Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/1167f860-f4a5-3329-9563-b3f8f508fef5.roa
File:                     1167f860-f4a5-3329-9563-b3f8f508fef5.roa (raw, json)
Hash identifier:          6avW6wxQSPB9sux5fmtKsJLrW5W5wpEEjk1mpIvRFDs=
Subject key identifier:   42:36:F4:F2:B3:B2:17:B3:0C:44:69:84:CB:53:22:17:B2:89:29:7C
Certificate issuer:       /CN=0c924434-62f4-44d5-b440-476f5c675f3d
Certificate serial:       010D0C9F43285848318AAAAE156E3CCC7CDE0A00
Authority key identifier: 05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/1167f860-f4a5-3329-9563-b3f8f508fef5.roa
Signing time:             Fri 13 Dec 2024 14:00:50 +0000
ROA not before:           Fri 13 Dec 2024 14:00:50 +0000
ROA not after:            Thu 13 Mar 2025 13:00:50 +0000
asID:                     14618
IP address blocks:        209.178.244.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:31:8a:aa:ae:15:6e:3c:cc:7c:de:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c924434-62f4-44d5-b440-476f5c675f3d
        Validity
            Not Before: Dec 13 14:00:50 2024 GMT
            Not After : Mar 13 13:00:50 2025 GMT
        Subject: CN=2645b21c-be53-4954-9c1d-1a7e0da82606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b4:06:d3:7a:49:4b:43:18:9c:83:4d:c5:9e:
                    30:df:f7:ab:6d:ce:06:06:3f:d2:5f:12:b5:a6:84:
                    8b:c4:8b:ce:2e:5d:f4:8d:f6:30:c3:1b:ef:fe:8c:
                    56:64:e5:68:9e:1d:ac:41:fc:05:02:dd:5c:50:cf:
                    e5:75:4b:44:db:30:8c:b0:7f:f6:c6:c1:77:b1:4b:
                    9f:e7:73:78:2f:94:11:2a:06:21:2d:9d:01:a6:1a:
                    bb:28:89:5a:cd:fa:61:25:84:aa:9d:d8:57:af:16:
                    70:ef:76:20:4a:1e:ba:d0:23:b7:fd:fd:6f:1a:8d:
                    71:c8:e5:00:e8:51:1d:e3:b0:4d:0a:4a:64:5a:c6:
                    f2:95:38:f1:74:61:22:f3:7c:cb:b8:46:fc:98:62:
                    a3:49:84:ce:f5:cc:ff:2e:c0:69:a5:3b:a8:15:61:
                    d8:9b:2f:a7:18:1a:f5:fc:3a:dd:9c:42:6e:9d:3e:
                    96:c9:1c:4e:71:0d:39:2e:93:b7:0c:59:5f:b6:c5:
                    51:6c:8a:07:09:4e:8e:0a:15:22:6a:33:9b:71:99:
                    3a:3b:bf:9b:d4:61:03:09:7a:88:16:81:44:ad:7c:
                    2c:52:10:e8:1e:58:ef:95:be:66:9f:2d:81:af:b3:
                    0f:df:ff:2a:77:f5:67:65:be:0c:15:6d:92:31:ad:
                    0a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:36:F4:F2:B3:B2:17:B3:0C:44:69:84:CB:53:22:17:B2:89:29:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/1167f860-f4a5-3329-9563-b3f8f508fef5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl

            X509v3 Authority Key Identifier:
                keyid:05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.178.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:8a:74:3d:62:25:91:0b:42:47:64:a4:50:81:11:8d:75:e8:
         93:c3:c7:20:ab:1e:d2:1c:15:5c:b5:76:a9:95:f4:d7:e3:5e:
         a6:6c:48:5a:e2:cc:7c:ce:0d:8a:f7:bb:a6:25:2f:d4:0e:21:
         a1:2b:e3:af:e5:22:b3:d6:00:84:c8:fe:8a:cf:e9:86:28:6a:
         6a:43:b6:ba:f9:29:84:01:f0:74:0f:25:25:d0:8f:ff:ca:71:
         cb:9e:78:3e:92:58:1b:8e:60:f5:9a:d5:f1:c7:6a:4b:ef:ae:
         5a:81:34:9d:54:09:4c:a5:f4:d6:2c:34:81:f6:6e:fa:9f:12:
         b1:ea:b2:a5:4d:39:31:58:3e:34:21:49:75:7c:86:98:ca:d1:
         11:f7:4b:87:da:d5:cc:c4:d4:8f:00:ce:b1:db:fa:89:d1:40:
         fe:02:6b:ef:a3:97:e8:4c:69:b0:ef:8c:63:93:d8:ca:46:9a:
         51:b0:a2:2b:31:ce:e3:05:34:62:35:33:57:df:c0:c8:ff:72:
         01:e8:35:16:64:12:9d:eb:08:86:9a:f5:1e:cb:b0:cd:c4:7b:
         ce:58:4b:9b:f1:5c:66:4d:9e:61:20:12:fb:4f:51:15:e8:a7:
         8e:4e:7d:9e:ce:62:9f:20:69:a1:a1:aa:11:c0:8b:cb:b4:e1:
         ec:0a:84:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:00 2025 by rpki-client