Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/29d5e091-9446-3719-ad71-bce2ae8ab71c.roa
File:                     29d5e091-9446-3719-ad71-bce2ae8ab71c.roa (raw, json)
Hash identifier:          9YF5jeayo0B5XeKOacxCc1Smt92F7X2qMI8rElkvVi0=
Subject key identifier:   45:16:A9:17:D3:38:06:04:79:3E:EA:15:4C:D5:49:9B:CD:38:E3:CF
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F43285848451580FB4AE42F2424D28980
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/29d5e091-9446-3719-ad71-bce2ae8ab71c.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     14061
IP address blocks:        107.170.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:80:fb:4a:e4:2f:24:24:d2:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=802992a6-f41a-4419-938d-8a54906d98f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:50:69:d8:2d:c2:89:0b:be:9d:c6:cc:23:24:
                    f9:66:b0:72:d4:5f:39:dc:4f:ce:36:be:6d:aa:01:
                    fd:ed:0c:9a:2a:74:a8:27:e3:da:93:b1:26:a7:ac:
                    85:83:a7:fd:d0:f4:3e:c4:f1:f5:eb:f5:e8:4c:5a:
                    ea:70:05:b7:8f:d4:67:c5:c1:16:65:a4:f5:fe:52:
                    5b:f9:11:59:94:28:76:cb:1a:ba:6f:d8:d3:c0:ab:
                    d9:76:d4:1a:11:4c:1b:f2:97:7f:c3:29:1f:2c:5a:
                    8d:01:bd:a0:eb:51:f1:cf:49:14:60:ea:d8:09:15:
                    dc:14:c8:0e:0e:ad:b7:56:41:13:72:9b:cc:1a:4b:
                    ca:7e:01:4e:3c:60:de:b4:c9:5c:d7:64:46:a1:06:
                    95:e8:47:c3:c7:e2:b9:e7:0a:47:d7:35:88:11:97:
                    e5:63:4c:91:94:1d:6f:ee:15:a7:53:4d:c9:fe:b9:
                    ed:56:4e:58:de:b9:b0:4c:26:1b:98:91:c1:50:f2:
                    87:ae:cb:18:75:1c:c9:9d:0f:0f:e6:fe:5e:1a:bb:
                    bd:a2:b1:e7:56:5f:58:f7:67:64:37:27:e2:a7:63:
                    0d:96:89:32:83:e1:56:d5:71:6e:af:15:f8:52:5d:
                    5b:93:c1:7c:ad:ab:a1:f5:cb:a9:d5:e9:76:09:11:
                    6e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:16:A9:17:D3:38:06:04:79:3E:EA:15:4C:D5:49:9B:CD:38:E3:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/29d5e091-9446-3719-ad71-bce2ae8ab71c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.170.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:6e:bf:6b:2f:13:0d:8b:7b:44:9b:f3:0b:bc:bd:c3:d9:f7:
         14:16:5d:aa:2a:21:58:fb:53:91:ae:90:ea:8a:33:ae:21:09:
         25:7e:31:dd:a1:8d:2e:b4:89:30:33:c8:70:ba:f2:02:e2:6b:
         7a:85:a8:7a:b2:43:9f:8c:01:ff:b2:9c:91:e9:ab:41:c4:e2:
         56:8b:e4:6f:b9:2f:b9:b3:7d:d2:e3:8a:80:6f:9c:f3:9d:b2:
         e3:d4:f3:94:e0:f4:88:b1:b5:04:ec:8a:56:6b:1a:1a:d3:f8:
         b7:b6:3c:51:7a:b5:c9:0b:61:6e:5b:3d:78:70:d6:12:5b:e6:
         cb:2b:5d:d3:2b:4a:0a:3d:48:d5:2b:e2:bf:95:a4:3c:fd:b9:
         10:b1:ac:d3:d9:81:6f:37:4e:f3:62:cd:65:62:50:8b:0d:a1:
         4c:9d:b4:03:c5:d0:79:44:f6:08:fa:34:55:1e:c0:48:bb:43:
         78:2c:ae:1b:e5:94:dc:f0:ca:24:fa:ca:b3:30:44:61:23:1a:
         ba:64:26:45:13:20:7f:1b:42:7d:11:97:6c:f4:53:73:ad:16:
         66:84:b0:e7:c5:d5:29:00:30:a3:81:11:69:66:79:6b:9e:70:
         ef:f5:07:c7:12:24:ae:02:73:a3:06:09:4a:fc:33:62:79:7e:
         f3:aa:d1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:53 2025 by rpki-client