Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/42404971-4aca-30fb-a1e4-ab366b0ba71c.roa
File:                     42404971-4aca-30fb-a1e4-ab366b0ba71c.roa (raw, json)
Hash identifier:          lKasLYZSJ0w85CKOta1lb3EnqiBHva2fJNhntBnkc5s=
Subject key identifier:   C9:99:2C:CE:8A:98:00:03:FC:B0:8A:9D:8A:83:9B:0F:54:F4:CB:2C
Certificate issuer:       /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial:       010D0C9F432858482EBFFE10720EB4FB5A43A0E0
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/42404971-4aca-30fb-a1e4-ab366b0ba71c.roa
Signing time:             Thu 12 Dec 2024 14:00:51 +0000
ROA not before:           Thu 12 Dec 2024 14:00:51 +0000
ROA not after:            Wed 12 Mar 2025 13:00:51 +0000
asID:                     29890
IP address blocks:        148.76.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2e:bf:fe:10:72:0e:b4:fb:5a:43:a0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
        Validity
            Not Before: Dec 12 14:00:51 2024 GMT
            Not After : Mar 12 13:00:51 2025 GMT
        Subject: CN=2ca7324b-2072-466e-b013-bcbaf876fa8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c6:74:ca:0b:44:9a:55:2a:ca:34:95:0f:14:
                    49:39:2a:21:30:51:73:33:8f:39:c4:12:25:47:7f:
                    2b:42:a9:e8:91:cf:e7:ed:c1:a2:ee:59:2a:4d:04:
                    d9:7b:8e:30:f7:68:88:71:c2:f0:54:d5:f9:1e:52:
                    09:29:79:36:30:a6:90:ba:a0:1d:f2:c4:2e:20:47:
                    1f:16:0b:5a:ab:6a:81:a4:99:b1:ad:e7:d7:42:05:
                    f7:86:6e:d1:50:a2:4f:d1:54:54:43:20:c6:09:0d:
                    ad:09:ec:8e:3e:6b:74:9e:fc:45:aa:66:ac:46:13:
                    cc:5d:fd:71:e8:1e:e1:82:a2:d5:e4:89:33:ce:bd:
                    17:b7:00:4d:8f:9e:ff:5c:f0:c8:55:9d:d9:6c:01:
                    96:b3:d5:4d:e4:1e:b6:8e:ac:46:ec:a1:d0:d9:20:
                    10:6e:2f:cc:d7:b6:27:9e:1f:ce:af:e4:20:2f:3a:
                    81:57:c6:7b:78:9e:d0:58:c8:0f:83:4c:47:09:3d:
                    3b:11:82:63:6d:8f:f3:36:64:e6:06:77:8e:de:9d:
                    e1:29:e8:a7:25:1f:cc:24:86:79:ca:25:70:37:4b:
                    03:cb:ab:99:29:bc:8f:90:de:f0:80:98:27:fd:3f:
                    e2:5a:af:e8:d6:4a:4f:ae:0d:c5:68:8b:cc:21:85:
                    05:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:99:2C:CE:8A:98:00:03:FC:B0:8A:9D:8A:83:9B:0F:54:F4:CB:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/42404971-4aca-30fb-a1e4-ab366b0ba71c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl

            X509v3 Authority Key Identifier:
                keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.76.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:f7:c8:b2:49:2a:75:ed:ff:0f:9e:90:e4:dd:d9:51:b0:19:
         e2:6b:11:e9:e3:9d:57:23:b7:7d:54:4c:35:d5:6e:20:63:42:
         40:10:93:5f:9d:32:69:7a:61:d0:37:49:ce:0e:18:e2:52:87:
         99:0f:32:72:db:4c:3b:ff:fb:93:67:dc:83:af:2f:97:98:8c:
         24:83:8d:a9:b8:81:7b:82:83:c0:04:ea:ba:b2:fc:f4:92:68:
         16:b5:97:04:a7:c0:67:02:47:41:fa:e8:d1:a9:75:c1:0a:95:
         84:44:08:d2:37:b3:f3:37:30:97:c9:9d:b3:3d:a6:c3:64:ea:
         a8:37:d2:dd:e0:53:97:87:6e:c7:cc:af:4c:67:7f:e2:d2:37:
         55:6e:b3:ac:fd:58:56:a9:01:9d:ea:44:01:71:b9:0c:11:a4:
         d2:ab:ae:57:15:48:7b:6b:1b:13:d0:87:75:39:6c:d4:b2:d6:
         3b:d0:6f:be:cc:1c:e8:c8:77:df:bf:ac:66:22:86:9c:27:59:
         d2:a3:79:bc:d6:cd:3f:d9:ed:03:cd:c3:9e:a0:18:92:0b:4a:
         2c:f6:38:ff:c7:de:a8:25:61:55:92:4a:c7:f9:d4:6e:c6:89:
         e5:75:67:9a:8d:f9:9f:06:d4:72:f7:2d:cb:36:4f:8d:e7:87:
         ec:fb:6b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:01 2025 by rpki-client