Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/44fa7203-10fb-3394-93c5-802539bacbc6.roa
File:                     44fa7203-10fb-3394-93c5-802539bacbc6.roa (raw, json)
Hash identifier:          O4PnEYh88yMIxn00Eev7ykhBwNffbWBGKD6/fgKCDsk=
Subject key identifier:   67:61:49:7B:1C:C2:67:BA:A0:D0:EE:D8:6E:F4:3F:F5:6D:E4:59:90
Certificate issuer:       /CN=fd691680-2c46-4e86-8545-3e0e0c0e305a
Certificate serial:       010D0C9F432858499F2495DED373B850F3D3E880
Authority key identifier: A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/44fa7203-10fb-3394-93c5-802539bacbc6.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     16509
IP address blocks:        216.31.33.0/24 maxlen: 24
                          216.31.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:95:de:d3:73:b8:50:f3:d3:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd691680-2c46-4e86-8545-3e0e0c0e305a
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=5440a064-5df9-4b8e-9f54-81046818f96d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cd:a5:ad:20:46:73:5c:b8:aa:83:66:eb:96:
                    bc:17:02:a6:e4:6f:87:a8:05:5e:0d:e2:49:a6:8c:
                    e0:5e:29:a8:7e:47:f3:0e:1e:f0:f3:ad:04:d9:5c:
                    29:12:c8:e7:a3:7a:88:c7:46:62:f2:50:ca:a1:d2:
                    50:46:3b:56:84:86:53:c1:ba:fd:63:0d:4c:09:80:
                    03:45:43:df:ef:bd:f1:f7:0b:cb:ec:80:a2:a9:2a:
                    3b:86:76:a3:61:43:2b:0b:5e:f1:bc:24:82:70:96:
                    9d:a8:be:e7:76:7c:39:23:64:d5:7f:40:a1:15:d4:
                    3e:0d:1a:a0:aa:56:6b:33:c8:6f:28:23:c9:be:ec:
                    e2:1f:e0:15:f3:d1:65:c7:45:42:4e:6c:20:5e:ba:
                    37:f5:b8:34:bc:df:d4:b3:6c:1a:10:f9:74:02:0a:
                    bd:4f:e0:74:30:0c:8b:7a:69:94:27:ef:fb:20:46:
                    01:c2:09:a8:39:fa:07:93:d9:7b:7c:83:4d:52:da:
                    39:71:a8:e3:a6:93:d1:35:a4:2d:03:4b:95:ce:cb:
                    fb:45:4e:3c:6e:61:61:82:ab:79:82:90:ea:e3:6a:
                    31:90:08:50:ad:9f:42:21:1f:c9:0d:0d:9b:f4:d5:
                    bd:b1:27:73:87:1f:e9:84:1e:46:44:49:5f:78:73:
                    98:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:61:49:7B:1C:C2:67:BA:A0:D0:EE:D8:6E:F4:3F:F5:6D:E4:59:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/44fa7203-10fb-3394-93c5-802539bacbc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.crl

            X509v3 Authority Key Identifier:
                keyid:A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.31.33.0-216.31.35.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:f4:94:c4:64:50:77:cd:02:de:21:94:c7:9c:3c:da:c6:ae:
         aa:4e:ed:ef:03:5c:a5:d5:da:52:fa:8a:b2:e2:69:82:a1:69:
         6f:e4:3f:e0:74:06:33:79:10:1e:81:db:7e:3e:a5:f9:b4:64:
         30:83:b3:b4:71:cf:03:6c:c0:e2:2f:34:25:61:77:5c:cb:b2:
         4d:cf:75:4b:e8:e2:be:27:c1:6c:1a:9b:51:85:7f:c6:f2:3a:
         49:bc:32:c2:e7:c6:99:0c:4f:bf:5c:16:7a:d0:71:e8:56:eb:
         9b:46:18:32:45:c1:ad:4e:ce:a1:f1:03:d2:1e:9b:72:7c:10:
         7d:6f:1c:ba:3a:d5:9f:e2:95:da:14:10:3e:76:f5:b2:89:85:
         4d:62:6d:05:40:8f:6e:7b:da:fd:dd:c0:7b:a4:39:cb:c9:97:
         e6:4d:eb:f3:80:11:65:35:73:a6:d8:cf:d9:e8:69:f7:94:d2:
         61:d6:e9:bd:5a:c4:bf:c8:86:89:da:e3:63:35:57:49:80:6f:
         66:bd:dc:5b:43:61:dd:d2:95:35:07:d8:75:67:fe:5e:c9:75:
         79:a1:cd:02:b5:8d:3e:50:05:f7:22:2a:bc:66:07:01:12:20:
         7a:f8:56:dc:76:28:53:a5:af:9c:72:8b:b0:c4:34:43:57:27:
         e4:44:9c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:54:23 2025 by rpki-client