Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3c318e52-80c2-3c11-897f-f6c9f4869930.roa
File:                     3c318e52-80c2-3c11-897f-f6c9f4869930.roa (raw, json)
Hash identifier:          6ik8iWb/DKN24sUeNpy1vF9jxzeafWn9Q+fp5aJI5cY=
Subject key identifier:   B6:70:09:B8:66:2E:47:AC:8F:5B:45:7C:EA:CF:DB:7F:B7:EB:42:C1
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F432858484DA62E86CA2DA50629601832
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3c318e52-80c2-3c11-897f-f6c9f4869930.roa
Signing time:             Mon 23 Dec 2024 15:38:58 +0000
ROA not before:           Mon 23 Dec 2024 15:38:58 +0000
ROA not after:            Sun 23 Mar 2025 14:38:58 +0000
asID:                     30058
IP address blocks:        216.227.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Feb 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:a6:2e:86:ca:2d:a5:06:29:60:18:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Dec 23 15:38:58 2024 GMT
            Not After : Mar 23 14:38:58 2025 GMT
        Subject: CN=e13c6cb0-02aa-4040-9e5b-fd596fdd2b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f7:2e:74:3b:3f:a3:2f:22:24:ea:c7:db:31:
                    1a:55:d5:40:52:8a:f7:2c:c7:6b:c0:88:0f:ea:5b:
                    59:43:5a:6f:f5:ea:cf:54:d8:17:26:bf:cc:ff:99:
                    ee:45:3f:0b:d8:b5:57:2a:6e:a2:e5:a9:dc:bc:67:
                    59:c2:5a:08:69:a4:47:f3:fe:3f:0a:fa:83:72:f6:
                    2c:63:33:ea:74:d2:45:93:fc:0f:38:5d:cc:8e:d8:
                    20:61:99:6c:7a:07:a5:fd:35:cb:88:17:e7:2b:c0:
                    af:d5:3d:0f:b6:84:31:65:8d:12:86:5d:1a:85:61:
                    95:5f:8f:63:e8:df:07:a4:df:78:46:7d:a0:47:52:
                    d3:da:fd:81:0a:ab:9c:01:94:70:82:a2:01:17:5f:
                    04:a9:22:e2:7f:3c:5c:5b:e3:84:cf:90:11:4b:0a:
                    4e:5e:f3:9b:22:ed:be:37:24:bd:7e:f6:2f:eb:58:
                    57:90:21:ce:b5:b3:fa:84:97:6a:51:b8:c4:d0:ac:
                    f4:49:5b:ae:39:ef:70:05:7c:79:08:fc:19:c3:1b:
                    fe:12:c0:cd:1b:86:29:d0:fa:c3:c0:2c:74:b2:0f:
                    63:33:9b:e5:ad:b6:2b:36:85:be:5c:64:1d:16:c8:
                    5b:fa:54:55:a0:16:17:5d:9d:71:e6:a2:c1:d7:d4:
                    53:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:70:09:B8:66:2E:47:AC:8F:5B:45:7C:EA:CF:DB:7F:B7:EB:42:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3c318e52-80c2-3c11-897f-f6c9f4869930.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.227.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:29:7d:24:62:4d:28:71:1f:8e:3e:a9:d9:b4:c1:70:4e:b8:
         52:33:4a:7d:13:50:74:fd:9b:e8:d2:fa:82:9a:cc:9d:16:f9:
         f8:b5:a2:42:55:54:20:42:f5:89:fb:51:bf:ef:55:a7:f6:17:
         6a:be:ad:6f:be:2b:dc:c8:5c:9c:15:f9:1e:80:7f:6c:e7:62:
         25:89:10:cd:f3:45:4d:0d:bc:d8:c5:2c:82:28:9d:91:94:06:
         64:74:a2:18:aa:c0:5e:73:d9:03:dc:18:1e:e9:3b:d3:91:93:
         8b:66:d1:d6:b7:27:cf:13:c6:60:60:c9:c6:6d:4d:9d:b4:ef:
         9b:7a:57:7e:de:e0:8f:53:20:08:df:2c:45:03:6b:e7:9a:f4:
         60:88:87:60:9f:10:83:ab:f1:33:27:df:29:b2:2f:00:c2:64:
         ef:18:47:a7:e4:cb:2a:2e:f4:1b:aa:16:2f:d4:9e:1e:fe:8e:
         c8:6a:8a:2b:93:c9:e8:ff:38:0f:f5:19:bc:d9:45:75:82:44:
         6e:0c:80:ab:97:66:d9:d9:c3:ff:44:2d:6a:61:05:a8:ba:8e:
         89:1b:e7:5e:fc:c8:74:5c:7d:fa:5c:3d:09:3e:23:83:a3:3a:
         4c:98:d1:7a:30:df:7c:2e:ee:c2:f2:af:d5:c8:d3:73:2f:7b:
         2b:96:49:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:43:09 2025 by rpki-client