Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/2dd8db05-37da-3eca-8ef7-817dce970a0d.roa
File:                     2dd8db05-37da-3eca-8ef7-817dce970a0d.roa (raw, json)
Hash identifier:          WPKAmNB91egRJU/XJrvX3tEPuCLC2JvKjkFlbL+tKf8=
Subject key identifier:   B6:4C:DB:82:22:0C:90:F0:45:F0:CB:86:09:1C:00:A0:6C:4B:20:D9
Certificate issuer:       /CN=d0a791ca-4569-43e8-b02a-989f79143fe4
Certificate serial:       010D0C9F43285848EB7A2A821F882F0FD7005620
Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/2dd8db05-37da-3eca-8ef7-817dce970a0d.roa
Signing time:             Tue 18 Feb 2025 04:28:00 +0000
ROA not before:           Tue 18 Feb 2025 04:28:00 +0000
ROA not after:            Mon 19 May 2025 03:28:00 +0000
asID:                     20454
IP address blocks:        96.47.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:eb:7a:2a:82:1f:88:2f:0f:d7:00:56:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4
        Validity
            Not Before: Feb 18 04:28:00 2025 GMT
            Not After : May 19 03:28:00 2025 GMT
        Subject: CN=8c27eade-b340-4b07-880d-1505520e8eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7f:bf:96:e4:6a:91:c3:8a:6d:22:99:5c:d4:
                    9f:82:62:ad:f0:7e:21:e4:d1:fb:25:23:ac:91:60:
                    69:ba:5c:86:54:f6:fc:75:17:f2:70:5b:02:f6:e5:
                    a4:93:5e:28:c9:b7:e6:67:0c:df:e4:fa:75:b2:66:
                    52:77:28:e0:09:33:ec:b8:b4:43:5c:08:4d:62:7d:
                    ba:71:d0:12:43:39:3b:2d:bb:c3:b0:a5:9e:d0:46:
                    67:f2:ae:5b:dd:50:34:2f:90:b8:34:2d:12:77:c7:
                    99:a1:74:35:b3:62:84:e6:17:ec:f0:97:cf:c3:9f:
                    ed:8f:b4:10:28:0a:c0:af:ae:09:73:a5:4b:c3:7f:
                    c9:1f:c0:47:a7:b5:f2:45:22:d2:14:89:dc:b4:4a:
                    36:32:a9:da:22:53:f7:04:f2:8b:68:85:65:52:0a:
                    26:10:94:6b:18:94:ef:fc:25:4f:f4:7d:c8:b1:b0:
                    03:d3:f0:4d:a2:84:e9:1f:40:46:f7:d9:a5:c5:94:
                    6e:09:b6:f7:f8:cf:fb:22:21:ec:cc:ab:54:5a:84:
                    f9:bf:78:48:28:e4:60:31:5e:c4:43:e7:7a:ce:d1:
                    97:42:ec:b2:a1:32:66:9e:10:4d:67:df:63:65:c8:
                    5a:57:c3:dd:f0:47:5e:da:36:c4:21:8b:00:65:bb:
                    a2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:4C:DB:82:22:0C:90:F0:45:F0:CB:86:09:1C:00:A0:6C:4B:20:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/2dd8db05-37da-3eca-8ef7-817dce970a0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.47.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:89:28:41:9d:20:90:77:f5:d5:e7:99:a8:21:ee:29:33:a5:
         1a:ea:62:0f:c2:9e:a5:a2:ca:b5:83:2c:73:da:eb:2e:88:6f:
         8a:f0:e7:3e:73:85:fd:ce:eb:42:30:53:c6:0c:11:67:b8:b6:
         d4:f6:aa:0f:7b:57:95:13:12:9c:23:31:d3:5e:42:6d:14:fc:
         f7:b3:7b:4e:f0:d2:e9:a5:1d:bc:a8:d8:78:24:45:84:bd:8c:
         54:ab:94:63:cc:56:d1:61:32:03:b3:a9:d6:9a:7e:d6:af:8b:
         e9:fe:a9:60:f2:b4:8e:96:32:49:5e:99:24:bf:e6:c9:5a:1a:
         7f:ba:4d:a8:24:47:83:41:13:e2:5b:4f:5f:a1:e8:20:b4:2c:
         40:bc:f7:e1:c1:ac:8a:3f:83:e7:3f:7e:e7:9f:a3:ab:03:1c:
         f9:11:37:1b:d1:87:cd:1b:68:de:3f:ce:9f:d3:41:f5:65:e9:
         01:95:80:f4:2a:07:72:cb:ac:00:66:dc:3f:39:2e:06:e9:b8:
         21:32:a7:b5:6c:09:06:69:1c:44:bf:19:b5:f2:b3:3e:a2:a7:
         32:63:9e:a5:77:28:9b:e8:b8:0d:2a:8b:c3:f5:21:69:3e:29:
         af:76:f1:a0:20:1f:e4:b8:07:13:28:66:3f:74:c3:15:4e:ea:
         1e:4b:8d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:28:59 2025 by rpki-client