Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/d87c40ff-d690-3d23-bcdd-c4688a4507d2.roa
File:                     d87c40ff-d690-3d23-bcdd-c4688a4507d2.roa (raw, json)
Hash identifier:          EK4evnGHRGDhGd3HpsVt67l6Dmob+XF01bgpfcg7vIU=
Subject key identifier:   45:1A:6D:17:80:07:A7:21:05:0B:80:B6:94:23:C5:48:A1:59:ED:38
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F4328584902EC238BC0572AE383BAC780
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/d87c40ff-d690-3d23-bcdd-c4688a4507d2.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     399004
IP address blocks:        216.93.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:23:8b:c0:57:2a:e3:83:ba:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=172d6d6b-4872-4085-8233-968c11b213a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3c:9a:62:d2:f9:ca:7b:4e:2c:28:98:4e:32:
                    52:25:be:1b:7f:1f:e1:ef:cc:2b:b3:00:db:e5:db:
                    94:dc:d6:b1:63:03:4f:21:0f:81:94:42:2a:ce:d4:
                    94:ac:d1:88:0f:49:46:14:3f:93:89:aa:b7:dd:fe:
                    51:a2:b3:eb:dc:03:a1:1b:4a:cb:1c:c9:98:d7:58:
                    9b:59:49:cf:8b:39:63:33:71:25:47:1a:58:c3:b6:
                    b0:7c:98:79:ef:c3:52:88:57:93:e2:b7:6e:a8:72:
                    df:5a:49:6a:93:30:dd:d8:f8:eb:30:2b:2b:f3:24:
                    88:bf:8b:0f:9b:07:5c:ef:58:38:a9:7a:31:c0:0c:
                    41:34:d6:57:e5:7c:86:cc:92:a4:89:8e:8f:99:ae:
                    b3:06:7f:5c:b7:0a:b9:c0:b5:f5:d7:da:dc:9d:27:
                    51:6c:52:00:2c:53:36:e1:6e:79:48:64:6d:40:4b:
                    5a:91:fa:e5:d9:3f:3f:23:a3:a8:eb:16:cd:9d:0d:
                    0d:83:1d:bd:8a:72:b2:11:dc:20:16:e5:75:0e:f8:
                    fd:bf:60:36:04:70:c9:dd:10:9b:99:b0:a0:0c:ed:
                    6b:0e:1c:cb:04:f7:2b:11:9d:d6:29:80:70:44:f5:
                    e9:ae:c6:4b:13:13:be:fc:76:d2:31:68:6e:b5:3e:
                    9f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1A:6D:17:80:07:A7:21:05:0B:80:B6:94:23:C5:48:A1:59:ED:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/d87c40ff-d690-3d23-bcdd-c4688a4507d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.93.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:b7:e2:eb:aa:18:24:15:89:3e:04:17:74:d2:93:34:d0:71:
         bb:f3:c5:a2:8a:cb:57:a3:cf:86:da:51:7a:bc:6d:0f:4e:97:
         f9:b0:ff:67:d2:f3:11:d9:6c:7c:58:12:8c:08:71:5a:c3:d6:
         01:96:00:79:7a:e1:18:fe:dd:56:cb:c4:71:b7:1b:c9:d9:c9:
         f1:28:2f:76:5f:a1:a1:d8:ad:1d:a2:0c:19:a9:f0:a1:f1:0f:
         4c:7a:07:b3:8e:c4:f7:fd:d4:6e:25:57:e9:91:05:54:81:f5:
         ef:58:d2:52:b8:30:2c:ee:cd:29:3f:a3:9f:95:4f:55:05:9d:
         7a:19:df:5c:5c:52:99:6c:f5:c9:ee:8e:91:b3:6b:a0:70:80:
         1f:34:f8:6f:94:78:3d:8c:7c:5f:c3:a0:2e:01:a0:35:bc:62:
         7e:5f:f0:b5:21:03:f6:49:45:da:d9:59:b4:46:95:7d:77:83:
         95:d2:ac:f7:a7:42:95:bb:12:80:d4:82:20:0d:86:cc:b1:19:
         7c:f4:2f:b9:0f:03:31:44:3d:70:c4:46:12:59:70:f3:b7:b2:
         b7:20:cd:f8:24:b4:07:e6:d6:ec:89:ec:92:fc:fd:7c:d3:01:
         7d:10:0f:18:13:b0:eb:82:14:2b:32:fe:96:8c:e4:00:14:90:
         68:8b:54:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:05:44 2025 by rpki-client