Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/e361069f-2894-3c91-8475-ea41298c1252.roa
File:                     e361069f-2894-3c91-8475-ea41298c1252.roa (raw, json)
Hash identifier:          09MkbyC0riO3HQXSorLZtfffKcQDc+AeRvKqHda64x0=
Subject key identifier:   BB:DF:31:49:AF:86:9F:6F:AD:9F:68:B7:AF:20:3A:1C:18:7E:5C:3F
Certificate issuer:       /CN=61f164dd-db39-470d-8805-3aa514d5e7b0
Certificate serial:       010D0C9F4328584902EC2344BFEA946B5EFB0C00
Authority key identifier: 9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/e361069f-2894-3c91-8475-ea41298c1252.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     52347
IP address blocks:        162.217.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:23:44:bf:ea:94:6b:5e:fb:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f164dd-db39-470d-8805-3aa514d5e7b0
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=29011217-8c5e-4efd-b8c6-44a9db2704fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c3:c4:2d:5a:2e:b8:54:b4:10:64:2b:22:80:
                    33:aa:98:50:71:3b:ee:4d:e0:70:5f:4d:3e:d4:29:
                    a4:32:1b:3f:c4:af:d4:b6:fb:9b:d3:7c:7b:9e:fa:
                    84:8f:a0:69:c1:08:16:5b:cd:c1:4e:a2:e0:dd:98:
                    03:52:e3:54:d4:c8:f8:3b:ea:a2:6b:90:69:7e:2e:
                    bb:43:6f:9f:07:88:1a:ed:39:ff:0a:11:82:3e:3b:
                    41:20:a6:41:c1:ba:12:77:fb:4d:df:50:a8:f7:8f:
                    f6:4b:75:2e:5d:86:2b:38:56:dd:5c:0f:c6:5a:6f:
                    25:8d:05:14:24:2c:d0:79:60:7e:06:a0:e9:23:34:
                    70:59:a3:0b:22:96:1f:7a:65:39:81:a6:3b:85:38:
                    8e:d5:a2:20:f8:e5:cf:a5:b7:34:ac:d0:81:e7:f2:
                    fe:e7:0c:70:c0:d7:46:58:5f:48:33:1f:c8:b5:70:
                    39:95:da:0f:d0:30:40:7e:c1:3e:ef:28:4f:7c:c2:
                    40:3c:46:8b:92:45:c2:ac:e1:e0:8e:c8:f5:fe:89:
                    28:22:37:a7:6f:03:64:49:e5:b7:d5:e1:3d:80:59:
                    a9:de:7c:06:21:71:fc:b4:9b:0f:bf:9c:c5:42:f9:
                    6e:42:a1:2c:16:97:73:69:dc:72:c4:9f:d3:76:e5:
                    3e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DF:31:49:AF:86:9F:6F:AD:9F:68:B7:AF:20:3A:1C:18:7E:5C:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/e361069f-2894-3c91-8475-ea41298c1252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl

            X509v3 Authority Key Identifier:
                keyid:9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:b9:85:e9:ff:93:5c:2c:cb:b8:0a:da:24:26:59:36:ac:b1:
         23:2c:95:52:45:ce:9d:7e:f3:dd:c6:28:82:1b:5e:8e:81:a8:
         f6:cb:b9:5c:12:cf:20:e2:a0:57:f5:74:5f:67:5c:79:e4:2b:
         99:db:66:f9:29:57:f1:03:43:69:c9:b2:58:7b:59:04:41:b3:
         6c:06:33:81:03:50:16:e6:96:6a:93:8d:82:4f:c2:85:dd:59:
         32:1c:62:88:54:16:ce:36:ff:47:a2:ee:00:d0:79:6d:4d:f9:
         a9:51:72:8a:4f:8e:4c:7b:c9:f7:4b:c0:85:6c:2e:6f:e9:27:
         8d:a2:c0:85:40:05:fe:1e:fa:b2:4e:79:36:49:1b:cc:9c:a1:
         1d:89:8b:69:b0:a6:2f:30:94:2a:41:4c:42:7a:14:96:14:db:
         44:e8:08:13:3d:5e:7b:c1:ae:d6:4d:52:d8:a5:72:a0:21:99:
         2f:18:7a:46:81:e2:3f:36:8d:0c:3d:0d:8c:11:da:2e:35:f4:
         7f:6e:64:27:74:3c:dd:1e:cf:7f:1d:be:11:c2:28:63:0c:0d:
         7a:37:4a:fb:32:f2:27:12:75:d6:df:53:59:7e:e9:5a:33:a6:
         3d:cc:15:bf:4e:fa:9c:c0:4e:0d:3a:a0:d6:f8:f4:85:27:08:
         35:d6:e9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:57:21 2025 by rpki-client