Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed/ac764abe-8849-3f0d-8819-cde43865a65e.roa
File:                     ac764abe-8849-3f0d-8819-cde43865a65e.roa (raw, json)
Hash identifier:          dvjwWk3pFs+Jw2hfjcY01pESpU63L4ZookZOwN/IVfc=
Subject key identifier:   E8:BF:FA:34:A1:1E:6A:26:FE:37:E5:0B:95:42:E4:05:C7:49:03:29
Certificate issuer:       /CN=e11ef213-14f9-4836-8d15-5de5c04f43ed
Certificate serial:       010D0C9F432858499AF4740909238637AE9E8F80
Authority key identifier: C1:9E:2C:DD:9F:B8:49:9A:57:8B:3A:F5:BF:E3:5E:54:2C:49:4A:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed/ac764abe-8849-3f0d-8819-cde43865a65e.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     208287
IP address blocks:        216.9.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed/e11ef213-14f9-4836-8d15-5de5c04f43ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed/e11ef213-14f9-4836-8d15-5de5c04f43ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:74:09:09:23:86:37:ae:9e:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e11ef213-14f9-4836-8d15-5de5c04f43ed
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=f4b0911a-8b6d-4a1e-a423-ee805c82c9ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:45:ed:bc:87:bc:55:f5:fd:91:a8:fc:fd:ea:
                    5f:45:71:1e:15:61:e4:29:84:17:4a:90:12:16:96:
                    db:50:00:ae:a8:31:f9:37:b8:60:78:46:49:ea:56:
                    55:20:da:44:8e:07:27:a7:70:9b:7c:7c:02:12:fc:
                    f0:a6:e0:31:a2:d5:14:44:fd:10:75:f5:f8:3b:3b:
                    92:97:a3:71:99:21:b5:fb:bb:a7:f0:43:50:1b:47:
                    7f:c3:af:f7:d0:dc:76:bb:32:eb:4a:ed:9c:d2:dc:
                    84:52:ad:8c:85:2b:24:e9:70:5c:19:21:5d:d6:6a:
                    1e:84:06:01:7a:5a:d6:93:fe:d0:b7:d0:5d:85:63:
                    50:b3:b9:c3:07:66:ce:a4:86:d3:39:f0:66:e1:b0:
                    c7:d5:90:fb:66:e2:f7:51:9e:d7:82:a0:02:20:e3:
                    f2:38:79:e4:54:a9:78:6d:e2:88:ea:1a:dc:38:d5:
                    c2:45:cb:8c:95:c5:70:68:58:84:2e:a4:cc:39:fc:
                    11:cd:37:55:ca:ab:0d:88:05:4b:fd:6d:7e:ce:98:
                    5d:3d:4d:b8:54:0f:ba:85:e2:08:e8:c3:8d:1e:40:
                    08:cd:f1:99:55:f1:39:a3:a8:2e:43:eb:18:dc:cf:
                    88:cd:31:05:b8:85:5e:94:40:58:40:fb:53:41:86:
                    9b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BF:FA:34:A1:1E:6A:26:FE:37:E5:0B:95:42:E4:05:C7:49:03:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed/ac764abe-8849-3f0d-8819-cde43865a65e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed/e11ef213-14f9-4836-8d15-5de5c04f43ed.crl

            X509v3 Authority Key Identifier:
                keyid:C1:9E:2C:DD:9F:B8:49:9A:57:8B:3A:F5:BF:E3:5E:54:2C:49:4A:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.9.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:9c:29:ab:a4:b6:b5:96:04:8d:29:67:b7:c5:04:58:45:ed:
         e7:1d:57:31:7e:78:36:38:59:b3:56:b2:61:af:82:86:04:ac:
         b4:7a:f8:66:3d:38:cf:4a:4f:0a:de:e0:93:a8:82:72:75:73:
         c5:ee:2a:b3:0a:fa:44:54:c0:1b:73:50:98:f2:ac:80:8a:39:
         66:bb:56:2f:21:0b:68:76:13:2e:74:17:07:2c:2d:aa:fd:f3:
         c1:eb:4a:54:85:54:e6:a7:ba:f5:39:34:a5:c6:60:b1:2b:f9:
         bf:79:a7:92:a9:e4:54:a5:3b:30:6e:19:63:6e:0d:cf:dd:ba:
         9a:a3:12:8d:a1:1b:86:e3:49:ec:3b:6d:8f:b3:31:61:dc:bb:
         36:cb:7b:c4:9e:7b:07:da:c1:41:3b:c8:38:9d:7d:3e:86:42:
         53:e8:cb:bd:77:f3:9a:5c:90:52:33:66:a4:1d:95:69:4e:dd:
         13:71:d1:5e:8e:86:1f:a8:86:75:05:c8:49:49:8a:bc:8e:9f:
         b0:22:df:7d:6d:fc:3d:35:58:86:14:56:3e:60:e5:9d:db:4d:
         ae:f5:9b:68:05:e6:63:95:aa:01:16:d5:be:34:11:e2:94:8e:
         fd:2e:da:2b:89:07:c5:7c:32:57:78:da:a2:ba:be:c7:82:3e:
         7b:c9:1b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:01:05 2025 by rpki-client