Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a/fff7a9df-13dd-30bd-8174-9e2a97311552.roa
File:                     fff7a9df-13dd-30bd-8174-9e2a97311552.roa (raw, json)
Hash identifier:          peY6oKnEULkynV2kUj2mQia0MOgUO59KpBpBGKpq6Vo=
Subject key identifier:   B6:75:58:64:17:0D:DA:61:19:4F:65:9D:36:16:7A:EF:28:BF:63:61
Certificate issuer:       /CN=129538be-cccb-40d0-8a7d-ac02bf86976a
Certificate serial:       010D0C9F4328584858A050C9D357A65D821901C0
Authority key identifier: ED:6A:E0:E8:80:3F:B4:BB:6D:95:60:DC:8E:5D:F0:3F:8B:2A:D0:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a/fff7a9df-13dd-30bd-8174-9e2a97311552.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        198.212.172.0/22 maxlen: 22
                          198.212.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a/129538be-cccb-40d0-8a7d-ac02bf86976a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a/129538be-cccb-40d0-8a7d-ac02bf86976a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:50:c9:d3:57:a6:5d:82:19:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=129538be-cccb-40d0-8a7d-ac02bf86976a
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=ca38e0ac-e659-48e5-a920-215fe9716833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ae:6b:16:2e:b8:b9:65:0d:c3:d1:5a:d9:12:
                    89:15:c2:7e:6b:2d:bb:05:74:af:ac:63:2a:43:b6:
                    ad:a7:23:95:a8:74:9d:89:ab:cf:a9:d9:3c:49:94:
                    71:91:fd:62:76:7e:b9:6c:ae:ca:f1:6f:bb:dc:7d:
                    dc:9a:42:2f:0f:ab:85:dd:1a:4d:dc:9e:02:87:8f:
                    cd:49:2c:5e:de:ab:9c:ba:c5:f5:8a:c9:c8:13:d6:
                    c2:aa:58:c7:75:e9:26:3f:85:30:98:2a:35:aa:23:
                    1a:48:29:eb:7f:73:c1:cb:1f:cd:ed:83:b6:d6:bc:
                    13:33:21:4c:db:a7:55:ca:25:ed:a9:e6:5f:99:5f:
                    8c:0f:e3:68:77:f1:29:38:ca:d2:ba:99:02:9c:8f:
                    f9:43:b3:a3:08:09:59:3b:6d:ff:1a:2f:c8:ca:73:
                    a4:bc:5d:53:69:ba:99:d9:ac:0b:b6:d4:ca:df:77:
                    fc:d2:be:06:ef:46:9e:d3:28:55:34:bd:a4:31:82:
                    41:55:56:e6:94:8c:d6:f0:59:34:bb:89:c6:83:30:
                    17:be:1e:bb:00:b2:0f:ca:62:ba:0b:a0:1d:81:e8:
                    aa:10:7f:f4:38:86:1f:47:67:68:19:99:e3:68:bf:
                    fa:d5:ba:52:0d:5d:ae:54:3c:17:bb:05:e1:3d:f2:
                    31:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:75:58:64:17:0D:DA:61:19:4F:65:9D:36:16:7A:EF:28:BF:63:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a/fff7a9df-13dd-30bd-8174-9e2a97311552.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a/129538be-cccb-40d0-8a7d-ac02bf86976a.crl

            X509v3 Authority Key Identifier:
                keyid:ED:6A:E0:E8:80:3F:B4:BB:6D:95:60:DC:8E:5D:F0:3F:8B:2A:D0:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.212.172.0-198.212.176.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:1f:f4:20:b9:ab:ac:98:92:31:e0:b1:bf:f1:c1:22:a8:71:
         ba:5c:a9:c0:89:e9:a9:ac:77:6f:6b:b2:17:bc:2f:85:e1:a0:
         38:c6:b6:3e:14:36:27:d6:33:fd:8d:eb:70:cf:6a:cd:ce:2b:
         29:d5:be:20:aa:fd:0d:9e:f0:70:fc:7c:40:38:a5:81:a0:5a:
         0d:02:fe:d6:df:54:8c:10:aa:88:3f:9b:ce:2d:7f:f1:0b:1c:
         aa:fa:3f:1a:a5:10:16:28:af:84:39:0d:31:a4:a2:cb:e9:d0:
         09:88:28:26:db:9f:fe:aa:8f:1a:6d:42:d5:bf:20:8f:b8:63:
         a3:fe:c0:50:41:8f:1f:1b:3d:78:4a:b5:87:d7:ec:a3:68:34:
         19:f1:43:33:db:e3:ad:78:fe:24:6f:ec:b2:75:d3:59:bd:ad:
         6b:ee:e2:bd:94:a0:f7:af:4b:7b:03:a2:b8:79:87:6a:16:26:
         2b:03:04:28:61:d7:a5:d0:23:b7:e0:d7:a6:42:93:d0:2d:be:
         26:0f:64:82:62:89:6c:8e:db:ca:ae:43:e2:6a:3d:04:14:d1:
         3b:d3:61:22:95:75:3d:69:d8:06:76:1d:2b:65:26:f1:e2:8f:
         8d:67:77:b9:8c:34:13:04:4c:26:03:3f:2f:70:ee:f6:7b:d6:
         43:81:4e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:48 2025 by rpki-client