Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/7ed6dd62-2e69-372c-be0f-6a1e72260ee8.roa
File:                     7ed6dd62-2e69-372c-be0f-6a1e72260ee8.roa (raw, json)
Hash identifier:          +FW41kRbLSGsVkjIrig6pelviQSZ0rR8w11euwy9+EU=
Subject key identifier:   DD:BF:ED:E8:77:66:9E:90:6C:FF:01:1E:39:89:FB:B6:D5:03:CD:72
Certificate issuer:       /CN=17e20fae-392b-4b22-b475-c6dff7142fa6
Certificate serial:       010D0C9F432858480BDA6198FA009072571CE180
Authority key identifier: A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/7ed6dd62-2e69-372c-be0f-6a1e72260ee8.roa
Signing time:             Sat 30 Nov 2024 02:00:39 +0000
ROA not before:           Sat 30 Nov 2024 02:00:39 +0000
ROA not after:            Fri 28 Feb 2025 02:00:39 +0000
asID:                     42
IP address blocks:        199.120.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:da:61:98:fa:00:90:72:57:1c:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17e20fae-392b-4b22-b475-c6dff7142fa6
        Validity
            Not Before: Nov 30 02:00:39 2024 GMT
            Not After : Feb 28 02:00:39 2025 GMT
        Subject: CN=2810b167-7398-4e6e-a252-4be9d2b060f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1a:61:da:2b:a2:31:54:ba:98:45:5f:db:a2:
                    9b:41:f6:36:02:02:e4:3f:e1:d0:18:21:b4:b6:e0:
                    54:a2:9a:99:d2:aa:75:3e:58:64:5c:7e:2a:37:e5:
                    dc:06:ed:75:39:2a:7c:6d:a9:03:f0:30:bb:56:4e:
                    20:fb:44:93:84:18:bb:72:07:f4:d6:4a:7b:8a:57:
                    af:de:7b:61:40:82:29:0e:85:4b:54:e3:d8:23:3b:
                    42:fe:8c:56:98:b9:12:5e:61:b6:ae:c1:97:3b:3f:
                    c2:a9:dc:93:be:ef:f2:ec:82:2b:9f:26:26:77:4c:
                    bf:94:5b:90:69:d7:e2:54:bf:c9:9c:8b:e5:c5:5d:
                    74:16:7b:41:34:12:49:6b:26:43:41:34:8d:ea:18:
                    15:c4:06:4c:75:a6:21:ab:7f:35:52:06:3b:4c:0a:
                    03:d8:e9:4a:bc:9b:85:c1:c4:75:60:ce:fa:6e:f5:
                    79:1f:76:1b:ae:ce:83:69:4d:55:a2:96:84:f5:4e:
                    ad:b2:21:66:b0:cc:36:93:c5:c1:01:0c:f3:f4:28:
                    d3:df:f7:83:7c:08:b7:1b:06:12:8d:43:8a:eb:90:
                    09:8e:43:ab:f3:19:80:f9:7d:72:41:e2:19:04:c4:
                    31:fc:a8:91:05:c4:f0:70:40:a3:24:9c:27:b5:18:
                    ec:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:BF:ED:E8:77:66:9E:90:6C:FF:01:1E:39:89:FB:B6:D5:03:CD:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/7ed6dd62-2e69-372c-be0f-6a1e72260ee8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.crl

            X509v3 Authority Key Identifier:
                keyid:A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.120.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:11:65:ef:b6:8f:c4:a9:5f:69:8d:6a:28:f2:24:9b:fc:db:
         a7:84:6b:d8:90:26:ad:5f:a6:a8:28:e3:f3:43:bc:74:fa:7b:
         b5:99:19:45:2e:a5:4f:45:1d:ce:8c:12:45:31:03:e3:b9:8c:
         ce:70:95:13:d6:08:9e:cb:b0:0c:63:22:a2:ae:cb:51:57:fb:
         8a:8e:a1:37:78:3a:61:67:d2:6f:b7:c7:75:3e:c0:03:51:36:
         aa:1a:cc:0c:46:80:33:a6:d7:2b:27:19:e9:6a:e6:6e:ac:7d:
         35:75:01:35:56:5d:16:e3:83:67:5e:f6:e9:f1:ee:0f:91:7d:
         47:78:f4:41:3e:3d:2b:5b:c4:b0:71:87:01:de:34:9c:14:d4:
         e3:3c:7b:d8:d1:e4:af:b6:3a:ee:7c:05:c6:b3:cf:d4:b5:9d:
         1d:a1:1c:ca:9f:a1:97:0c:09:10:99:e5:04:56:e4:a3:8e:fd:
         0e:f4:f5:83:ee:ab:b8:64:bb:de:c9:6e:1d:b8:88:12:b8:60:
         62:97:93:e6:40:24:d9:e1:28:6d:97:e2:4c:0f:a7:ef:1c:fa:
         ee:2f:38:c9:ae:2d:87:11:8c:cd:2c:52:69:22:e5:a8:1d:a8:
         bf:2a:9c:85:7d:2a:f0:2c:71:b5:3e:cd:f8:f1:32:96:c2:75:
         e8:32:48:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:41:52 2025 by rpki-client