Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b/e7107981-8a6b-3a4f-b508-6a8b63b05379.roa
File:                     e7107981-8a6b-3a4f-b508-6a8b63b05379.roa (raw, json)
Hash identifier:          7/uAcPgjeOZzW6Anf1oXxTotpn7VKiWKQeE5fQAcKgY=
Subject key identifier:   50:86:90:C9:55:39:E2:8A:E0:A3:E9:67:14:B2:F5:64:36:6A:0B:E7
Certificate issuer:       /CN=32bd304f-79c6-4794-b428-4ea9987e033b
Certificate serial:       010D0C9F432858484E27EADEDF24D9D15C4D7D80
Authority key identifier: B0:6F:A1:65:36:BE:13:17:11:AA:54:10:E4:BB:4D:52:DE:79:91:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b/e7107981-8a6b-3a4f-b508-6a8b63b05379.roa
Signing time:             Mon 23 Dec 2024 20:00:22 +0000
ROA not before:           Mon 23 Dec 2024 20:00:22 +0000
ROA not after:            Sun 23 Mar 2025 19:00:22 +0000
asID:                     53891
IP address blocks:        216.25.44.0/22 maxlen: 22
                          216.25.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b/32bd304f-79c6-4794-b428-4ea9987e033b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b/32bd304f-79c6-4794-b428-4ea9987e033b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4e:27:ea:de:df:24:d9:d1:5c:4d:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32bd304f-79c6-4794-b428-4ea9987e033b
        Validity
            Not Before: Dec 23 20:00:22 2024 GMT
            Not After : Mar 23 19:00:22 2025 GMT
        Subject: CN=689ed73f-8452-4373-9e73-3d2b659864c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:44:2e:7d:f2:93:24:fb:3f:74:36:9e:ba:bf:
                    0e:70:b1:8c:0a:07:2c:a2:63:fa:9b:19:ef:76:2a:
                    b3:d5:4d:f7:1b:0b:e5:65:1f:5d:f5:eb:26:6e:fe:
                    13:27:88:90:dd:6a:20:a1:8f:83:d9:d5:31:f4:f9:
                    9c:8f:9e:ee:71:52:ba:72:4d:a6:3b:db:e7:84:b2:
                    b6:0f:74:02:5e:93:c4:0a:87:b3:fc:92:01:a4:64:
                    27:b5:2b:3a:a2:b9:99:34:0f:92:19:0d:c8:62:20:
                    98:cc:06:6f:19:75:62:fb:0e:b1:66:2c:85:7a:27:
                    6f:da:3e:63:56:2c:80:44:51:ba:5e:be:c8:25:9f:
                    7a:ff:50:b7:6e:47:c5:dc:60:b2:ed:8e:e9:c1:79:
                    52:e2:5d:c1:98:99:c2:09:a8:73:4c:9b:42:08:21:
                    75:97:2d:af:a2:87:48:d2:76:c2:d6:11:7f:31:5a:
                    28:ff:d8:79:92:d2:ba:76:3f:23:4d:d1:9a:73:da:
                    9f:69:0a:e9:51:04:9e:89:a9:87:e1:9b:3f:52:95:
                    ea:af:39:09:69:a4:90:5c:f2:ef:ff:a2:1d:23:ba:
                    15:b0:91:f3:23:09:1d:7e:f7:2b:7a:f6:03:24:8f:
                    69:18:4c:8f:96:ca:1b:34:ce:84:62:2b:14:a1:e2:
                    4f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:86:90:C9:55:39:E2:8A:E0:A3:E9:67:14:B2:F5:64:36:6A:0B:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b/e7107981-8a6b-3a4f-b508-6a8b63b05379.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b/32bd304f-79c6-4794-b428-4ea9987e033b.crl

            X509v3 Authority Key Identifier:
                keyid:B0:6F:A1:65:36:BE:13:17:11:AA:54:10:E4:BB:4D:52:DE:79:91:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.25.44.0/22
                  216.25.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:de:f4:1e:13:fa:c6:76:58:9a:4c:31:fc:f8:3d:ff:66:fa:
         28:34:6d:fa:7f:af:fb:5b:8c:ba:82:86:01:42:5f:f1:88:8f:
         f5:03:31:e5:9d:65:40:9f:7b:ad:5f:b5:c1:a6:ba:75:9b:82:
         bb:f9:af:7a:30:41:ba:31:51:0a:53:f7:b1:f2:7c:60:e3:6d:
         a6:6d:46:2b:91:be:be:05:ca:27:3b:7f:f2:65:15:f3:76:4c:
         cb:58:7c:7d:f1:5d:ed:e2:44:2d:de:32:dd:12:a4:38:d7:60:
         ee:c2:c3:0e:42:1b:52:fb:e7:55:e0:bd:f3:01:97:62:2d:21:
         f3:44:ea:08:d8:b6:ad:3f:29:51:03:8e:31:e1:fc:7c:5f:c6:
         67:97:39:2d:9b:91:f1:85:26:4d:5e:c1:7b:4d:da:b2:80:69:
         dd:0c:f0:47:e4:cd:79:12:38:f9:ad:2e:f1:08:d0:fd:46:cf:
         d5:45:6a:8f:3a:5b:01:96:be:69:48:f3:13:b5:16:e5:7a:a6:
         38:e3:e1:a8:2f:76:ad:68:27:af:56:e9:23:ca:97:3a:d0:d9:
         b3:07:55:7b:dd:c1:d5:3f:28:bc:a7:ee:82:4e:13:de:40:61:
         95:fd:18:7b:dd:26:46:b8:95:93:05:0b:82:8d:95:e0:22:4a:
         40:1a:82:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 23:45:11 2024 by rpki-client on console-fra.rpki-client.org