Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/76c954c8-723a-3014-acc7-bb0c404b1f44.roa
File:                     76c954c8-723a-3014-acc7-bb0c404b1f44.roa (raw, json)
Hash identifier:          Oa9pPxZfCFUTjJas6HQYf0XhJqgQI190VbofKl/kxU0=
Subject key identifier:   99:EE:3B:D6:0F:E8:A3:CA:DE:7B:E1:D7:2A:27:B1:AD:36:E9:7C:17
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584A103540F87020A8C8C8589A80
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/76c954c8-723a-3014-acc7-bb0c404b1f44.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     62240
IP address blocks:        216.24.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:40:f8:70:20:a8:c8:c8:58:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=020d3057-ff7a-4928-81d2-a6c2a23b390a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:00:e0:36:e5:ac:89:8f:2f:81:97:17:10:9d:
                    aa:91:94:ff:35:34:3c:21:b7:41:f1:d5:f9:15:ec:
                    b6:f9:c7:9d:6b:fb:44:38:b4:c6:7f:50:f5:01:7d:
                    3a:d5:e1:10:00:12:65:09:e0:64:9e:ef:65:22:b3:
                    78:8a:cc:16:90:f2:3e:25:c2:d9:68:bd:38:d1:43:
                    a0:c1:a5:4d:de:02:3e:00:78:0b:2c:fa:58:d3:44:
                    33:ee:e3:66:5e:3e:6d:e6:b3:4e:95:3c:b1:e5:1f:
                    fd:af:c0:3f:d1:a3:a0:bb:1b:ba:27:0c:2d:67:93:
                    fa:5c:35:62:da:b2:ee:b6:26:69:be:2c:09:fc:f7:
                    29:ce:12:3c:ef:4c:84:8c:da:17:04:a5:38:cb:46:
                    50:04:b2:af:12:56:f6:89:f0:6a:eb:3d:d2:a5:a5:
                    bc:eb:66:1a:cd:6f:e3:29:4f:77:d3:e1:ff:17:4f:
                    5e:d3:1f:99:06:de:5c:c8:e3:71:c3:e3:12:8c:93:
                    c6:77:fb:30:76:d6:68:3e:c8:32:99:24:cf:51:b3:
                    82:18:87:c2:05:50:69:04:44:ac:0c:ca:84:79:c4:
                    6a:30:7f:2a:10:6b:33:57:15:a2:57:71:32:b9:b9:
                    c2:fd:1e:69:53:54:26:73:44:fc:4b:ed:2f:e5:01:
                    e4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EE:3B:D6:0F:E8:A3:CA:DE:7B:E1:D7:2A:27:B1:AD:36:E9:7C:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/76c954c8-723a-3014-acc7-bb0c404b1f44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:38:30:75:af:4f:b6:29:50:c3:98:6a:95:81:48:bd:8d:68:
         09:7d:c4:46:b9:98:9f:c6:e5:00:32:d2:ff:36:95:62:76:e0:
         ac:a3:ef:94:07:cf:1d:7d:f7:95:e2:12:24:29:f1:fb:9d:b5:
         58:fd:e8:24:ca:04:09:85:e5:b0:71:a4:33:4b:e3:48:89:be:
         f6:14:44:8e:68:64:8e:b7:85:5f:bd:33:9c:40:fe:c8:03:de:
         8c:7e:7f:5e:b8:23:ff:fc:a5:6a:64:7d:09:7e:12:f0:1e:d2:
         b2:f6:93:de:c1:1f:ab:12:a2:b8:1d:54:2a:00:e7:5d:3d:fa:
         80:71:66:58:8e:06:d1:0a:bb:0a:1b:94:24:ea:dd:cc:a8:f5:
         97:35:69:bf:2f:fb:36:9c:90:8f:51:ee:36:96:9e:17:5a:c9:
         81:84:d4:1d:9f:82:ec:3c:9f:7d:0f:21:03:38:37:66:3d:16:
         a4:2f:c7:ab:6b:ad:d0:27:fa:26:06:37:74:20:4d:6a:63:00:
         72:c4:df:50:ba:bb:5f:52:9b:61:e5:d8:04:88:09:3f:4b:d2:
         d1:2b:80:c1:89:57:fa:9c:98:51:ea:ae:da:06:1b:0c:af:c9:
         93:84:57:29:29:08:8f:a3:76:63:f7:63:56:e6:ac:32:96:ad:
         78:96:00:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:16:47 2025 by rpki-client