Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/2f47224b-3181-3456-acd2-84215941a959.roa
File:                     2f47224b-3181-3456-acd2-84215941a959.roa (raw, json)
Hash identifier:          G5uNupZFADxL+n2186CfFNfNsEX48NfpsNKg7tSCPoc=
Subject key identifier:   A4:B7:F6:9C:F4:59:3A:F6:A1:E6:E4:AF:B9:96:8E:B8:E3:9C:A4:BC
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584930DE5EAF82BDE5AD31EDFD80
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/2f47224b-3181-3456-acd2-84215941a959.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     30428
IP address blocks:        216.97.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:5e:af:82:bd:e5:ad:31:ed:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=12485c75-9428-41fa-87c1-11472bee6476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fe:fc:3e:68:f4:3c:87:d1:51:70:71:ff:74:
                    2b:c4:8d:79:5e:ba:14:56:14:40:d7:d3:a0:5d:b0:
                    13:70:1a:22:68:18:62:ff:0d:20:2f:13:57:49:04:
                    6d:9a:6d:5e:92:68:5f:42:98:bc:01:2d:55:75:39:
                    69:9f:5e:a1:0d:ce:d2:f3:5b:9b:7a:fc:e5:59:38:
                    6f:b9:cb:0d:4e:f2:26:b0:18:30:72:1e:fe:7a:b5:
                    0e:e2:6d:8b:41:fc:aa:41:90:a6:07:c0:53:18:2d:
                    d9:ac:ac:41:32:63:49:c9:8c:ca:72:88:0e:ea:d9:
                    cf:da:37:35:ab:3e:71:a2:6d:b1:01:43:7f:ee:9e:
                    9d:16:99:ca:42:9f:69:95:99:e2:90:93:1d:20:53:
                    23:05:04:09:df:d8:97:1a:f1:ab:c5:aa:19:01:02:
                    08:e1:95:0a:b5:b2:73:b0:3c:5d:7a:c5:38:6e:0f:
                    04:a6:25:ee:42:47:15:06:93:42:c0:5a:e3:bf:6d:
                    d4:80:5b:fb:5d:04:df:a2:75:f4:60:28:dc:59:28:
                    3b:f1:d2:3b:05:0f:27:c4:47:61:05:01:5f:b1:42:
                    dc:e2:ea:2a:b1:6f:fe:8c:9f:59:45:2a:21:60:ed:
                    c9:e2:ad:30:44:ed:78:db:f3:bd:fc:e9:22:13:9c:
                    2b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B7:F6:9C:F4:59:3A:F6:A1:E6:E4:AF:B9:96:8E:B8:E3:9C:A4:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/2f47224b-3181-3456-acd2-84215941a959.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:81:ae:08:6d:82:61:bf:7b:72:9e:2d:04:87:76:01:25:27:
         b7:cb:f9:c0:72:6b:ce:d7:66:3c:96:ca:93:17:85:af:c6:8e:
         b2:8d:bb:50:24:8d:9f:65:b8:1d:76:f9:60:d4:6a:09:46:98:
         c1:1e:95:24:71:e3:31:85:fb:4a:89:fb:3c:c7:e7:36:84:ab:
         a2:16:8a:ce:24:25:b7:9a:ac:3d:6e:76:43:80:04:c5:e7:57:
         cd:cd:b3:a8:90:82:8e:2e:03:6b:70:f1:23:54:24:52:1c:1a:
         bf:e0:2f:6a:29:68:59:25:29:a6:e5:a0:19:8b:b9:2b:fa:e3:
         00:0e:a2:6e:6c:0c:eb:ac:8a:38:e6:42:fb:0b:0d:99:d9:10:
         71:58:f4:2a:ec:39:75:45:25:e8:40:f4:00:9f:05:3d:1b:31:
         06:d0:9d:5f:6c:62:ce:d1:7b:6d:4e:26:3e:fe:d3:41:7d:fe:
         7d:bf:1b:87:35:e2:5d:db:0b:c0:dc:5c:23:96:25:af:6e:01:
         6f:e4:a1:4f:12:92:4f:4e:01:93:9f:0b:4e:aa:0e:be:82:00:
         57:eb:a9:7b:8c:16:71:30:89:e4:7d:80:96:0c:9f:c9:29:1b:
         58:5e:18:1e:7b:cf:55:6b:9d:b6:9d:76:5b:98:54:5a:5c:e0:
         ae:a5:6b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:50:04 2025 by rpki-client