Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/042f9625-fe81-306c-92cd-25c107455d69.roa
File:                     042f9625-fe81-306c-92cd-25c107455d69.roa (raw, json)
Hash identifier:          RJ/qVrGT6IMMO4WBVFBBKtXuzwVm6e6kFSW3U1DWG4Q=
Subject key identifier:   AD:A9:3D:5C:F8:9D:43:E1:07:55:89:19:10:37:34:0F:EC:68:7C:5C
Certificate issuer:       /CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
Certificate serial:       010D0C9F43285849C904DD1F9DC7562872AC4BE0
Authority key identifier: DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/042f9625-fe81-306c-92cd-25c107455d69.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        216.24.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:dd:1f:9d:c7:56:28:72:ac:4b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=5cf0b42b-ce84-4816-9d41-645f21af4549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:00:30:27:6a:d2:ee:cc:f5:c9:d3:cf:b0:93:
                    f1:e0:92:c0:e6:7b:ec:3f:0e:ed:60:af:32:96:64:
                    59:88:9b:db:3a:13:b8:c3:90:4b:e6:ea:0b:9b:4a:
                    1c:ba:c2:ed:af:2b:c4:16:77:e6:15:ce:b1:ad:2f:
                    7a:b0:8c:1d:9c:5b:62:5c:f2:e5:17:1d:66:4d:25:
                    8b:bd:0b:2e:cb:1d:9e:1a:c2:ce:5c:b3:0d:78:bb:
                    9b:29:62:a1:c2:42:6c:51:fc:be:a8:28:98:52:87:
                    95:88:0f:68:e9:20:7a:dc:7d:4a:4b:fb:50:f6:90:
                    28:1a:c4:16:ea:cb:b9:ed:56:b6:d0:57:36:8e:23:
                    c3:d0:2d:1e:6a:04:53:89:56:6f:2b:49:cd:d6:67:
                    e4:e5:be:50:25:a0:a2:c9:b2:05:b4:08:8b:61:b3:
                    a1:a1:df:24:d5:45:f8:2e:60:89:35:41:bf:a1:bf:
                    08:0c:1c:6d:50:4c:b9:49:47:58:63:b4:3c:70:3a:
                    66:1b:14:12:7d:c2:fb:76:e6:20:a4:73:dc:6f:f0:
                    37:04:b2:0a:47:a8:1a:75:56:16:00:47:60:6a:b4:
                    38:aa:55:1b:b1:cc:2e:ad:bb:79:e1:2f:15:c9:e8:
                    a5:f8:82:79:d6:bf:9f:5b:ec:b9:d6:ba:5d:8b:34:
                    ba:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A9:3D:5C:F8:9D:43:E1:07:55:89:19:10:37:34:0F:EC:68:7C:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/042f9625-fe81-306c-92cd-25c107455d69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl

            X509v3 Authority Key Identifier:
                keyid:DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:96:75:cd:c4:68:18:e9:a2:3a:19:31:94:be:15:b4:64:6a:
         63:fd:37:2c:81:65:34:4a:75:90:77:7a:50:95:32:45:7f:10:
         c8:40:30:09:08:ba:4d:2a:9e:a9:59:9c:12:df:6e:a9:02:a1:
         39:d0:b9:3f:af:df:36:9b:3d:63:e9:a8:7a:fb:d7:7a:34:d5:
         35:e0:6d:24:54:2e:d6:ab:aa:a0:50:57:62:2d:7f:b5:9a:f7:
         ba:34:75:9a:d4:8b:28:47:dc:9c:d6:a5:89:8c:af:db:fc:60:
         5b:ba:40:41:56:68:53:23:6d:c6:ec:8d:d7:8b:88:6f:c4:41:
         ab:8d:6c:cc:29:20:dd:8f:70:03:b9:24:57:de:41:09:d9:e7:
         47:50:b0:23:5a:57:e9:6f:61:2a:fd:df:bc:7e:28:20:71:e6:
         ca:2f:a1:82:77:b8:af:c5:7e:82:2d:c8:79:fe:ba:d2:76:a7:
         d3:a6:a7:4b:52:0d:21:d8:83:8f:1e:01:6c:80:eb:ba:99:ad:
         ea:18:53:a3:bc:ca:38:2b:0f:11:44:de:8d:59:ba:3d:e2:3b:
         99:e1:3d:79:28:7b:34:00:26:68:9f:2f:05:c8:85:67:cb:82:
         70:42:3d:0d:c4:2a:56:25:6a:0b:9f:43:cc:dc:19:d4:9c:e3:
         1b:1f:22:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:37:49 2025 by rpki-client