76:e4:dd:4e:67:a3:7a:ea:74:d4:85:0c:24:
         9d:cc:2d:fb:8c:d7:e0:0e:99:3f:0e:54:56:c0:89:f3:59:85:
         2a:e2:fe:4c:b4:e9:72:67:12:6b:3c:1b:fd:be:f7:c6:f1:af:
         7c:71:93:34:fa:49:47:ee:0b:f3:35:33:4d:b8:42:7c:b9:7a:
         17:1d:de:39:d7:1e:97:f4:95:c6:6d:e7:9c:e9:0a:5d:d1:0e:
         71:d0:3e:98:ea:3a:41:bc:ce:0e:60:6f:94:78:e9:09:d0:31:
         a1:9e:e1:9d:42:af:e6:59:01:f4:a8:11:dd:09:8a:ac:43:35:
         38:59:d6:fc:c8:03:e2:ea:bf:bc:a3:c1:f9:70:a5:47:3a:87:
         e2:1e:a6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:51:24 2025 by rpki-client