Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/61260560-440c-3099-bcb3-57a64a293bde.roa
File:                     61260560-440c-3099-bcb3-57a64a293bde.roa (raw, json)
Hash identifier:          VKPWr38Q1C3WzM/PrAGpmOxg+I/iTfuZkaqbaOLDr8k=
Subject key identifier:   77:75:16:35:76:94:F3:C8:02:65:8B:39:BE:15:C4:89:43:88:9A:F3
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F432858492CAE8F38FB39193D6D051200
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/61260560-440c-3099-bcb3-57a64a293bde.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     13576
IP address blocks:        216.249.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:8f:38:fb:39:19:3d:6d:05:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=b2ae66ff-4aab-4497-bc74-e5d15f0ce3c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d9:c6:0b:ec:11:3f:ff:f6:6c:28:70:2d:8b:
                    1c:da:f7:2d:4f:8b:a2:32:b0:df:76:9a:11:84:76:
                    88:b1:1d:50:1a:19:d5:bb:13:29:7e:b0:04:d8:41:
                    77:e5:8d:70:19:07:e0:76:cc:c5:32:41:0b:a6:84:
                    b7:f4:4a:f9:e8:8d:37:4e:d1:80:98:c4:d8:53:0c:
                    16:9d:14:85:cd:7a:4d:f3:5d:07:bd:52:c9:be:1a:
                    ee:ea:eb:37:25:e4:4a:50:cb:09:51:78:5f:d9:3e:
                    02:07:c1:ee:5d:c4:23:52:48:4f:2b:fb:36:3a:d1:
                    ed:f2:a0:ae:9b:19:a0:6c:60:6d:93:ca:5a:5b:1e:
                    c3:86:45:ac:b1:57:0e:89:dc:f8:83:b6:dd:83:63:
                    34:b6:37:51:a3:d4:74:f5:34:fe:4a:f4:d3:2f:de:
                    ce:38:93:66:1e:7a:88:fa:88:2f:72:0e:b6:4c:4a:
                    d2:5e:55:6a:48:e5:a3:b4:ad:06:b2:1a:77:e6:10:
                    ca:37:ad:b4:62:4e:be:c1:52:6c:ab:dc:dc:f2:29:
                    e0:7e:e5:67:12:90:54:ec:f5:d0:ce:25:4b:32:52:
                    da:8b:6e:b3:22:83:86:13:40:56:eb:06:cd:ee:be:
                    aa:8d:e8:21:bc:90:2a:50:41:67:9b:71:7d:45:31:
                    13:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:75:16:35:76:94:F3:C8:02:65:8B:39:BE:15:C4:89:43:88:9A:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/61260560-440c-3099-bcb3-57a64a293bde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.249.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:9b:86:d2:4b:51:c9:55:8d:42:1b:be:2b:80:fe:8b:81:94:
         a8:76:a1:1b:ac:2b:39:cd:0a:5b:f8:f2:cc:4d:50:81:0e:36:
         ac:cd:ec:fc:e3:8e:24:73:48:0c:12:d3:9d:b2:7d:cd:3b:f8:
         eb:9e:fd:9a:90:8a:32:18:d3:33:44:82:e0:e5:27:33:f6:b4:
         16:ac:51:a3:1d:91:d9:78:29:97:05:40:c1:18:d7:8f:25:8c:
         b8:40:e5:65:26:10:a6:9e:4a:e3:1b:66:ca:c8:53:47:45:ba:
         15:fc:2d:65:54:8f:b2:a1:57:6a:2a:b7:66:bc:03:44:84:a8:
         6c:23:1f:06:62:8a:44:55:06:58:4b:18:ef:52:57:a3:f3:f2:
         27:4a:3a:9a:6d:97:4b:64:83:4e:00:e5:fc:3a:90:15:5f:99:
         2c:a8:dc:e8:5f:0a:dd:90:4c:24:9d:00:12:09:c9:b4:08:f2:
         cf:9e:a2:74:ec:23:5e:73:76:53:7d:93:2d:6a:26:20:b9:5c:
         b4:b3:57:51:fc:f1:8c:4b:c7:a1:14:d9:94:c7:19:b3:a3:38:
         59:83:d6:72:9b:7c:ab:56:1a:1e:b3:00:f1:1a:bf:25:6b:6c:
         ef:6e:e1:4f:a0:3f:cf:4e:68:df:d6:54:37:0b:bd:fc:fb:dd:
         7f:eb:02:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:39:19 2025 by rpki-client