Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/28ea5e59-350b-3d56-b121-a1ecb503d959.roa
File:                     28ea5e59-350b-3d56-b121-a1ecb503d959.roa (raw, json)
Hash identifier:          NHhi4Jd512zMqfYylgrrcRL1/NQ+6gsP7STFuSs62yw=
Subject key identifier:   31:13:2A:B3:B6:E6:55:68:03:FE:5C:4C:D2:15:BE:FC:0C:0E:85:03
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F432858482BF551E28206FD23E9034240
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/28ea5e59-350b-3d56-b121-a1ecb503d959.roa
Signing time:             Wed 11 Dec 2024 14:00:52 +0000
ROA not before:           Wed 11 Dec 2024 14:00:52 +0000
ROA not after:            Tue 11 Mar 2025 13:00:52 +0000
asID:                     14061
IP address blocks:        164.92.64.0/18 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2b:f5:51:e2:82:06:fd:23:e9:03:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Dec 11 14:00:52 2024 GMT
            Not After : Mar 11 13:00:52 2025 GMT
        Subject: CN=2169adc4-1953-457f-9356-75c040b20fde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:aa:66:c1:4c:63:40:1d:bc:fa:24:46:5d:63:
                    84:e5:85:48:f7:3f:16:13:58:f7:56:5f:a1:1b:d3:
                    0d:03:f6:bd:b6:c0:5e:19:d0:78:45:5c:85:9c:f0:
                    db:cd:6a:b8:87:fc:b9:f3:26:5d:af:b6:79:e1:72:
                    2e:46:9d:15:53:45:34:8d:b5:97:05:a7:51:3f:d2:
                    7f:d8:95:fe:b4:d5:d3:90:e7:a0:27:c2:71:aa:f7:
                    cb:d5:88:da:d3:67:33:14:10:20:82:aa:3a:2c:2c:
                    50:2b:1f:74:e9:1f:10:9b:ed:3a:e0:13:e7:63:7d:
                    31:17:18:3e:9b:f9:ef:2f:86:97:be:96:93:a3:ff:
                    78:98:87:82:c8:c1:dd:3f:b3:5e:ee:ea:e4:21:45:
                    d7:97:b7:da:67:d2:db:37:8e:b3:98:88:b7:ee:05:
                    7f:da:06:cc:67:e0:02:f6:84:58:fa:41:4b:a0:fa:
                    df:9f:a9:53:ec:b8:14:ff:7b:f4:b2:85:01:77:6d:
                    ef:11:9d:ee:0f:b4:c3:de:78:fe:63:78:0a:ed:79:
                    23:8d:ff:f5:5a:8b:da:89:ae:c2:b8:97:d5:fb:27:
                    5f:1d:50:3c:69:de:e1:a3:76:c7:d1:e9:3a:33:97:
                    49:7e:f4:64:e1:46:2e:ab:56:8a:e6:26:d2:5d:9f:
                    78:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:13:2A:B3:B6:E6:55:68:03:FE:5C:4C:D2:15:BE:FC:0C:0E:85:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/28ea5e59-350b-3d56-b121-a1ecb503d959.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.92.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:b1:7c:01:e1:9d:f1:92:32:0c:3c:7d:de:e5:73:22:2e:e5:
         2b:66:f4:35:5c:f3:af:e8:2b:fe:77:b9:1e:9e:ac:91:7e:20:
         6b:2d:fa:3c:f4:cd:c5:91:9c:50:32:81:06:18:9e:68:d0:b4:
         ee:d3:10:f1:14:63:46:77:ac:02:32:57:19:63:49:9c:b4:18:
         df:ee:71:59:b8:b6:d0:9f:20:90:4d:46:e7:92:8a:6e:75:67:
         59:f2:48:c8:74:fc:18:37:30:67:50:64:c3:af:61:c7:ca:1d:
         a5:3f:69:df:18:ef:f3:f9:6e:a1:ca:b4:2f:8b:6e:37:e4:fd:
         cf:3b:66:a5:d5:6b:48:c0:b8:67:e3:d0:d2:b4:4d:5d:1f:07:
         b3:a2:b5:80:ab:fa:44:9e:70:a7:f2:94:c8:f7:60:54:8c:9a:
         56:4b:b8:b2:f2:71:7e:28:96:99:49:4f:fd:05:9f:07:76:23:
         c1:1e:1f:af:4b:ba:d6:cd:b4:dc:af:fb:3c:0e:33:9e:12:77:
         ca:72:3d:86:48:6d:30:fa:b3:31:04:3e:9b:7a:b2:a5:c6:d7:
         cb:41:a2:38:2d:4d:8e:64:71:29:e7:a0:b2:ee:b0:56:b3:30:
         b4:b3:05:c4:72:2d:39:4a:fb:1e:c6:e9:5f:ac:6f:4e:02:a2:
         e8:75:16:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:03:33 2025 by rpki-client