Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3dbf5ad4-699a-3778-878c-b469cf9d348d.roa
File:                     3dbf5ad4-699a-3778-878c-b469cf9d348d.roa (raw, json)
Hash identifier:          ebrRMlx29tHtr0cBXfxSYWsIY+cFI0KnkdjhSzVTQyo=
Subject key identifier:   E5:96:34:49:18:03:A2:90:6B:14:0D:0A:DD:65:05:BB:0A:8E:0B:20
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F43285849D42FB4B04D16F0DF069FC240
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3dbf5ad4-699a-3778-878c-b469cf9d348d.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     16739
IP address blocks:        24.56.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:b4:b0:4d:16:f0:df:06:9f:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=9ded87ef-2337-44d3-8d1d-6ee51cbfeb84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:18:71:f6:46:34:c0:a5:be:47:32:ca:83:aa:
                    08:a0:cd:48:5d:93:e2:b7:7a:67:a3:99:a9:27:ad:
                    f4:52:fb:6e:be:c0:7c:8f:cd:f0:be:5d:87:c9:da:
                    7d:f3:93:cc:1b:45:7e:38:89:f5:a9:af:99:c0:62:
                    ed:7b:11:42:27:48:0f:d1:85:f3:c5:c4:df:02:24:
                    67:3d:b7:04:95:41:f4:6c:0b:c9:14:16:8b:fb:47:
                    84:60:a4:a1:19:fd:fc:fe:08:78:4d:9c:9d:b6:88:
                    01:61:6a:d0:b7:17:99:fb:04:08:d3:dd:48:00:ab:
                    d0:c5:23:aa:9a:22:57:a7:a4:65:c6:72:76:e5:70:
                    8b:d4:92:74:65:52:f6:27:63:36:f5:a5:1d:24:03:
                    c9:20:34:88:79:f4:c4:ae:f4:55:67:85:7c:41:ba:
                    54:f4:86:6b:1b:38:59:19:f3:52:eb:2f:62:29:4c:
                    6f:d7:c0:d4:84:6a:4f:20:81:70:95:63:51:cb:f8:
                    dd:24:2d:dd:f2:5c:b3:1c:32:d5:92:41:5d:e4:91:
                    8d:7c:71:ec:37:bb:1f:a9:9e:49:2b:86:40:cd:b7:
                    5e:eb:db:ca:b0:14:c8:34:48:30:81:16:20:93:48:
                    46:f9:f8:06:51:da:e4:5a:3e:70:0c:25:84:64:f0:
                    54:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:96:34:49:18:03:A2:90:6B:14:0D:0A:DD:65:05:BB:0A:8E:0B:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3dbf5ad4-699a-3778-878c-b469cf9d348d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.56.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:bb:c6:74:c4:b0:5a:d7:29:6b:02:2f:7c:71:bf:36:cb:d2:
         57:53:73:64:d4:70:c9:d2:06:5d:8c:9c:6c:97:d2:07:38:4f:
         a2:7a:8f:61:fa:88:34:b1:77:f5:66:69:d5:1e:71:c1:c4:12:
         56:4b:b1:31:70:5b:71:9d:5b:1b:d0:a9:92:7b:76:ba:b2:c4:
         c8:00:f3:19:59:46:54:fc:5e:e2:ba:8c:47:9d:ab:10:12:55:
         57:8d:b4:94:23:2a:fa:68:1c:15:93:35:db:af:57:ca:da:9d:
         76:a7:27:25:af:25:73:20:6d:fc:2b:77:2d:8d:fb:17:75:ed:
         ea:55:37:dd:6b:59:53:fd:41:d4:22:ab:c8:11:ad:c4:d1:7f:
         45:b1:c9:9c:22:a2:c8:12:8e:95:8a:ce:41:27:39:a2:37:4f:
         d1:56:81:a5:72:8f:e3:9e:e2:57:03:88:11:d9:79:64:17:fb:
         be:20:47:0b:f4:88:60:51:9b:27:29:4e:bd:a0:86:43:99:68:
         39:c9:ab:33:0b:53:20:0a:33:31:3f:04:73:a5:21:fb:de:5a:
         20:02:75:46:c6:4c:55:c5:81:46:7a:49:fb:87:e8:82:45:c2:
         76:5f:81:70:01:e8:5d:42:56:a4:de:9a:4a:48:d0:fb:3b:e9:
         37:a8:f3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:02:41 2025 by rpki-client