Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b526cda0-8ca4-325c-a42a-d957350045a6.roa
File:                     b526cda0-8ca4-325c-a42a-d957350045a6.roa (raw, json)
Hash identifier:          rLcYyJrPqw8IpxUNZu1EpdC36dnzDTTNtsDlE3DyrQM=
Subject key identifier:   BB:4A:4B:D3:81:1F:F5:88:96:B1:E6:88:18:D5:2C:CB:96:E0:66:A5
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D1647452EB78CC713A4D80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b526cda0-8ca4-325c-a42a-d957350045a6.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        96.40.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:64:74:52:eb:78:cc:71:3a:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=110c81d4-1859-427d-b08b-02c24c75bb3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:63:f3:62:33:69:59:f5:3e:73:65:76:f0:41:
                    49:75:9d:93:42:a0:fc:08:9a:5d:db:53:bb:7b:66:
                    60:8a:f2:50:e7:09:e2:c0:d8:16:6f:d9:46:af:64:
                    81:2f:94:cb:79:65:f8:aa:c1:73:95:55:09:ba:53:
                    b6:e7:1a:11:0f:6a:d5:e5:31:66:59:09:30:b3:d2:
                    b0:bf:45:1c:20:62:ef:94:b6:69:b7:6f:82:2f:fe:
                    ea:4e:6d:1f:ac:1e:c2:24:1f:04:4f:ee:8a:fb:6b:
                    13:63:9e:45:ce:cd:d7:f8:00:a6:f1:6d:fb:78:20:
                    f1:c1:98:80:2c:42:96:cd:12:f3:65:96:03:b8:67:
                    4a:5c:cf:17:a7:ee:85:79:3c:a4:bc:ad:b7:ff:cd:
                    17:57:7a:c5:0d:9b:6c:dc:c5:1d:fa:3c:a5:e4:5b:
                    28:06:91:de:71:6f:57:4c:6b:e2:75:39:7c:56:19:
                    a9:0a:19:dc:48:7d:87:b7:b9:29:47:d4:a2:2e:12:
                    1a:f7:69:10:96:ef:f7:71:70:7a:02:40:85:83:fd:
                    a3:e0:dc:bc:e4:7a:89:c6:ab:bb:01:41:ed:18:bb:
                    74:d2:7c:1e:39:52:0b:f3:19:ed:f2:9d:8a:5d:aa:
                    dd:da:e7:bb:a1:2c:fc:be:02:db:17:0c:4c:ba:7d:
                    d0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:4A:4B:D3:81:1F:F5:88:96:B1:E6:88:18:D5:2C:CB:96:E0:66:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b526cda0-8ca4-325c-a42a-d957350045a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.40.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:c5:4b:c1:17:50:55:87:c5:05:c9:8c:34:4d:02:26:18:23:
         e0:b8:47:6c:7e:9d:7c:7f:c8:be:49:0d:b8:89:35:75:20:dc:
         de:ec:d5:90:83:d8:7f:e6:7a:b0:f7:ec:d0:04:4d:e2:9d:0e:
         fc:57:28:cc:03:4a:6f:10:65:c2:ae:36:f0:31:fe:03:ad:e7:
         e5:cc:bb:fb:43:5b:b2:f7:dd:46:4d:8b:dc:0c:48:e9:6b:8f:
         20:bd:13:08:cd:5c:a1:6c:ad:e4:12:73:3e:1b:5d:77:54:e9:
         d1:b0:24:b4:27:72:49:ce:2e:a2:f9:72:e1:69:82:ab:04:ca:
         b7:93:95:e6:33:0b:41:3e:22:88:40:51:a7:05:c3:e5:96:95:
         69:3a:41:8e:e4:e5:5d:ab:88:9a:e2:92:ff:b0:9b:ae:5f:59:
         f6:54:bb:9a:e2:fa:ea:eb:4f:db:eb:8c:de:c1:92:82:34:5c:
         09:56:6d:0d:2c:ab:0b:b2:d7:11:11:58:d3:fd:61:5f:12:d6:
         cc:79:74:05:d8:86:bd:d8:22:bd:a0:94:5f:b5:cc:09:1b:90:
         81:7c:31:cd:f4:b7:6b:79:c3:a8:cb:0f:fc:59:77:1d:12:7c:
         ff:00:34:7e:73:3c:62:f1:05:ef:c8:d9:83:fd:15:c4:96:b6:
         80:a5:79:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:51:05 2025 by rpki-client