Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/ee788684-1ebd-3874-99fe-d873e0d20873.roa
File:                     ee788684-1ebd-3874-99fe-d873e0d20873.roa (raw, json)
Hash identifier:          Hg4NPNQ0nBbooQCGbNfbKwxTx6pvHToBsnZ7tPZCUOM=
Subject key identifier:   6A:5D:51:3C:92:11:6D:B5:E0:C9:E0:95:FE:C1:31:72:A2:B0:6E:89
Certificate issuer:       /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial:       010D0C9F432858482EC008514D12940339D3B340
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/ee788684-1ebd-3874-99fe-d873e0d20873.roa
Signing time:             Thu 12 Dec 2024 14:00:51 +0000
ROA not before:           Thu 12 Dec 2024 14:00:51 +0000
ROA not after:            Wed 12 Mar 2025 13:00:51 +0000
asID:                     32805
IP address blocks:        148.77.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2e:c0:08:51:4d:12:94:03:39:d3:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
        Validity
            Not Before: Dec 12 14:00:51 2024 GMT
            Not After : Mar 12 13:00:51 2025 GMT
        Subject: CN=2a68c6bb-bd0e-4ffd-abf7-afec29ccdddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1d:0b:44:ac:e0:47:72:a4:c7:0a:d7:76:d4:
                    6e:7a:53:bc:98:da:b7:17:01:41:3e:0b:b5:2a:d3:
                    26:50:f7:3b:a8:58:56:d6:4f:33:c7:a9:5d:d6:f9:
                    7e:5c:da:be:1c:f7:05:0c:4f:53:39:f3:33:ef:3f:
                    c7:0d:c1:74:44:1f:22:ae:0c:a9:61:ca:5e:9c:25:
                    8b:a1:86:87:32:6e:40:95:b6:fd:1c:cf:69:10:d2:
                    a0:1a:d7:50:45:3a:40:6b:1e:5c:59:e2:70:ca:f2:
                    f3:bc:08:4c:25:a1:38:f7:72:da:5e:c5:80:5e:50:
                    ca:d7:57:c7:da:62:c2:5f:72:23:fd:b3:bd:e5:39:
                    fb:63:1c:53:bd:53:56:c2:c3:6e:45:8f:6e:1b:a3:
                    c8:70:92:d2:03:fa:2e:a4:fc:a0:e1:49:b0:59:b9:
                    56:16:31:7d:6e:4a:e9:aa:a7:a4:54:90:03:56:cd:
                    e8:19:d5:ad:d9:8a:e4:f3:4a:33:8a:c3:1a:7c:d9:
                    55:34:d2:a8:22:eb:bf:fb:54:32:d8:bd:a1:41:01:
                    cb:15:40:2c:81:4e:27:f4:4e:d4:99:a0:fa:70:a4:
                    c1:fe:60:d3:7a:30:17:f3:93:ec:6a:a6:c3:bc:fd:
                    50:1b:71:4f:91:ed:9d:5c:80:c1:a8:d2:2b:86:14:
                    b7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5D:51:3C:92:11:6D:B5:E0:C9:E0:95:FE:C1:31:72:A2:B0:6E:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/ee788684-1ebd-3874-99fe-d873e0d20873.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl

            X509v3 Authority Key Identifier:
                keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.77.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:e6:fa:f9:21:46:9c:43:3f:b2:99:72:8c:7d:38:e7:07:66:
         4c:c2:a9:d7:43:e8:99:18:d2:b0:5a:d1:d0:13:5a:10:7f:3a:
         b9:2b:31:a5:18:3c:14:d4:fe:26:01:89:f6:dd:54:d8:5a:03:
         c3:48:04:cd:ec:23:e1:d8:ae:21:3b:cf:30:87:f0:6a:79:77:
         6c:49:dc:9b:52:1e:22:96:6d:6e:90:b0:db:76:8e:e7:45:5a:
         15:c8:df:a5:53:0a:f0:73:94:2a:c8:13:2f:1c:ac:6a:bf:c6:
         22:a4:05:f1:8c:44:b6:c8:bb:49:75:89:bd:50:d3:25:98:3a:
         5a:cc:3f:c4:04:56:94:d0:40:6f:90:3f:25:7c:aa:48:37:9f:
         75:cf:68:81:ea:98:07:76:73:7f:37:85:f9:00:bb:8d:49:57:
         1e:ba:41:e1:75:76:97:a2:9f:ae:38:65:94:7b:27:86:f8:71:
         41:72:ec:47:f6:c2:e7:08:7c:e3:b8:20:45:89:69:57:c4:52:
         46:57:a7:26:73:14:d0:94:28:6f:8f:11:74:ba:ba:b5:38:e2:
         9c:7a:92:08:95:fb:ec:2b:a9:70:32:37:27:11:57:ca:ff:32:
         b3:af:6c:dd:98:19:f5:56:c3:41:1a:31:0f:df:f5:7c:9e:d2:
         06:ac:04:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:31:49 2025 by rpki-client