Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/90fd716b-70a5-3250-bd80-60901d4668ea.roa
File:                     90fd716b-70a5-3250-bd80-60901d4668ea.roa (raw, json)
Hash identifier:          MMBSC0GNAxAjf2jRqpjQqOfqseDWrRYNY9QQ1KJDqiI=
Subject key identifier:   4C:67:94:8F:95:62:6C:3C:CC:36:9F:B0:53:E4:60:34:97:CA:AC:47
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C24506717958A5FBA041700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/90fd716b-70a5-3250-bd80-60901d4668ea.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     19720
IP address blocks:        216.2.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:50:67:17:95:8a:5f:ba:04:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=96acd2ab-9276-4e19-8c62-5212101dc618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3b:eb:e8:8f:c0:5f:ad:ea:46:82:5a:4f:8f:
                    d9:c4:59:aa:93:ab:82:13:fa:d5:1f:ac:58:a1:39:
                    a7:96:41:c3:fc:9b:52:3a:7e:10:a4:9a:f6:47:a2:
                    90:2e:ba:4e:f9:51:35:59:9a:51:00:2b:e5:78:c3:
                    1a:23:97:5f:e3:82:e3:69:81:71:30:5e:8f:0d:d3:
                    a5:ae:70:b3:29:b7:92:a5:fd:35:e4:e0:a2:2a:9d:
                    eb:f4:a1:7d:4c:75:4c:7e:77:2e:d2:85:42:a0:38:
                    18:05:d5:40:f1:6c:63:81:04:9e:cb:bf:47:44:1b:
                    45:79:b3:a6:2c:66:29:c3:92:35:df:7e:93:3e:3b:
                    79:10:89:da:88:e8:63:94:7d:a9:91:0a:41:66:0e:
                    4f:44:90:67:f8:fe:d9:a6:d0:95:b5:cc:16:89:9e:
                    a0:fb:c7:8a:71:65:17:b6:95:07:60:b5:dd:35:cb:
                    0d:bc:1e:9c:80:05:7e:dc:0e:12:5e:d2:1d:e1:2b:
                    d4:fb:df:26:97:8b:4e:59:a8:73:01:62:ca:e3:7e:
                    2d:3a:00:d3:f7:ad:07:8d:45:35:cb:9e:9d:c8:a2:
                    c1:a1:ce:30:7f:a9:70:25:da:25:31:be:c0:9d:0c:
                    96:ce:13:32:65:1d:52:4c:8f:bf:a9:ec:e0:d4:d4:
                    b6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:67:94:8F:95:62:6C:3C:CC:36:9F:B0:53:E4:60:34:97:CA:AC:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/90fd716b-70a5-3250-bd80-60901d4668ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.2.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:e0:13:5d:bb:aa:09:b0:70:24:ed:c2:41:53:ff:23:39:ef:
         f4:da:91:c9:c0:2b:8d:cf:7e:a3:d6:aa:37:c4:11:3c:8b:ff:
         88:a1:a8:46:87:c5:82:9e:13:69:10:6f:8e:da:82:2b:c1:36:
         53:dd:df:54:c1:fd:a4:d7:76:e0:23:45:5a:a8:c4:98:89:a8:
         df:c6:db:2a:0c:0b:18:c1:67:2c:d6:b7:58:98:15:2a:ff:d2:
         d3:65:b8:de:a6:21:5b:8e:a8:b4:44:cd:ca:b7:8b:97:fd:80:
         58:4b:ef:05:46:fe:76:df:5e:03:99:88:df:c9:36:fb:e9:56:
         a9:34:cc:6f:2e:cc:ef:27:c3:21:1e:4d:3e:e6:f4:3f:93:6f:
         83:8b:b2:b8:3f:07:66:eb:dc:ff:d5:8d:d4:ef:42:64:47:a5:
         8f:db:8e:6e:0a:da:59:ad:2a:e5:7c:a8:65:9d:16:5d:57:e4:
         f1:e9:8d:7c:da:1f:1a:29:61:91:f4:32:39:f7:8a:95:51:25:
         9d:4e:a7:10:be:47:55:aa:de:9c:aa:4f:3d:5c:8a:3f:d2:41:
         4a:6c:1f:0f:b2:1d:4b:2e:6a:5f:86:6d:91:d1:d0:ad:65:5f:
         f9:5f:52:e7:d8:b7:2d:68:f6:06:20:52:5e:35:84:e6:d6:47:
         22:a2:48:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:39:23 2025 by rpki-client