Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/bcc30403-87eb-3c69-8f8d-9f0ffc87e28b.roa
File:                     bcc30403-87eb-3c69-8f8d-9f0ffc87e28b.roa (raw, json)
Hash identifier:          ve5lh1wVk9wZyS393WhwWI0OYq8R/wX2GSA3v5PJDLI=
Subject key identifier:   D0:3F:5B:12:95:F2:6D:AF:DB:BD:12:69:1E:B8:97:72:39:81:BF:A0
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F43285848DEA1210C14E1CADFE90C0D80
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/bcc30403-87eb-3c69-8f8d-9f0ffc87e28b.roa
Signing time:             Thu 13 Feb 2025 14:00:50 +0000
ROA not before:           Thu 13 Feb 2025 14:00:50 +0000
ROA not after:            Wed 14 May 2025 13:00:50 +0000
asID:                     13807
IP address blocks:        216.8.192.0/18 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:a1:21:0c:14:e1:ca:df:e9:0c:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Feb 13 14:00:50 2025 GMT
            Not After : May 14 13:00:50 2025 GMT
        Subject: CN=135bd3c5-e008-4630-af86-785e3da55160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:da:f4:40:e9:56:2a:66:90:96:50:1d:6b:3f:
                    f3:9c:40:99:e0:46:f3:3f:a3:82:fd:7a:df:18:9f:
                    4d:ba:1e:83:73:0e:44:19:a0:98:df:75:1d:bb:46:
                    76:8c:81:7e:d8:8e:93:91:ac:05:83:2f:ba:61:01:
                    8a:1c:32:8a:46:9c:f7:05:a7:18:a2:81:62:71:d7:
                    36:ed:47:ba:5b:2b:0d:3b:11:2a:23:d5:f9:55:ea:
                    c0:aa:a0:59:a8:57:23:d2:3c:d9:75:2d:74:2e:8c:
                    c0:2e:10:24:c9:7c:77:32:94:12:60:a0:7d:ac:3e:
                    e8:f7:70:5e:21:12:e2:29:ab:08:b0:18:59:b7:19:
                    8d:36:3e:09:5c:8a:c0:fe:85:67:ed:8f:bd:35:50:
                    3b:fe:7b:93:04:d6:3d:17:a1:32:1c:71:0f:61:d4:
                    da:b8:16:6b:2d:10:36:45:d8:45:0c:db:98:90:c3:
                    aa:a9:a7:6b:e7:88:27:a1:a6:33:a8:5c:09:ff:8c:
                    c6:0b:6d:66:4b:ad:c6:aa:1d:56:e3:a6:9c:df:80:
                    f4:7a:ed:52:79:63:96:d5:9f:e0:ad:b3:77:81:0d:
                    cd:d2:d0:13:22:86:c9:eb:7b:d2:2b:4c:23:94:e4:
                    a4:cb:39:4c:34:ff:90:75:9e:3d:c4:b1:d5:62:cc:
                    e2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3F:5B:12:95:F2:6D:AF:DB:BD:12:69:1E:B8:97:72:39:81:BF:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/bcc30403-87eb-3c69-8f8d-9f0ffc87e28b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.8.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:77:ae:e0:30:97:e0:97:4d:35:38:0d:c9:58:30:65:bc:b5:
         9d:d3:2f:ac:ab:04:34:d2:0c:ab:85:b0:fe:dd:c0:9a:1e:fa:
         fb:14:7c:07:c0:c9:59:52:7c:79:8d:24:7a:ac:f6:4f:9b:75:
         8d:8a:02:0f:81:b5:13:5d:a0:d5:b5:e5:7e:52:a7:49:5c:5c:
         66:47:02:6f:27:d0:f9:82:bf:62:0a:02:0f:66:d0:d0:33:ab:
         33:02:df:01:d7:86:ca:2c:b8:55:f9:a9:f2:1f:d2:ee:1d:27:
         d2:6b:29:02:21:aa:4d:26:13:aa:70:f0:1a:48:36:c5:d7:1d:
         e6:c6:c0:44:3e:e5:e6:a9:8f:54:cd:a7:e7:89:b4:ed:24:05:
         97:9b:7b:f0:d0:51:ae:f3:a8:73:ab:e9:ed:c2:1f:95:61:0c:
         d7:e0:51:6e:2e:44:00:f4:24:50:26:f6:68:9b:98:c3:b1:16:
         3b:e8:aa:4a:03:6b:8c:41:67:f5:9f:5b:85:f4:d6:51:10:49:
         bb:79:85:06:4c:f2:6e:dd:ca:69:7c:18:21:f0:72:04:c3:ab:
         74:e3:84:76:85:81:3e:5b:e3:61:9f:b3:58:16:ab:6d:8a:4a:
         9c:f2:b4:25:dc:1e:f7:d3:cd:9b:64:65:93:8c:59:31:73:d0:
         94:66:57:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:44 2025 by rpki-client