Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176/b8a6959c-b405-3a36-9378-5743d5d51313.roa
File:                     b8a6959c-b405-3a36-9378-5743d5d51313.roa (raw, json)
Hash identifier:          35F9AKVHfWW6ll0upo9f8tuZow+6wc4VpCooCudpMWk=
Subject key identifier:   CD:A5:67:B4:A0:D7:2E:86:43:82:C8:4C:CB:99:8F:42:62:13:89:E0
Certificate issuer:       /CN=d27e1a94-34c3-4462-8f10-07b9ec5d8176
Certificate serial:       010D0C9F43285849B14A0556E982D658AAEDB700
Authority key identifier: F3:53:03:D3:57:0E:31:CC:DD:F5:88:F3:83:5B:23:44:0A:F9:40:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176/b8a6959c-b405-3a36-9378-5743d5d51313.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        216.120.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176/d27e1a94-34c3-4462-8f10-07b9ec5d8176.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176/d27e1a94-34c3-4462-8f10-07b9ec5d8176.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:05:56:e9:82:d6:58:aa:ed:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27e1a94-34c3-4462-8f10-07b9ec5d8176
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=b1af92e4-50e3-4ec2-9f17-956b3cc69146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c7:29:9d:f0:7c:d2:9a:66:0d:6b:0f:c3:7d:
                    99:94:07:85:ed:13:4e:5e:52:20:94:00:de:91:68:
                    c1:90:a9:f0:6b:d0:87:7f:a1:06:55:a1:fd:1d:34:
                    8e:a3:7b:74:23:59:d9:68:d2:09:d5:49:36:50:4d:
                    1a:f1:63:9e:8d:4b:00:5e:b9:73:0e:ac:d7:e0:b4:
                    98:30:62:f8:7e:02:ff:e5:0b:4d:59:a7:7f:22:f0:
                    e1:ab:45:cb:2e:c8:33:87:79:6d:ed:00:10:f3:32:
                    1b:77:ca:e2:16:eb:bc:58:a2:ae:c6:d9:50:62:e3:
                    b2:83:46:58:d4:9c:3d:26:cc:ea:69:46:7e:e8:14:
                    56:6a:da:a0:59:f3:64:61:e4:d9:d2:79:ab:37:98:
                    9a:1e:20:45:81:2c:49:0e:07:0e:4a:42:3f:cb:06:
                    09:d4:d4:01:ef:8d:19:74:41:5b:38:c4:86:4a:79:
                    44:d2:c3:97:cb:e6:94:74:3f:7f:7e:a5:ad:57:39:
                    6a:0e:6f:c6:85:bc:aa:db:c1:d2:f2:ad:44:6f:9f:
                    b5:cf:96:7e:76:55:58:b3:98:c8:bf:f6:e6:d0:4f:
                    04:ba:71:e0:19:d9:eb:77:17:ff:35:94:cc:65:93:
                    22:2f:43:37:20:a3:39:57:f6:8b:5d:03:e8:89:3c:
                    a4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A5:67:B4:A0:D7:2E:86:43:82:C8:4C:CB:99:8F:42:62:13:89:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176/b8a6959c-b405-3a36-9378-5743d5d51313.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176/d27e1a94-34c3-4462-8f10-07b9ec5d8176.crl

            X509v3 Authority Key Identifier:
                keyid:F3:53:03:D3:57:0E:31:CC:DD:F5:88:F3:83:5B:23:44:0A:F9:40:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.120.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:80:7f:ac:fb:99:a9:26:74:f0:a7:2e:34:91:ce:e7:fa:83:
         bf:fc:ef:b3:b6:20:73:0c:0f:b5:91:02:85:84:31:2b:30:7f:
         6b:e6:1a:0e:62:e3:31:21:2e:66:63:d4:b2:e1:2f:34:0a:61:
         2c:5f:cc:0a:b0:7a:72:dd:58:84:c6:58:ef:cd:03:86:9a:ea:
         45:3f:5b:ce:11:92:63:f7:ca:f2:d0:b9:a6:9c:2e:26:25:40:
         72:86:49:38:74:07:5d:ed:e9:87:33:15:b5:13:82:10:5f:fb:
         cf:ba:d7:f3:ee:43:01:dc:88:ad:30:df:8f:4b:af:68:c8:b1:
         5d:bd:94:ab:e7:78:4f:b4:72:77:b2:1e:2e:0e:45:a9:7d:64:
         f5:0f:dd:1f:38:a5:93:b2:75:39:a4:c5:8e:1c:6a:00:ab:e2:
         28:6e:f0:e3:eb:f7:18:1c:a0:10:05:d0:11:fd:07:fd:cc:d9:
         11:4c:90:68:16:12:19:36:ff:72:5f:4a:e8:bc:aa:f0:3a:c5:
         4b:2d:f2:00:4d:fa:e5:28:03:b2:28:ee:42:f3:4d:84:11:01:
         ab:9a:55:77:8a:06:d4:bb:76:50:3c:e8:1e:bf:f7:47:ae:a4:
         89:78:de:36:72:11:8a:38:ea:e3:58:d2:0c:7e:10:62:65:b5:
         1c:51:d3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:06:13 2025 by rpki-client