Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/b684d30f-f572-311a-86f1-5cfad6dc0b3b.roa
File:                     b684d30f-f572-311a-86f1-5cfad6dc0b3b.roa (raw, json)
Hash identifier:          pBxylxJ/iZLbgcCdl8gpcJEaJpPgvu8Em8WAFflrckc=
Subject key identifier:   C3:BD:14:29:0F:B6:FE:1E:D5:E0:1C:BC:4D:55:4A:48:50:7D:7A:D0
Certificate issuer:       /CN=02ad5a58-3adf-41cb-9598-b3260591398c
Certificate serial:       010D0C9F43285849D164FFEA85326A37EE1F9900
Authority key identifier: 28:D5:F6:E6:7B:EE:87:BE:AD:EE:45:FF:5D:19:56:7C:5A:31:45:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/b684d30f-f572-311a-86f1-5cfad6dc0b3b.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     12097
IP address blocks:        24.140.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:64:ff:ea:85:32:6a:37:ee:1f:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ad5a58-3adf-41cb-9598-b3260591398c
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=20d04ad9-77a5-4307-9ead-45d985f15588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3b:cb:58:43:9d:b0:3a:e2:cc:31:f0:30:49:
                    45:fa:40:49:99:56:52:15:3f:36:32:6c:91:ba:45:
                    6e:5b:c9:13:cd:d1:e8:2c:cb:22:d6:16:94:03:ae:
                    13:af:fd:08:6e:e2:3d:8b:66:32:cb:74:8d:98:c7:
                    17:aa:02:ee:ef:71:c5:02:e1:62:a8:b5:cf:22:f9:
                    17:6a:56:d5:d3:e5:35:99:48:f0:d5:dd:52:3b:c9:
                    82:42:23:86:c1:cd:ea:01:24:e9:32:f9:3d:b5:0c:
                    04:34:a1:72:e5:9d:04:34:87:79:14:f2:5a:8e:da:
                    bd:b6:5b:6a:45:48:56:d9:f8:a6:34:ef:95:28:9d:
                    11:3d:4e:d6:45:dd:21:80:78:e5:7e:c6:d7:1e:d3:
                    a5:d1:db:2b:77:aa:bb:f0:c5:c3:bc:52:c7:ed:0a:
                    4f:52:97:a8:a7:d9:43:17:09:7a:be:1b:cc:35:68:
                    27:fb:11:48:3d:d2:28:64:18:2c:4d:f0:03:4a:15:
                    fa:06:9f:26:4f:5a:08:21:d0:ba:0d:90:9f:6f:c0:
                    ee:5d:98:cc:40:8e:fd:01:75:2e:e4:a6:60:09:50:
                    b0:15:dd:b0:a4:39:d6:2f:a6:f8:bf:97:90:e3:83:
                    3d:07:d2:91:b2:ed:31:8a:e4:ab:e7:cc:9c:cf:f0:
                    ed:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:BD:14:29:0F:B6:FE:1E:D5:E0:1C:BC:4D:55:4A:48:50:7D:7A:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/b684d30f-f572-311a-86f1-5cfad6dc0b3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.crl

            X509v3 Authority Key Identifier:
                keyid:28:D5:F6:E6:7B:EE:87:BE:AD:EE:45:FF:5D:19:56:7C:5A:31:45:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.140.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:9f:ae:77:08:dd:ad:82:9c:1e:cf:ed:98:6c:89:b8:34:b6:
         04:7e:8a:16:70:0e:5c:44:04:de:f8:bb:eb:54:39:97:ba:c7:
         bb:65:c5:fd:7a:cf:70:cd:5c:bf:a2:56:91:f7:57:ea:4e:c1:
         e1:2b:56:ad:81:53:1a:99:0c:7a:60:60:59:92:97:74:19:20:
         00:04:f2:c0:13:e5:11:1c:92:2d:78:97:84:3f:a8:78:a9:32:
         61:71:9d:f6:81:93:b2:44:f1:66:ba:28:58:32:d2:00:f9:cf:
         aa:53:eb:ae:ef:f3:cb:e5:e6:fe:f1:b5:34:35:77:13:00:b7:
         8c:3e:c2:43:de:ee:92:41:4c:c0:bd:bd:a3:1f:36:7c:99:00:
         97:1b:97:48:8a:e0:47:23:f4:10:79:5f:18:90:df:24:f1:ea:
         23:20:bc:88:aa:5b:00:0c:23:c2:5e:b6:08:9e:40:63:30:fe:
         d6:74:b7:87:62:18:85:89:c4:d5:ae:0d:b3:4d:93:27:73:96:
         27:64:d1:4e:a3:da:c6:33:a6:5d:2c:31:c5:4d:a5:cd:6b:bd:
         1b:df:c9:41:f3:7e:30:96:5a:7b:aa:68:1d:54:b3:fd:ab:5c:
         88:fd:20:5e:3a:36:bb:5f:b4:a2:da:78:3b:42:c8:47:b5:f9:
         f8:74:6c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:39:06 2025 by rpki-client