Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/ff815538-39d0-348e-910a-f73be4832b91.roa
File:                     ff815538-39d0-348e-910a-f73be4832b91.roa (raw, json)
Hash identifier:          /m2J/eJTT62MEJ65l2sV/psEPibgFLIlGTL3DOOsys4=
Subject key identifier:   A3:A0:57:58:95:2B:C2:D3:80:A2:CE:AF:C4:19:EC:F9:85:8D:73:DB
Certificate issuer:       /CN=2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7
Certificate serial:       010D0C9F43285848E16BE58A6F55AB49C4B3FD00
Authority key identifier: 8D:A5:73:99:67:37:74:5C:D4:FC:CC:EB:C0:C2:C5:E7:0C:54:49:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/ff815538-39d0-348e-910a-f73be4832b91.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     32334
IP address blocks:        192.30.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:e5:8a:6f:55:ab:49:c4:b3:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=f5e6cb2c-7672-4786-ab5c-818729fe65f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d2:51:0a:a7:51:34:1a:1e:9f:02:b6:a3:b6:
                    90:e4:e2:17:ea:94:e5:c1:cf:ae:25:8e:e3:5c:e9:
                    00:3f:7e:7b:39:0c:e3:22:66:be:13:94:eb:69:a8:
                    91:44:89:f9:5a:a6:c0:e6:ca:06:38:ff:33:af:c0:
                    cf:37:9a:fe:7b:29:86:a0:9a:a2:32:45:95:88:0a:
                    1a:45:93:1f:c9:dc:40:a0:5d:f4:54:fa:d0:a9:1b:
                    a4:c6:12:26:0c:77:48:f7:b3:28:86:b3:8d:64:4b:
                    1b:e5:6a:fa:c2:1d:32:b4:a3:7a:1f:fc:a0:df:d2:
                    32:ee:70:60:33:69:8d:38:ed:6f:08:9d:8d:1a:ab:
                    b6:1f:11:d7:40:36:17:1c:94:60:d0:39:3e:15:06:
                    b7:d4:d2:6e:b7:7c:7c:84:6c:c4:11:59:bf:af:a4:
                    6b:9f:46:37:40:f8:62:54:85:e4:89:f5:20:68:2f:
                    f7:58:31:10:ad:34:69:81:3f:9c:8a:c8:80:4d:52:
                    12:6f:57:de:e6:ed:f3:c5:4d:04:ba:d7:59:84:8f:
                    c0:51:38:cc:73:4d:bf:64:c7:7e:4c:94:54:f1:2f:
                    0a:d5:61:3c:e3:10:bb:2d:9c:ec:8e:35:40:78:b7:
                    30:5a:bc:45:ca:de:a6:d7:1e:bd:df:be:36:9d:16:
                    b2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A0:57:58:95:2B:C2:D3:80:A2:CE:AF:C4:19:EC:F9:85:8D:73:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/ff815538-39d0-348e-910a-f73be4832b91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.crl

            X509v3 Authority Key Identifier:
                keyid:8D:A5:73:99:67:37:74:5C:D4:FC:CC:EB:C0:C2:C5:E7:0C:54:49:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:df:5a:f8:f9:d8:47:e0:c7:c0:1a:6b:97:e5:7a:7b:22:ad:
         cf:19:a1:3b:05:a7:c5:74:a9:e7:02:0e:d4:75:17:0e:e3:ef:
         f4:73:a6:d0:64:e2:a5:93:e0:e7:2d:52:84:95:4d:a5:81:37:
         7c:0d:50:29:de:93:33:6c:9c:94:3b:6d:94:57:f7:b7:34:d3:
         84:5c:9b:17:f0:dc:8f:cc:31:e6:c2:91:69:7a:1b:a9:f7:0d:
         e0:11:1e:b7:61:88:04:29:29:41:59:67:2b:20:f3:6f:61:38:
         4f:99:75:76:9b:95:b3:5d:b5:38:ab:13:90:1d:e4:5d:f0:31:
         f1:7c:ab:8d:e3:b0:12:cf:f7:3e:83:b4:80:5b:77:3c:32:33:
         57:33:97:ed:3c:b1:ce:f5:aa:2f:c9:21:ce:14:d4:07:74:a7:
         5f:c8:23:4a:45:46:20:4d:74:29:c6:32:1d:ea:f1:3e:93:bb:
         b9:79:2b:6e:9a:18:b5:a8:14:4b:d6:ee:89:68:53:19:6e:12:
         34:c9:72:33:1f:68:22:a8:2d:2e:4a:a5:9b:d7:71:06:ef:4b:
         96:9c:04:90:aa:e9:ca:de:b1:df:84:c5:ea:48:d4:71:a8:7e:
         eb:d8:a0:22:30:88:bb:52:2e:43:16:6b:ca:45:54:cc:d6:29:
         ab:e0:1d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:07 2025 by rpki-client