Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/5c164b9f-4311-3a71-bd95-4e0228f304bc.roa
File:                     5c164b9f-4311-3a71-bd95-4e0228f304bc.roa (raw, json)
Hash identifier:          Ckk0sA06jNSe9JhNOzNcO2FKgIqcPppHNGNEVuYeCHk=
Subject key identifier:   CE:44:CB:B0:09:BA:D5:F3:FB:03:07:66:22:3B:B5:14:B7:8D:26:B0
Certificate issuer:       /CN=445edff1-360d-4ae2-a045-ccf7dbc4beeb
Certificate serial:       010D0C9F43285848265FF77F46A3F7ACAF175280
Authority key identifier: 00:B7:C6:A7:48:8A:12:60:2D:94:01:4C:B0:5E:88:88:58:B0:51:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/5c164b9f-4311-3a71-bd95-4e0228f304bc.roa
Signing time:             Mon 09 Dec 2024 14:00:51 +0000
ROA not before:           Mon 09 Dec 2024 14:00:51 +0000
ROA not after:            Sun 09 Mar 2025 13:00:51 +0000
asID:                     14618
IP address blocks:        208.89.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:5f:f7:7f:46:a3:f7:ac:af:17:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445edff1-360d-4ae2-a045-ccf7dbc4beeb
        Validity
            Not Before: Dec  9 14:00:51 2024 GMT
            Not After : Mar  9 13:00:51 2025 GMT
        Subject: CN=63116992-433a-4271-86e5-b0d98d8645af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c3:55:35:1a:f2:a3:eb:b7:40:04:da:cf:31:
                    1a:3a:0f:ff:20:55:5a:74:9a:35:45:dd:ac:e0:2f:
                    19:9a:b5:eb:e2:67:7e:28:48:43:f1:ab:a6:65:11:
                    20:75:8e:45:54:c4:8b:26:ab:60:10:09:47:86:13:
                    0d:e9:c3:1f:a7:51:6c:94:7f:74:11:a4:d3:84:35:
                    ce:89:8a:1a:cd:3e:f3:84:c9:c5:f3:3f:54:68:e6:
                    5c:f1:80:58:ee:71:cf:2f:b9:1e:e2:f4:7d:3c:a9:
                    8e:bd:e4:14:8b:3b:06:24:6e:11:bb:83:31:22:50:
                    91:85:7a:d7:f9:ba:ad:e8:31:87:d9:81:41:ae:a9:
                    44:31:2e:6d:12:51:29:f4:93:ec:26:83:c7:8d:6d:
                    24:46:8f:c0:6c:e5:30:9e:e4:f2:03:60:8b:c2:3b:
                    58:f5:7b:d8:e8:82:d7:7b:5e:0a:e2:71:a2:2f:ac:
                    9c:dc:45:e4:d8:cb:4c:74:06:1f:bb:24:f5:6f:39:
                    a6:0d:01:5f:bc:7e:a3:02:d9:5a:d3:78:b6:83:84:
                    aa:c5:dd:cd:ee:87:62:1f:15:9d:9b:d1:d6:a7:05:
                    19:ab:f5:d1:07:79:a2:e6:42:70:bc:45:5a:fd:76:
                    eb:1a:59:9b:05:75:c9:c1:96:1b:ff:a1:4f:0c:6b:
                    80:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:44:CB:B0:09:BA:D5:F3:FB:03:07:66:22:3B:B5:14:B7:8D:26:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/5c164b9f-4311-3a71-bd95-4e0228f304bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.crl

            X509v3 Authority Key Identifier:
                keyid:00:B7:C6:A7:48:8A:12:60:2D:94:01:4C:B0:5E:88:88:58:B0:51:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:7b:34:b1:33:38:8f:3a:0f:00:e7:15:ed:13:82:bf:51:1d:
         41:c2:0a:ad:21:8e:9e:72:91:a2:11:55:6d:f1:73:23:43:2a:
         e2:9c:1f:d6:ca:52:d9:b2:cd:51:19:05:c4:8d:49:8c:93:6a:
         e8:47:50:33:ac:56:87:99:29:20:5f:0c:45:87:31:fb:5d:67:
         a4:28:54:5e:dd:c8:99:14:61:1a:cb:3f:9f:28:02:04:d1:55:
         46:7b:4a:dc:bd:bf:a6:59:56:6f:2b:ff:c9:c1:52:a7:03:bc:
         1e:81:c2:9b:7e:2b:81:3d:00:7f:3c:07:32:54:3e:30:ec:27:
         97:46:d1:a7:51:50:5c:61:6d:79:0f:d5:d5:c6:01:68:92:1f:
         27:cc:0e:3f:d4:17:cc:9e:9d:bc:cf:3e:e5:f3:20:c4:cf:8d:
         a3:eb:28:cb:13:f2:20:48:fa:f9:4c:28:fd:a2:e2:f3:29:c9:
         4f:fe:1f:75:02:ca:7c:d8:5a:af:01:f2:88:b3:07:79:3b:4a:
         0e:ff:cc:a6:f0:5a:83:4b:e6:8a:01:86:cf:f1:ad:aa:62:bb:
         cc:aa:40:76:2c:2f:63:9b:20:f9:a9:97:76:36:1d:8a:e3:a1:
         88:3c:79:e2:9a:67:2b:64:09:0c:c3:a0:8a:b8:78:59:5b:89:
         48:9f:46:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:52 2025 by rpki-client