Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1/7dfe121f-65ff-3f76-b3c2-899fc2ffc0f6.roa
File:                     7dfe121f-65ff-3f76-b3c2-899fc2ffc0f6.roa (raw, json)
Hash identifier:          XoylHFvUZGHReeHi3/TKJbSFe7x93i1NOoAr1loni7Q=
Subject key identifier:   21:27:16:72:80:72:E6:CE:97:7D:7B:87:92:16:CA:D8:41:E1:1F:BF
Certificate issuer:       /CN=eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1
Certificate serial:       010D0C9F432858487A2076A845CF8279F00240C0
Authority key identifier: 59:2A:C1:49:99:F1:2F:9A:06:B1:E9:5D:DF:57:72:22:76:63:C3:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1/7dfe121f-65ff-3f76-b3c2-899fc2ffc0f6.roa
Signing time:             Wed 08 Jan 2025 14:00:51 +0000
ROA not before:           Wed 08 Jan 2025 14:00:51 +0000
ROA not after:            Tue 08 Apr 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        192.69.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7a:20:76:a8:45:cf:82:79:f0:02:40:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1
        Validity
            Not Before: Jan  8 14:00:51 2025 GMT
            Not After : Apr  8 13:00:51 2025 GMT
        Subject: CN=deb07c3b-001b-4bd6-9422-6d991802761e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1e:cd:a2:d1:22:9c:6a:43:a3:b0:d7:f5:89:
                    b6:10:1f:1a:0c:90:75:18:ea:59:57:90:e0:50:30:
                    a9:b1:30:77:da:d6:a4:14:f8:16:f0:de:49:e4:29:
                    ef:16:69:18:ba:ac:7d:2d:ef:b2:1e:7a:c5:31:d5:
                    9a:19:0f:96:56:0c:f7:9f:9b:d3:d4:3d:1f:f1:1a:
                    32:37:4c:0d:86:1f:04:e9:26:33:1e:78:ea:18:6c:
                    65:7f:f5:58:1a:b4:81:b2:f6:2e:e1:ef:94:18:8b:
                    82:f6:f2:1f:43:25:50:1e:53:45:4a:19:7f:b4:fb:
                    16:e2:bf:e0:e3:12:3c:29:e5:fb:14:1d:4d:0e:ba:
                    d1:1a:03:98:b3:6c:38:9f:4a:ea:a5:5f:8a:b3:7e:
                    dc:1f:bb:fe:25:2e:f1:6f:d7:e7:4d:2a:7e:e3:73:
                    87:bd:f9:87:56:01:2b:d6:33:96:b7:2d:6e:9a:67:
                    c5:19:2c:d7:ad:9a:70:70:26:e9:b1:5e:5b:03:be:
                    00:0a:de:a6:9f:6c:14:3e:c3:9e:b2:e7:cd:18:3a:
                    c1:1e:c6:64:81:d3:35:ef:44:4b:ce:2b:1b:95:d4:
                    1a:4b:81:1d:f3:a5:ed:ba:2f:0b:16:e4:37:92:76:
                    68:ce:fb:06:e3:4d:0e:11:9a:63:df:74:5c:88:b2:
                    e6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:27:16:72:80:72:E6:CE:97:7D:7B:87:92:16:CA:D8:41:E1:1F:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1/7dfe121f-65ff-3f76-b3c2-899fc2ffc0f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1.crl

            X509v3 Authority Key Identifier:
                keyid:59:2A:C1:49:99:F1:2F:9A:06:B1:E9:5D:DF:57:72:22:76:63:C3:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.69.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:2e:1d:ce:2a:e5:64:b8:31:90:c0:f8:0c:0b:4a:6b:5f:2a:
         60:bd:97:da:bc:eb:a7:c7:7b:f2:4c:fc:73:e3:8d:f6:1b:b8:
         0f:d5:82:5c:8d:81:79:e0:fb:c1:37:1e:83:ed:e7:f7:44:fa:
         b9:fd:92:94:27:9a:30:c8:58:a2:ae:fe:b1:f4:c4:aa:34:f9:
         e6:4b:a5:a0:e1:73:f2:8b:2d:0e:c5:20:9a:79:ae:3b:e8:f7:
         ed:89:f6:3d:18:b0:43:b3:32:bb:6a:a2:6f:1e:0a:66:65:7c:
         62:b6:fa:fa:b3:d6:71:37:70:b3:87:37:bf:0a:76:3b:47:de:
         28:71:16:e6:63:5b:3d:59:c5:45:10:05:a6:1d:c2:9a:08:a5:
         3d:57:8f:1e:10:41:2e:63:30:da:1e:9c:58:ab:21:2a:3e:5b:
         f9:47:75:73:9d:8d:eb:4b:3f:13:ba:3b:3e:97:bc:c2:d7:85:
         18:22:3d:73:d3:05:fc:db:f1:a6:25:7e:a6:10:28:27:3b:49:
         d0:34:ff:05:93:2e:82:40:bd:6b:83:e7:bf:11:2e:2d:4d:8d:
         57:71:5d:c7:6f:14:fa:32:3d:58:dc:57:61:b0:8f:74:13:4f:
         f9:76:88:e5:50:9a:5c:d5:1c:49:36:59:29:b0:5a:d4:1a:c2:
         7f:3a:25:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:41:53 2025 by rpki-client