Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/745e9c30-c5a0-35df-a75f-41f0b5a726dc.roa
File:                     745e9c30-c5a0-35df-a75f-41f0b5a726dc.roa (raw, json)
Hash identifier:          zthoi7QtjZUbe6feEhf1XtFyGRiyp0508GtW1C3hVvA=
Subject key identifier:   A8:34:F5:D6:DD:CC:FA:07:66:A9:DD:D4:83:A9:E0:02:6C:E1:AB:BF
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F432858487A20841171069F52E85BE900
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/745e9c30-c5a0-35df-a75f-41f0b5a726dc.roa
Signing time:             Wed 08 Jan 2025 14:00:51 +0000
ROA not before:           Wed 08 Jan 2025 14:00:51 +0000
ROA not after:            Tue 08 Apr 2025 13:00:51 +0000
asID:                     53505
IP address blocks:        216.234.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7a:20:84:11:71:06:9f:52:e8:5b:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Jan  8 14:00:51 2025 GMT
            Not After : Apr  8 13:00:51 2025 GMT
        Subject: CN=c21e3a9d-e16f-497f-8aea-7b0cd56929dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f7:85:73:08:c0:7b:5f:e9:47:43:07:4e:de:
                    41:89:bd:f3:6b:53:fa:8f:26:a6:62:b9:cb:03:fc:
                    44:9d:04:04:f2:da:64:88:b3:84:62:d3:58:66:2d:
                    dc:d5:74:4a:6e:f0:ed:b1:5c:50:c7:0e:9a:3a:11:
                    d4:6d:ac:78:d9:a5:0e:52:51:9f:36:76:da:92:a9:
                    12:82:e2:36:4d:ac:35:fa:f2:2f:07:24:e0:a3:de:
                    4c:d2:ac:db:7f:fd:b7:25:7f:09:1f:46:c6:a2:a2:
                    10:3f:83:ed:c3:e6:4d:0f:df:f5:12:b0:04:d9:a9:
                    9f:19:ff:0f:39:36:6f:50:c0:9f:69:45:22:fb:bc:
                    96:36:10:0d:18:95:0b:a9:24:67:5d:d0:18:7c:af:
                    d7:9c:d1:d4:99:bd:e0:93:93:12:3b:8a:a0:43:df:
                    a8:b0:b4:25:ba:d7:b9:30:2f:1e:5f:02:53:b0:3f:
                    58:6b:1c:df:fd:8d:0e:3a:80:31:1f:1d:51:9e:2c:
                    90:f9:20:ff:ee:74:54:05:8f:0a:2d:61:3e:76:14:
                    5a:10:14:a3:30:a1:4e:1d:3e:cc:12:81:fa:d9:75:
                    64:4a:3a:51:2a:69:b0:01:be:11:30:18:25:79:6e:
                    7c:5e:ea:8d:bd:8b:88:55:3c:a6:e9:16:ea:b2:83:
                    4b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:34:F5:D6:DD:CC:FA:07:66:A9:DD:D4:83:A9:E0:02:6C:E1:AB:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/745e9c30-c5a0-35df-a75f-41f0b5a726dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.234.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:40:4d:f9:e8:4c:ec:74:c9:bc:d3:ce:67:1c:9b:e7:e3:c8:
         45:e4:d1:6b:79:22:9f:64:ca:be:79:9c:2b:3f:74:5b:a3:8f:
         f4:c7:86:d1:1e:3a:d8:c1:2e:f8:6d:ee:e3:7a:b1:0f:2c:cc:
         b1:03:8f:6d:11:88:c5:af:59:16:d4:54:97:68:0b:06:0f:bb:
         90:33:11:28:9d:72:ac:8c:6d:74:5a:d0:e1:07:4b:e3:fe:0d:
         16:8a:4d:fa:37:66:aa:a2:b2:71:27:a5:47:57:df:e4:19:1e:
         09:f9:46:9b:67:93:89:65:c5:a2:0a:93:d6:ed:dc:83:28:2a:
         da:d0:c8:11:2c:1e:6d:69:36:30:50:0c:53:18:f1:a7:fd:09:
         a8:6d:91:51:9a:e9:87:ce:e0:b9:a7:01:47:f6:ec:de:7e:5f:
         bf:6c:69:3c:82:36:7b:87:9b:40:eb:6c:ec:2e:ef:6d:a5:78:
         94:49:76:77:c1:9f:a0:0e:40:eb:77:ed:7d:ca:5d:38:f5:7f:
         16:af:bd:6f:18:52:7d:75:c0:5d:40:48:ea:40:2c:56:7e:1b:
         9d:e2:15:1b:5b:22:ef:c1:e4:24:c9:5e:be:d9:43:47:cd:18:
         4a:7b:12:b9:34:65:3c:12:f6:eb:fe:83:d9:d5:14:ec:c6:49:
         34:7a:79:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:32:11 2025 by rpki-client