Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/73f27842-743c-394f-b986-e63da94af163.roa
File:                     73f27842-743c-394f-b986-e63da94af163.roa (raw, json)
Hash identifier:          L072ma2zyo3y/qJB7Ks0ekLj8BbD1f8Iz1Ool4Bq8G8=
Subject key identifier:   2A:0A:70:DA:96:D3:F3:77:C3:14:16:EC:64:DB:89:1E:04:67:79:7B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926BE3313231310A29B1280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/73f27842-743c-394f-b986-e63da94af163.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     6565
IP address blocks:        216.218.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:be:33:13:23:13:10:a2:9b:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=e3012332-9031-4e81-9909-6c656d0ca9db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:88:df:ba:a4:27:c3:74:6f:b7:56:b6:fc:49:
                    40:0e:11:fd:80:ed:4f:c8:5f:42:81:70:a9:c0:83:
                    9e:5a:ba:d0:4b:df:a2:b4:68:f8:e3:60:3b:6f:45:
                    5d:3f:99:ad:b5:f7:f7:1b:0c:0b:43:e7:a2:38:7c:
                    83:97:4e:bd:51:9f:62:d3:ee:22:d1:be:0d:fe:36:
                    52:83:f2:f2:03:1b:97:78:15:d5:9a:e7:5c:e0:cb:
                    f6:d0:1c:61:07:b1:a6:32:08:7b:be:ba:14:8d:05:
                    64:7a:39:e1:d6:91:de:3f:09:59:d5:8e:f3:c4:c2:
                    b1:05:90:3d:f7:c2:6e:57:f9:e9:68:34:19:e1:0e:
                    b0:94:d6:61:13:13:93:c5:87:73:44:97:be:c2:ca:
                    81:1f:51:af:34:2b:f1:1d:be:21:0f:e0:62:b3:8f:
                    61:ff:cf:ab:fa:e1:ed:7d:dd:99:49:c7:89:5f:0b:
                    bf:2e:0d:89:44:d6:dd:0e:73:18:38:83:9e:a1:c3:
                    3a:df:61:c2:58:77:aa:12:6e:4c:9b:05:24:e5:09:
                    57:8c:47:34:df:de:70:d3:f7:92:13:69:e9:9a:70:
                    d3:5e:78:2f:4a:c7:ba:47:1d:b6:db:dd:ab:c2:31:
                    14:92:7c:91:fa:cc:2e:01:29:f8:76:23:57:54:f0:
                    f6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0A:70:DA:96:D3:F3:77:C3:14:16:EC:64:DB:89:1E:04:67:79:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/73f27842-743c-394f-b986-e63da94af163.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.218.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:ad:94:58:dd:e5:18:c3:23:4a:c6:de:2f:13:cb:99:f0:9f:
         cd:e3:5c:d7:36:1d:b9:0e:fc:2c:4e:4d:e4:6c:ac:78:c8:6f:
         50:44:12:53:8c:b7:d1:b8:7b:be:6d:d2:98:09:d2:88:b9:b2:
         5c:79:c0:f8:16:72:5d:12:2d:16:1a:eb:33:3b:1d:e2:0f:52:
         94:d1:dd:92:83:42:d5:63:7d:62:b1:24:83:71:9f:51:28:de:
         7a:ad:03:59:51:65:10:4f:ce:7c:0f:08:0a:38:c9:ae:15:a0:
         a1:0a:f2:f5:cc:a4:ad:d8:ae:9e:ef:c2:17:7b:44:b6:dd:06:
         a7:d2:2c:d9:cc:ed:2f:af:f1:6c:95:83:60:df:8e:99:f0:a2:
         e2:e6:5e:49:48:c5:83:54:c0:93:09:cc:3a:78:ec:01:cb:db:
         87:42:4c:67:dd:55:0f:3a:95:9c:11:38:30:8b:f4:d0:cf:29:
         f9:4f:32:cf:71:71:61:e1:5a:4e:5b:8d:67:b0:81:49:24:3b:
         52:39:bf:89:cc:e2:67:77:34:3e:c9:63:56:5f:47:b1:ff:27:
         1c:86:88:f6:09:51:41:b8:55:81:03:50:8a:5c:4f:3f:dd:85:
         b2:ff:a2:82:c0:51:3b:50:97:19:d5:94:2e:7f:28:46:80:e6:
         0f:35:01:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:51:15 2025 by rpki-client