Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/45f81854-0ce6-39a9-825c-623afde803ac.roa
File:                     45f81854-0ce6-39a9-825c-623afde803ac.roa (raw, json)
Hash identifier:          XPwvSOHrGRSMPnMV067sXhqm4rfe8gMZ5NIXdAmqYh4=
Subject key identifier:   F9:ED:4E:56:11:D7:5A:D4:AC:FE:07:BD:6C:E1:62:60:5C:7C:52:19
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F432858489075ED0D208A901052736F00
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/45f81854-0ce6-39a9-825c-623afde803ac.roa
Signing time:             Thu 16 Jan 2025 14:00:50 +0000
ROA not before:           Thu 16 Jan 2025 14:00:50 +0000
ROA not after:            Wed 16 Apr 2025 13:00:50 +0000
asID:                     25871
IP address blocks:        8.39.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:75:ed:0d:20:8a:90:10:52:73:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jan 16 14:00:50 2025 GMT
            Not After : Apr 16 13:00:50 2025 GMT
        Subject: CN=18834d2c-fc32-4621-a13c-736afe0b007e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ba:fe:52:3a:3e:1f:cb:79:6a:a3:a6:4f:f4:
                    21:fa:c6:69:a0:97:02:53:af:d1:0a:4b:ec:e4:91:
                    fc:b6:eb:c9:1b:21:6c:b8:a5:5f:33:d5:85:6d:ef:
                    b1:4b:3e:bc:45:24:23:ea:ca:21:6f:4e:33:50:88:
                    27:6f:61:3d:53:1d:bf:ce:1d:91:8c:da:ce:f3:d3:
                    42:f7:b6:a4:b4:3c:fe:c8:36:ee:b9:2a:17:01:68:
                    38:c2:90:a3:7b:bb:25:05:ce:a7:8d:78:28:4e:9c:
                    5f:06:ca:28:32:a5:58:74:d8:f5:55:a6:64:90:5c:
                    13:d8:67:80:13:89:f0:60:52:ad:14:aa:ea:d2:fd:
                    09:75:6e:c9:54:2c:b9:1e:62:0f:ca:0a:f7:3c:93:
                    a2:35:03:bf:a2:8a:97:3e:24:5b:7e:28:1c:16:0a:
                    28:e2:f0:b4:16:d8:87:8d:dd:da:74:42:60:b0:69:
                    0d:2d:6b:ac:14:6a:65:bb:5e:c4:47:c1:f9:0c:44:
                    80:88:0c:4c:e5:55:19:f0:e3:3a:9b:d6:df:86:d8:
                    a0:24:78:e7:28:c9:cb:c8:a0:16:db:76:03:0b:56:
                    3f:a8:17:81:7e:49:f3:ee:df:99:f7:23:c9:f3:af:
                    9c:22:c7:fc:dc:c2:e1:96:f2:b4:01:27:fb:c5:8a:
                    e2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:ED:4E:56:11:D7:5A:D4:AC:FE:07:BD:6C:E1:62:60:5C:7C:52:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/45f81854-0ce6-39a9-825c-623afde803ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.39.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:1b:e7:f3:43:ba:c8:d5:2f:80:b5:37:fa:19:49:ee:aa:14:
         74:65:ea:9d:2b:eb:5f:33:06:58:e4:61:18:ac:a0:6e:33:2e:
         1f:0f:be:b4:34:a4:0b:89:85:c5:06:f0:15:eb:99:ab:bf:42:
         41:56:ba:19:d6:68:fb:b9:e9:b2:d9:2d:85:71:0c:37:1b:31:
         45:f4:a4:ce:72:38:43:47:f7:bf:33:b7:54:99:07:4f:a6:92:
         ac:7b:21:fd:b8:e8:69:74:45:d6:01:60:36:ad:4a:40:8d:4b:
         9c:93:0f:1e:6c:ba:16:fc:5e:da:cc:62:6a:25:39:e6:b6:44:
         00:e8:9b:59:fa:fe:40:bd:21:38:d8:c6:2e:97:d0:6a:95:b9:
         5e:20:06:45:02:88:f4:bc:dc:c3:97:ad:aa:d9:27:53:fe:2e:
         84:91:c3:6c:f9:d6:23:0d:a2:ce:8b:a3:6b:c3:81:4f:b9:19:
         ee:60:a0:c6:c4:73:f4:d4:a1:67:15:66:41:b3:6f:b0:a4:b9:
         9d:32:34:e3:75:8f:32:73:0d:9e:2d:1a:30:ec:90:e1:61:aa:
         28:fb:df:da:da:64:82:6b:26:cc:3a:94:94:e0:9e:5d:06:9f:
         34:a6:f5:3a:10:4b:a7:d9:70:e9:d7:c8:14:15:78:df:48:29:
         7c:2f:01:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:21:18 2025 by rpki-client