Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/b7ac1bbd-76d9-3be3-9b83-0d2ac5cafc1e.roa
File:                     b7ac1bbd-76d9-3be3-9b83-0d2ac5cafc1e.roa (raw, json)
Hash identifier:          hiBLrKYUli2Ae2DlRzmjK7WzRdr5ayfiTZJyFOPUllc=
Subject key identifier:   F3:77:02:A3:2C:B3:D7:1E:9A:19:A5:88:D8:E4:51:2D:0E:C0:08:51
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F432858486C2B0852D9CCBA655E459000
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/b7ac1bbd-76d9-3be3-9b83-0d2ac5cafc1e.roa
Signing time:             Fri 03 Jan 2025 14:00:51 +0000
ROA not before:           Fri 03 Jan 2025 14:00:51 +0000
ROA not after:            Thu 03 Apr 2025 13:00:51 +0000
asID:                     4181
IP address blocks:        217.143.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6c:2b:08:52:d9:cc:ba:65:5e:45:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Jan  3 14:00:51 2025 GMT
            Not After : Apr  3 13:00:51 2025 GMT
        Subject: CN=753201fc-0520-4321-bb38-493f6b02f5ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3f:14:72:58:ad:43:c5:d5:ca:db:6c:58:d3:
                    dc:2b:9a:a0:7a:68:e7:62:08:eb:3c:90:e7:51:0a:
                    87:29:41:bd:64:54:66:df:98:23:2e:8b:a4:77:1c:
                    02:bd:21:6d:ff:ae:d6:aa:ac:4d:ab:8d:8b:08:0a:
                    9c:25:be:04:b7:bb:07:b2:38:13:f6:a7:ef:cf:1b:
                    a8:35:0d:61:52:26:53:c9:1f:49:2d:da:07:16:bf:
                    5c:8c:4e:d5:7c:b3:97:fc:fb:1a:85:c4:4c:4d:e1:
                    a5:17:6a:64:d5:78:78:d2:d8:4c:9e:f5:2d:6f:b7:
                    dd:90:bd:4b:a3:36:4e:5a:81:7a:ef:54:3f:8d:9a:
                    b0:6d:55:72:05:91:a5:aa:23:c9:36:78:22:10:16:
                    26:cc:04:ab:3a:25:fb:2f:96:9d:27:a1:f9:5a:ce:
                    1d:65:cf:2d:98:22:10:c2:d8:fb:4d:4e:53:d1:e8:
                    d6:da:d3:46:f5:3b:08:41:84:78:c2:da:41:13:a3:
                    54:3f:b4:02:c9:e5:ec:d4:28:e7:d8:05:7d:0c:0c:
                    3e:db:af:ec:8c:10:60:5a:a6:7d:4d:cf:6d:7a:5c:
                    13:36:a2:1c:db:c0:d1:fb:c9:3f:f4:fd:43:ec:29:
                    4d:4d:63:10:dd:c5:2c:ac:fe:6c:ed:3f:91:78:9c:
                    ed:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:77:02:A3:2C:B3:D7:1E:9A:19:A5:88:D8:E4:51:2D:0E:C0:08:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/b7ac1bbd-76d9-3be3-9b83-0d2ac5cafc1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.143.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:f9:74:f9:95:e6:d9:5d:b9:b6:c9:3d:c1:49:e1:68:fa:61:
         89:bf:70:a0:49:13:09:aa:12:bc:d2:98:d9:28:dc:f3:26:2b:
         31:f5:a3:2b:cf:6b:05:42:37:27:a3:10:42:f2:ef:39:1a:57:
         c0:a0:dc:78:20:70:49:29:7c:20:54:bd:4d:85:31:72:64:62:
         94:77:3b:d7:bd:35:6f:9b:89:c5:62:89:84:eb:9e:45:98:be:
         80:a8:05:54:d6:6a:21:d3:87:c0:a3:98:9a:7a:e5:b3:d9:27:
         04:80:ef:81:bb:e9:05:9c:2d:12:91:56:23:dd:4c:bb:fe:81:
         84:b1:a0:00:5d:20:eb:b2:b8:20:a2:e4:89:00:e5:0c:01:ef:
         71:97:90:90:85:73:9a:c5:10:c5:e8:a7:dc:6e:c4:08:64:d1:
         d8:b8:b0:32:3b:0e:74:60:88:c8:9c:cc:20:da:00:4c:10:a6:
         1b:b4:0d:e1:3a:81:12:04:32:fa:f4:f5:d0:f4:c6:a5:4a:40:
         e8:88:9b:59:bc:ce:09:a1:fb:ab:c5:ac:a8:c9:10:73:3f:2f:
         45:a7:07:d2:6a:12:63:e9:dc:63:b1:96:c0:15:04:1f:07:14:
         b5:0e:51:40:da:69:a2:ed:f8:93:ff:eb:93:25:46:20:a8:49:
         f1:7a:4f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:05 2025 by rpki-client