Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/a96694e2-fc23-3945-9156-dbb9dcbef238.roa
File:                     a96694e2-fc23-3945-9156-dbb9dcbef238.roa (raw, json)
Hash identifier:          LviG7a6a9Ie7son7aebGJ89qJakjtPnketbzZvalKH8=
Subject key identifier:   C0:2D:8F:CB:5C:D0:87:50:11:A6:05:A5:CF:94:D8:95:70:00:65:EE
Certificate issuer:       /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Certificate serial:       010D0C9F432858494CC940FE09A06B98128D7FC0
Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/a96694e2-fc23-3945-9156-dbb9dcbef238.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     46616
IP address blocks:        147.72.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:40:fe:09:a0:6b:98:12:8d:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=34d13619-b206-41cc-9ad7-02fc0998114a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8d:a9:bc:c2:c4:e0:77:83:fa:f6:db:8f:e8:
                    3c:1c:19:e9:df:c1:25:81:08:46:ad:b0:e3:53:b0:
                    a0:e8:c1:0c:3a:fa:2b:cc:0b:85:42:4e:1b:5b:87:
                    e3:f5:c8:d3:95:d7:df:c2:19:6d:97:5d:32:43:41:
                    c5:9e:2b:fd:5e:ea:f5:a1:0e:c0:0e:51:f2:5a:ca:
                    bc:ce:9e:15:59:d2:7c:4a:76:83:20:cd:b7:75:c0:
                    2a:ce:b2:fd:f0:99:ba:4a:d7:64:78:d2:fe:f4:2c:
                    8e:14:11:d3:fd:e2:b6:a7:41:8e:88:81:3c:12:68:
                    62:9d:60:21:34:93:9f:64:de:e2:7f:b3:63:81:d3:
                    5c:e6:fa:35:df:f0:df:8c:c9:5d:08:68:c6:1c:b3:
                    72:34:c8:66:8a:9e:1a:a2:04:ed:df:3e:a5:25:82:
                    b3:91:ed:34:91:cb:59:c9:82:d4:68:96:14:3f:55:
                    7b:e5:82:a9:a7:63:ad:da:0d:83:bf:4d:aa:90:5c:
                    59:36:05:19:29:94:0d:e5:14:e0:8a:15:73:d7:5a:
                    49:ef:c9:7d:03:e7:b3:b0:91:2e:b8:e4:9a:37:20:
                    f6:83:14:c0:96:a0:67:40:43:93:95:68:39:cd:5f:
                    70:37:3e:10:2b:18:53:5d:26:f3:0e:17:17:0e:f1:
                    c4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:2D:8F:CB:5C:D0:87:50:11:A6:05:A5:CF:94:D8:95:70:00:65:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/a96694e2-fc23-3945-9156-dbb9dcbef238.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl

            X509v3 Authority Key Identifier:
                keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.72.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:b5:81:26:58:db:fb:6e:a1:5a:68:a8:85:6e:fe:bc:16:3e:
         90:9c:1c:e6:2f:c9:80:df:c1:92:4b:81:d0:53:1b:6b:f2:47:
         c4:27:a1:ed:1d:04:e0:eb:ce:49:8b:ce:b5:f2:ff:a6:f1:a4:
         eb:68:3e:35:11:c0:7a:49:9e:ce:fd:a1:2c:51:c5:33:78:89:
         a3:f8:c8:64:2b:02:6d:16:a7:26:ab:8c:f8:c7:d9:1b:ba:17:
         b4:a2:06:16:c0:ff:fb:2c:6d:28:0c:8d:f9:6b:a0:40:bc:3e:
         50:92:96:42:16:67:73:b7:aa:d3:5c:3a:f7:53:c6:1c:69:ca:
         e9:5a:a8:a0:98:71:a4:42:cd:70:0a:5d:55:f4:77:f3:c4:87:
         d7:3d:29:eb:6e:ca:85:6c:c2:7c:18:af:ae:5c:d3:bd:79:d0:
         b1:cf:e7:d0:09:86:82:f0:c7:18:b4:8a:57:8d:2c:7c:bf:8a:
         34:2a:7c:0b:ad:c8:cc:7d:29:f9:d5:a3:c4:f8:0f:e7:93:df:
         a8:43:12:41:f2:7e:5f:63:2c:54:3c:9b:ae:06:de:5a:c6:ed:
         ed:18:84:5a:9b:df:e8:d2:25:a4:54:2f:f9:c7:ba:0d:b3:ff:
         8c:a1:c7:f5:c5:d8:b5:cf:d9:37:58:b0:20:8a:a9:ab:83:84:
         1e:05:5f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:36:21 2025 by rpki-client