Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/b9ea5810-ef2c-3626-93cf-8e7c15c9758c.roa
File:                     b9ea5810-ef2c-3626-93cf-8e7c15c9758c.roa (raw, json)
Hash identifier:          FrWdt5NpE0CrQHcOC28GCWPc+JZnMfVSV1ngHVkk/I4=
Subject key identifier:   4C:25:F5:3F:7B:F7:E6:83:76:37:89:13:36:87:AE:45:23:70:64:5A
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F43285848E9CBE397D3AA0F646FE040A0
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/b9ea5810-ef2c-3626-93cf-8e7c15c9758c.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        67.215.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:e3:97:d3:aa:0f:64:6f:e0:40:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=34e48d4a-2bc4-427c-9a49-cb036871bef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b2:17:f7:9a:4b:46:2b:6d:7d:cc:53:bb:19:
                    c0:d1:15:5f:79:a6:21:96:fd:99:9a:a6:d3:83:48:
                    e7:e1:ab:f5:f0:15:e1:c4:a0:d6:5a:0f:4f:c3:ea:
                    36:a7:92:21:cd:2e:b2:b3:bc:cc:17:98:e8:09:29:
                    c3:5e:37:3f:a9:65:93:d2:c4:df:7c:90:aa:ab:2e:
                    f9:22:c2:34:a8:e3:b9:b5:7d:5f:d2:c8:40:25:4d:
                    8c:b8:94:2c:64:da:f2:7f:e1:c9:5a:78:ed:13:20:
                    06:d9:a6:10:7e:09:1c:a0:21:94:32:8e:00:06:ef:
                    60:5d:c6:52:57:a3:f8:e2:ed:74:ea:01:7d:20:fb:
                    f4:a3:98:44:4e:ec:db:e1:cc:18:26:29:b4:89:2b:
                    8f:22:a1:b1:df:e6:a5:c0:2f:5e:01:fa:eb:26:ff:
                    00:09:01:1f:80:96:1a:b4:19:6e:17:b1:84:ea:39:
                    ca:22:6e:16:2c:88:95:86:ad:41:78:59:7c:7f:ae:
                    b6:e3:bc:6e:b1:bc:11:55:ca:05:8b:29:05:9a:6c:
                    63:88:09:d4:b0:20:5f:75:8f:b6:9a:ac:f8:01:50:
                    2e:d4:dd:64:69:37:99:6e:09:d0:fe:f6:4a:ba:b1:
                    82:6d:cc:23:9f:70:d1:06:40:d5:2f:a2:41:6e:b0:
                    ae:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:25:F5:3F:7B:F7:E6:83:76:37:89:13:36:87:AE:45:23:70:64:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/b9ea5810-ef2c-3626-93cf-8e7c15c9758c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.215.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:38:1b:16:e2:d6:fb:48:72:67:c1:e9:df:8d:03:63:d5:6f:
         11:23:f3:04:a8:b5:76:77:6c:75:c9:3d:e0:33:96:f6:17:a8:
         d7:9b:96:17:87:02:7a:45:9a:5f:fd:24:ff:57:ce:5c:32:14:
         4b:bb:55:0b:50:5c:02:a8:c6:26:10:48:67:1a:a3:f0:1e:ce:
         07:27:5b:79:d7:48:29:a8:0f:ab:fb:db:57:c6:d2:cf:67:4d:
         28:5d:55:0c:bb:a3:59:12:34:d6:ca:07:2e:65:0d:4b:4e:4b:
         ce:06:9c:9c:5f:fe:6d:39:42:aa:dc:af:f8:20:02:73:a1:74:
         00:60:8c:73:c1:63:af:4d:b2:76:23:a3:7c:b0:94:7b:2f:d8:
         60:b7:25:ff:e9:06:29:f2:b2:95:8c:7b:e5:16:78:4c:a9:04:
         e7:f4:8c:f7:2f:48:6c:79:4d:ff:6e:f9:bd:58:ab:39:af:6c:
         45:ac:96:2a:2a:af:06:92:4e:98:46:2a:5f:1d:a8:4b:a7:04:
         ed:72:1f:74:a6:dc:56:b2:2c:5f:b1:45:9f:3e:d5:90:d6:5a:
         24:32:8b:27:be:e1:89:5f:9f:65:e9:bd:dd:09:f9:5f:65:51:
         c7:71:08:ae:db:70:26:29:59:4d:be:47:5d:08:ec:c4:76:ae:
         ec:df:11:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:17:47 2025 by rpki-client