Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9459405e-891d-328c-86dd-9338e9eb4edb.roa
File:                     9459405e-891d-328c-86dd-9338e9eb4edb.roa (raw, json)
Hash identifier:          evE8TCcTRP/YYd3nCZi7+dpBv+hJcNJB7tRySSlAlS0=
Subject key identifier:   9F:CD:5B:B1:50:E1:BA:16:6B:17:06:76:AE:5D:06:90:81:B1:E2:41
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F43285849DC8FC4065615268E4775D0C0
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9459405e-891d-328c-86dd-9338e9eb4edb.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     53508
IP address blocks:        24.244.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:c4:06:56:15:26:8e:47:75:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=1d3e6fc3-7aa7-4075-b20b-ce243fe289ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c2:93:77:ef:c2:f7:c1:88:7d:cf:83:81:ac:
                    f7:91:3c:bd:7b:2d:e2:ac:ef:75:d0:50:7a:c6:66:
                    e7:2b:5b:36:32:e8:ad:35:84:81:f0:cd:fc:1f:cd:
                    59:d0:b2:cf:60:08:0e:21:e3:60:1b:2b:40:6a:b8:
                    03:46:d9:d9:4d:4c:e6:a0:0c:8e:53:c1:62:43:61:
                    6c:8c:5f:01:08:d3:0b:db:89:79:e4:3c:66:48:cb:
                    7d:74:cf:8c:32:74:02:a6:cd:41:92:03:8d:be:68:
                    a2:14:84:68:6a:08:f5:cf:f0:10:0a:a1:bf:e0:16:
                    a2:00:68:0a:5e:bc:89:ee:5a:d6:d8:ac:97:31:19:
                    9a:fc:31:08:e9:ce:c9:cc:01:18:79:79:27:aa:bf:
                    ed:36:c8:8e:02:a7:8e:cb:bf:7d:5a:27:b1:4d:e9:
                    6c:cf:d4:ff:27:ae:91:4e:95:d0:56:9e:e1:f3:42:
                    1d:60:d3:e2:a0:f2:36:f1:2e:cc:73:57:46:43:76:
                    8a:c1:21:7e:2d:88:a6:8d:02:bf:42:52:b8:d0:6a:
                    4b:b6:1c:8d:6e:42:d9:58:26:f0:bd:2b:13:da:24:
                    a8:68:59:e1:db:7f:a6:0d:88:72:1a:36:f8:fe:53:
                    3c:f8:a2:d6:10:36:fd:bb:bf:13:44:49:d5:6f:db:
                    12:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:CD:5B:B1:50:E1:BA:16:6B:17:06:76:AE:5D:06:90:81:B1:E2:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9459405e-891d-328c-86dd-9338e9eb4edb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.244.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:96:00:8b:b0:de:94:68:bb:cd:85:ff:eb:84:6c:7c:14:7a:
         da:8e:eb:04:8e:b6:9e:73:6f:74:80:ac:ce:a1:88:aa:df:a6:
         06:98:37:9a:f1:85:d3:30:99:2d:b3:e9:e4:fa:a1:22:f7:60:
         ec:28:30:23:c8:92:c5:8e:19:80:50:49:e7:2f:a1:d6:54:eb:
         ed:63:1a:f4:ff:ee:38:c3:d6:cb:94:31:64:a0:5a:d7:94:e3:
         e1:b4:3f:2e:b2:24:1d:a1:04:16:75:19:ba:c1:dc:31:a9:02:
         96:ee:6a:e3:d4:89:39:5a:93:0e:4c:05:1d:7d:4d:1e:7a:4e:
         59:26:c3:0b:bd:16:87:14:e3:cf:85:dd:c6:8c:a4:37:8b:0e:
         f3:cd:15:fd:03:f5:e9:e3:f4:54:2d:9d:81:f3:e9:66:f6:8b:
         5e:ae:c9:eb:44:af:a7:07:d3:e0:fe:2f:5d:61:b4:55:05:b4:
         53:9b:5c:dd:64:f4:07:69:6f:61:9b:0a:31:f7:30:35:23:8a:
         e5:48:9a:a0:7e:f7:e0:ed:52:6d:b2:f8:86:9e:a6:f2:e3:62:
         69:97:0e:4e:c7:4b:42:2b:74:30:8d:aa:46:32:9a:ca:69:a4:
         50:83:c2:5e:64:54:e2:f5:5c:ec:f4:05:86:86:e5:50:87:20:
         67:ab:f4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:07:21 2025 by rpki-client