Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/4075efd6-f5a5-3fd7-9106-d3e12533ff6d.roa
File:                     4075efd6-f5a5-3fd7-9106-d3e12533ff6d.roa (raw, json)
Hash identifier:          Umk2X7a6v4FslOA+leq2Q3k3Oo8MnJEeEr/8Lc6tx7w=
Subject key identifier:   87:7C:4D:9A:49:6C:8E:70:93:DD:DF:64:1C:E6:BA:B7:A9:EA:3B:C2
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F43285848451580DFA25C1199AE936F40
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/4075efd6-f5a5-3fd7-9106-d3e12533ff6d.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     14061
IP address blocks:        137.184.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:80:df:a2:5c:11:99:ae:93:6f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=d6e9c797-464f-49bd-bf95-965d5edb4376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6a:b0:6e:b3:b1:d5:cf:7e:7b:e4:d3:58:a8:
                    ec:71:eb:68:b2:57:d3:31:48:85:b8:d8:d4:f8:a2:
                    53:71:99:d8:2a:20:5e:8b:26:50:01:67:68:ca:4f:
                    2d:9a:5e:3b:8c:48:ad:73:84:e0:2d:b8:ac:cc:b1:
                    d8:0e:c7:42:87:c7:80:ee:ce:9f:66:dc:66:f4:f4:
                    f4:91:e9:69:f6:a7:ee:6c:2a:d6:eb:d0:82:90:d3:
                    ea:23:f2:db:d5:c8:c2:d2:b2:d8:e2:82:90:67:22:
                    7a:ff:8d:a8:9d:8d:d1:2a:07:91:4f:26:f4:cd:75:
                    ba:0e:8a:0c:9d:44:17:83:b5:22:03:f3:ec:f0:90:
                    55:8e:74:88:8f:c0:17:2f:78:7e:a4:4e:b4:12:37:
                    2d:18:5e:2f:ca:ff:c3:93:94:52:c1:a6:01:ea:11:
                    fc:a0:cb:36:56:4c:bb:aa:ea:b5:9a:87:20:78:cd:
                    63:d1:cf:31:2b:0a:18:7c:cf:8b:c8:45:75:64:07:
                    a3:ea:70:d6:e8:60:48:80:42:34:3a:c3:59:be:d5:
                    32:92:8b:a0:f8:a2:1d:4f:01:de:88:c3:82:5a:28:
                    8a:41:29:f5:de:f0:09:69:f2:d3:84:98:05:77:a5:
                    2e:2a:f3:90:91:d6:51:69:7f:ab:7a:17:3c:e1:ba:
                    ab:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7C:4D:9A:49:6C:8E:70:93:DD:DF:64:1C:E6:BA:B7:A9:EA:3B:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/4075efd6-f5a5-3fd7-9106-d3e12533ff6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.184.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:f3:8c:01:8f:5d:77:56:59:ce:97:43:a3:71:2d:8b:da:b2:
         78:22:0f:d7:54:be:ba:85:f2:e0:03:f8:b6:ca:7f:be:80:7f:
         4b:81:2c:6b:84:31:9f:a1:81:0a:0a:bd:14:9d:72:30:ae:50:
         18:84:cf:60:8e:73:b3:d9:c1:8b:bf:8b:7b:09:17:1f:24:8c:
         03:d5:0e:eb:12:7b:2d:0c:30:95:51:df:a7:35:09:53:df:06:
         16:98:e9:ce:45:1c:ff:bb:e0:f3:e1:ac:e5:23:f5:13:35:75:
         a0:ee:20:d9:33:e9:49:d6:49:7b:7f:cf:31:92:5a:67:02:f2:
         95:76:5e:ae:53:44:a6:6e:e0:2f:b9:10:7e:f6:0f:84:c4:22:
         87:80:34:33:82:e4:a7:17:b9:b5:aa:98:93:96:38:e7:dc:57:
         a0:8b:31:e7:2e:75:36:fc:f9:07:4b:9b:fc:53:6a:b3:c0:ae:
         23:e3:d2:1c:25:f1:f7:61:e0:2e:e8:2f:32:ad:37:14:09:d4:
         85:6f:eb:7b:3a:c6:f0:c9:8e:76:6b:f9:52:cc:df:99:a4:b8:
         8d:df:73:44:93:22:1c:f9:85:bd:eb:f3:39:73:b7:f5:c0:59:
         6f:63:e9:88:7b:2f:31:ad:5e:7b:de:32:78:00:66:40:7c:07:
         71:55:11:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:52 2025 by rpki-client