Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/a7a777d6-a2f6-3a87-aab0-62d7d9f3f21d.roa
File:                     a7a777d6-a2f6-3a87-aab0-62d7d9f3f21d.roa (raw, json)
Hash identifier:          nS3m8aFGhE6WRk3w8dIZBYa39O44n1LhSmGo51mn8qE=
Subject key identifier:   99:BA:FD:9A:81:DC:BE:00:45:23:19:1C:A5:BD:36:8D:12:97:83:86
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F43285849806F21F3854C024121B28C40
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/a7a777d6-a2f6-3a87-aab0-62d7d9f3f21d.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     61317
IP address blocks:        216.185.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:21:f3:85:4c:02:41:21:b2:8c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=3e4511c7-992e-4e27-99e4-c54122b534fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7f:c2:f7:1f:24:e6:ea:24:e4:f3:f4:35:7c:
                    98:ac:83:a8:31:74:33:51:d7:58:3a:db:29:5e:33:
                    d8:fe:78:47:03:37:5c:9c:49:c0:b4:c0:66:64:6b:
                    83:ce:71:50:ed:78:d4:9b:20:4a:a5:be:34:d6:12:
                    25:99:ff:c0:9a:1b:35:35:6b:d4:2d:2f:db:21:3b:
                    82:70:f6:cc:04:c8:7b:90:4a:c8:67:2a:40:6f:08:
                    80:bf:37:37:f2:1c:a7:61:8d:0a:62:87:b3:88:20:
                    be:fc:e7:e8:88:62:b4:48:ce:b3:f0:31:5a:40:82:
                    91:92:20:4b:02:c2:25:33:72:11:b6:a1:e6:85:e9:
                    0d:b1:93:2a:a3:30:95:c4:70:1e:23:63:a6:8f:4a:
                    22:51:5a:a7:f0:d5:80:ea:86:86:0d:b2:7e:f1:61:
                    7f:ad:46:ce:cf:6d:2e:b6:8b:6d:88:76:37:dc:31:
                    05:d1:b1:b0:23:b9:3c:33:11:c8:9a:d4:9d:ff:cb:
                    ed:5e:72:b6:55:c0:e1:cf:d7:c7:d5:1f:4d:8c:31:
                    e4:b7:1f:d9:b3:01:e8:2d:a0:a7:a6:0a:15:47:92:
                    72:07:7c:2e:21:22:a3:f5:56:c0:b6:84:d9:95:b0:
                    b3:5f:75:91:ef:a1:af:83:7a:3c:cd:68:f4:0d:4d:
                    6f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:BA:FD:9A:81:DC:BE:00:45:23:19:1C:A5:BD:36:8D:12:97:83:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/a7a777d6-a2f6-3a87-aab0-62d7d9f3f21d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:81:57:5f:36:1d:d1:93:83:40:a0:ac:83:79:ed:7d:4f:8e:
         43:7b:3d:92:a1:c8:38:38:af:56:76:2d:51:13:b5:ef:13:fc:
         c6:70:f3:43:f1:88:29:5a:d2:20:cb:e5:47:a0:90:5f:b9:e2:
         17:bb:6f:9d:4f:78:ef:06:02:f2:8e:26:28:5b:8a:8f:20:b1:
         a2:5a:0c:9b:63:5b:c0:77:6b:aa:a4:4c:07:cf:16:ec:81:9c:
         a0:55:b8:3f:40:5d:34:89:7d:b7:2a:b6:11:de:83:71:0b:d2:
         07:e1:d6:fd:c4:57:d2:40:db:9d:d7:8a:f8:33:78:a0:cf:69:
         00:f0:54:f7:7b:64:5d:3d:ce:1d:b8:29:f2:b4:3c:4a:76:fb:
         0b:c3:6a:9d:94:ff:73:e2:8a:60:0f:be:54:4a:66:eb:bb:89:
         09:9c:5d:53:03:0c:39:dd:bf:03:f6:02:52:a3:46:f2:ad:f1:
         12:0a:7e:aa:72:88:82:8c:50:70:4c:dd:63:8f:ba:c2:93:60:
         ac:16:22:49:b7:71:9d:cd:91:6b:d7:b8:ae:50:d6:29:e6:d5:
         30:bd:9b:b7:a6:6a:81:14:fc:5e:e7:aa:3b:a3:dc:87:3b:af:
         ed:cf:9a:79:08:6a:88:77:45:c6:9d:82:b9:a3:28:80:7f:23:
         12:6d:cd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:08:13 2025 by rpki-client