Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/19fe6ed1-3f0c-398c-bd89-284124366ceb.roa
File:                     19fe6ed1-3f0c-398c-bd89-284124366ceb.roa (raw, json)
Hash identifier:          ERMC64xnqfmy1dQnzhu88Nvfcr4JiwQQdoY7xoFTltk=
Subject key identifier:   A9:CC:D2:90:0B:9F:47:3B:C4:70:CA:DF:0A:0F:02:EB:A8:31:BC:C2
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926CF78674EBE59C1F2D7C3
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/19fe6ed1-3f0c-398c-bd89-284124366ceb.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     1544
IP address blocks:        216.66.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:cf:78:67:4e:be:59:c1:f2:d7:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=5677cd6c-b8f2-43a5-8215-02149bf0316c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:16:a2:0c:1f:6f:00:a3:81:e2:db:8d:d8:ba:
                    e0:3a:0b:3a:d0:53:7a:df:4a:eb:fb:d9:bf:f2:3c:
                    b6:49:1d:6f:af:e4:6a:97:8f:02:2a:07:09:49:bf:
                    ef:63:7f:ea:11:50:f9:93:28:ad:99:e6:92:c6:82:
                    a7:e5:9e:44:2d:79:61:96:19:4d:e3:cc:0f:1f:43:
                    dd:94:6d:72:c7:ff:eb:f9:ed:78:13:e0:64:7e:4b:
                    4c:96:ed:be:f4:ad:c2:ac:a1:a2:43:f5:76:61:e6:
                    4a:78:37:46:fd:a7:0f:fd:15:14:ee:58:75:63:fa:
                    96:97:ee:02:eb:55:fd:47:08:a9:99:a5:bf:a5:ff:
                    92:3b:e5:c3:7e:6b:de:a3:ee:31:32:e6:61:c0:59:
                    7f:14:41:22:e4:4e:86:e9:61:fc:da:72:e4:7b:cb:
                    8a:fc:5e:8f:5c:82:c3:36:d0:d5:3e:a8:ed:5b:c6:
                    10:08:ea:f7:07:cf:2a:f2:70:36:2d:07:15:ef:91:
                    fb:36:12:dc:e7:d8:7d:42:72:6d:25:9d:e6:35:78:
                    53:09:91:c0:79:49:1f:5f:89:c1:88:09:a6:7b:49:
                    e2:83:c5:9b:1d:d9:c5:59:86:45:b9:bb:0e:eb:a2:
                    af:5d:81:0f:58:0b:64:c0:73:44:c3:9c:19:0e:df:
                    d5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CC:D2:90:0B:9F:47:3B:C4:70:CA:DF:0A:0F:02:EB:A8:31:BC:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/19fe6ed1-3f0c-398c-bd89-284124366ceb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:e3:9d:97:32:e4:a2:bf:b4:b3:db:78:44:33:af:85:b7:a1:
         42:6d:e6:97:27:77:11:26:7d:23:ab:ef:2c:60:7a:11:5f:58:
         9f:76:f6:1d:3e:bf:ad:10:7a:0c:6b:73:98:f3:6a:0e:7c:cf:
         57:19:a1:d1:2b:5a:65:b9:b6:b8:4f:45:ed:bc:ce:3e:93:3b:
         d5:7c:1c:fa:25:69:d8:52:e1:a8:17:37:29:83:26:aa:79:b1:
         27:11:ee:bf:c9:a4:3a:56:41:21:64:34:ac:e8:c0:9a:f6:20:
         d9:04:96:92:52:6c:16:f8:80:95:7e:e9:ce:36:b8:35:7c:ce:
         a4:70:77:cd:12:43:16:30:0b:64:11:59:d1:80:ca:29:3e:9f:
         b1:ae:1c:ab:76:e6:04:4d:81:8c:ef:3f:25:19:5b:c6:b8:ae:
         d3:fe:e2:fb:9a:f6:d9:6d:ff:2d:3a:a7:d8:0b:9d:56:68:40:
         89:44:44:b0:73:eb:ef:cb:fa:61:cd:8c:ae:d4:01:96:99:2a:
         9d:89:57:c3:c0:e0:5c:60:71:a2:be:bf:91:82:66:52:d0:3b:
         75:14:32:68:af:01:62:b3:a4:c1:99:7b:60:16:89:8b:06:2d:
         4d:ae:9c:0a:86:cc:7a:e8:fc:62:c3:b8:e8:24:c8:be:62:ca:
         2d:9a:1e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:47:53 2025 by rpki-client