Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/d78527a4-5d54-348f-95c0-56b2517d938a.roa
File:                     d78527a4-5d54-348f-95c0-56b2517d938a.roa (raw, json)
Hash identifier:          NsuoK9Fgp4x6ochPgzLE8rzwP2bAr6S+tjgOiNeQoC8=
Subject key identifier:   E3:6C:5A:88:0E:2B:5E:75:C7:19:16:1E:78:D6:73:85:92:6F:2E:2F
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F43285849088163C3B4259FAE2B94B800
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/d78527a4-5d54-348f-95c0-56b2517d938a.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     399100
IP address blocks:        216.93.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:63:c3:b4:25:9f:ae:2b:94:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=819cf8f4-63c7-4766-9e05-d3e7f1f473f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fe:94:25:b6:8b:cf:8d:52:c4:54:f7:91:1c:
                    be:31:b8:4c:66:eb:d9:20:d4:d9:6b:ed:a6:af:70:
                    b8:ef:f4:6b:f0:bf:a6:58:16:29:43:98:3a:0f:5c:
                    aa:f3:89:f7:13:83:a6:3b:4b:15:c6:8f:4e:46:7f:
                    ec:9b:cd:fc:09:62:38:f8:b7:de:c4:a1:c5:46:04:
                    ef:22:c8:b7:2e:69:a7:4b:f6:61:b2:d9:4a:d1:1b:
                    34:b9:b2:8c:ba:94:8d:a8:6b:c5:22:d1:77:31:05:
                    c9:8f:53:b4:c0:dd:86:9f:3f:24:ed:e7:97:a4:24:
                    32:44:ee:f7:42:95:68:81:29:96:74:c7:d9:18:aa:
                    3d:fa:21:41:4e:3e:f4:aa:6c:91:e6:91:71:fb:6d:
                    6c:b5:7d:24:de:fe:31:14:17:c1:9d:b9:eb:af:5f:
                    da:34:f4:b4:3f:6f:a4:12:51:27:a8:7f:a6:d0:cb:
                    b8:70:12:7b:33:aa:8d:67:73:b4:74:a7:f0:72:bd:
                    6b:e2:9a:1b:c4:e5:37:73:66:46:80:b2:9f:41:14:
                    11:dd:b5:bb:e7:6d:62:ca:83:ac:5b:81:b3:11:a2:
                    75:c7:4c:fb:fa:71:08:c6:10:16:53:d2:91:67:74:
                    9b:39:b4:a2:d0:fb:20:4a:a5:19:36:42:60:03:10:
                    48:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6C:5A:88:0E:2B:5E:75:C7:19:16:1E:78:D6:73:85:92:6F:2E:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/d78527a4-5d54-348f-95c0-56b2517d938a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.93.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:a7:1a:dc:4c:37:ff:84:98:f1:33:2b:bd:0d:a4:bb:20:9e:
         52:aa:e8:ef:a9:89:21:6c:01:13:3c:92:0e:3e:f7:2d:6a:12:
         6d:df:46:93:15:14:ab:39:65:2b:e2:ad:6b:33:ec:68:0d:db:
         2f:e1:e4:a1:da:4b:57:bf:e0:e7:ef:fc:2a:6e:15:2d:18:5b:
         79:70:6d:5a:2f:90:3b:d8:2f:ea:83:c6:bc:d7:c7:46:3f:90:
         e7:d1:a3:74:26:5a:13:56:b0:da:a3:7b:f8:54:60:69:80:17:
         6a:da:b9:1f:c8:87:35:66:c1:c5:9c:8a:23:6b:6f:6a:73:e4:
         cb:3f:ce:ea:76:71:3e:f7:65:20:f0:44:39:75:d6:9f:42:9e:
         42:e7:46:2c:8c:87:a1:58:ef:f4:2a:34:58:1b:a3:f2:0e:4b:
         55:d9:76:dc:7d:da:92:d3:2a:7f:e5:f9:5d:9f:2a:8e:95:42:
         72:3d:a0:d9:6e:63:d1:55:b6:e0:dd:b7:9a:c7:d2:6d:ef:b2:
         8a:89:31:99:08:cb:de:ba:01:49:b5:ee:b8:1f:90:47:8e:be:
         ee:bd:a1:8a:98:4d:e3:8b:9f:5b:b6:fe:98:54:41:44:86:cf:
         92:5e:c2:2c:3b:86:d6:47:a2:10:ad:eb:d1:b7:60:db:f8:04:
         97:e4:04:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:14:49 2025 by rpki-client