Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/059ce6cb-6a5b-3225-905b-4092dbeac2ff.roa
File:                     059ce6cb-6a5b-3225-905b-4092dbeac2ff.roa (raw, json)
Hash identifier:          3NwNex8OsX4Kv2LDoxIGGi8D6i7Zrs2vub2+vZIPTak=
Subject key identifier:   AD:06:14:7C:06:33:2B:26:27:5E:EA:9C:3D:E4:66:4E:4E:D6:89:E8
Certificate issuer:       /CN=ae67d891-3b16-4302-bf8b-4adb69436dbe
Certificate serial:       010D0C9F432858498B99CE4F3570C3B90DEBDC00
Authority key identifier: A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/059ce6cb-6a5b-3225-905b-4092dbeac2ff.roa
Signing time:             Wed 16 Apr 2025 13:01:01 +0000
ROA not before:           Wed 16 Apr 2025 13:01:01 +0000
ROA not after:            Tue 15 Jul 2025 13:01:01 +0000
asID:                     26831
IP address blocks:        209.124.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8b:99:ce:4f:35:70:c3:b9:0d:eb:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae67d891-3b16-4302-bf8b-4adb69436dbe
        Validity
            Not Before: Apr 16 13:01:01 2025 GMT
            Not After : Jul 15 13:01:01 2025 GMT
        Subject: CN=8d43b628-627d-4160-aa85-820bcd20b1e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:66:c7:30:89:84:1a:ff:34:0c:4e:f9:9c:2c:
                    5d:b3:9a:ea:53:ac:87:b7:90:de:55:19:81:70:ad:
                    ed:3a:20:40:c9:cb:12:66:c2:c0:96:b3:4e:00:59:
                    3b:d4:cd:a7:c9:40:58:d2:a6:22:af:3f:99:4d:a7:
                    07:4f:2a:47:73:0c:79:7f:0f:8f:e0:97:a9:c2:c3:
                    ba:46:76:76:78:20:cd:3a:e5:c9:d9:79:2a:cb:9a:
                    31:99:ad:3d:95:bf:72:f3:bf:03:1c:15:3f:a3:ab:
                    91:ce:73:fc:ba:24:b5:f3:0c:18:0b:e3:cf:03:58:
                    7f:51:61:b8:27:80:cc:d4:ef:8f:18:3b:b4:ea:18:
                    71:6a:01:bd:56:f4:de:92:e8:a1:d0:68:d3:13:d9:
                    a5:66:88:41:bb:f7:49:8d:d2:e0:c9:69:cd:e5:e5:
                    82:3f:23:fc:72:13:ef:74:c7:15:bc:34:55:0a:bc:
                    04:ee:66:e2:c1:86:15:81:54:5b:a4:bf:6f:2c:55:
                    ae:46:0d:fd:6d:ba:65:52:5d:a5:ef:75:e1:27:35:
                    7c:45:d0:49:0d:fb:e5:78:c5:84:af:25:48:8a:9b:
                    8c:36:97:fe:77:ce:04:b1:cc:69:a3:ae:b1:22:61:
                    36:4f:0c:56:14:62:2d:bd:14:0e:43:10:5d:59:ca:
                    c5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:06:14:7C:06:33:2B:26:27:5E:EA:9C:3D:E4:66:4E:4E:D6:89:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/059ce6cb-6a5b-3225-905b-4092dbeac2ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl

            X509v3 Authority Key Identifier:
                keyid:A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.124.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:bb:f7:1e:69:a6:81:ec:72:7e:d0:a9:e2:b4:8e:07:a3:c3:
         8e:d7:d0:a7:51:0f:97:60:f4:fc:f2:83:38:57:32:25:9b:0b:
         e9:2d:1d:75:d7:6b:ab:28:09:37:b3:bf:1c:4a:bf:19:1c:1c:
         33:54:9e:70:a8:7a:b6:a9:a0:23:8a:6b:b9:d6:70:09:55:9d:
         05:4a:c9:31:2f:17:aa:4f:2d:8e:00:1d:65:24:20:ae:5d:ee:
         23:5e:a1:1b:c8:22:52:e6:27:89:69:79:24:b7:b9:87:4f:08:
         4b:25:17:de:ef:87:41:1f:bf:18:20:1d:f9:88:9e:7d:a3:2b:
         3f:36:4a:53:60:a3:b4:90:52:2d:81:cc:69:c4:86:5a:ff:4c:
         fd:7d:3c:26:18:52:d0:58:8e:58:72:22:1b:83:8c:59:2a:f7:
         69:a9:8e:98:29:97:e4:43:bb:81:dd:7a:8b:9f:cd:25:1c:19:
         68:98:c3:fb:b2:43:c8:37:64:25:c1:bf:84:bc:f9:99:86:7e:
         fc:fb:14:fc:4f:cf:a3:69:e8:b5:c1:6d:4d:24:cc:88:c1:41:
         d9:24:ef:d9:15:7d:7b:e7:bc:c6:30:19:83:14:66:f1:fb:e6:
         1a:31:24:de:6e:94:43:93:0b:21:16:75:8f:4f:3e:31:4d:7d:
         e6:a0:99:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:18:12 2025 by rpki-client