Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/7bccef14-6bf3-3185-b3ed-6a39e782c834.roa
File:                     7bccef14-6bf3-3185-b3ed-6a39e782c834.roa (raw, json)
Hash identifier:          U3InZV+SziJQ1f02aTIMDtdgcnanE5MmqHXt2Z/ebb0=
Subject key identifier:   06:0A:76:B8:3D:C0:48:42:B5:01:DB:7A:57:D5:1F:CD:FD:98:F4:FD
Certificate issuer:       /CN=54a220d5-4ac8-4e34-bec0-5a555376e674
Certificate serial:       010D0C9F4328584898D5FF258C4B8F3BD8ED8C00
Authority key identifier: 25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/7bccef14-6bf3-3185-b3ed-6a39e782c834.roa
Signing time:             Sun 19 Jan 2025 14:00:52 +0000
ROA not before:           Sun 19 Jan 2025 14:00:52 +0000
ROA not after:            Sat 19 Apr 2025 13:00:52 +0000
asID:                     19381
IP address blocks:        192.147.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:98:d5:ff:25:8c:4b:8f:3b:d8:ed:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54a220d5-4ac8-4e34-bec0-5a555376e674
        Validity
            Not Before: Jan 19 14:00:52 2025 GMT
            Not After : Apr 19 13:00:52 2025 GMT
        Subject: CN=09f65406-8031-4de9-b3e8-4812c985504f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a6:bb:ed:98:e4:ae:17:6a:b7:30:47:fb:78:
                    7c:30:5e:55:0e:96:de:37:de:b6:73:41:cf:79:ab:
                    8e:24:a7:5d:c5:71:c6:f9:96:1d:8c:9f:9c:fd:69:
                    c6:e6:a8:2c:be:41:d0:1f:c0:cb:2a:3f:c9:f1:a5:
                    6d:31:52:8c:24:fa:c0:2e:61:4c:af:d5:4a:ad:55:
                    60:04:82:20:4a:a6:32:c4:dc:37:d0:d2:67:74:7a:
                    ac:73:d5:fb:ea:fe:9e:ed:6c:51:a7:ca:74:fa:06:
                    09:f3:a5:53:00:1d:16:a1:21:45:12:91:f3:dc:76:
                    ca:ff:ef:0c:49:67:1e:9b:e8:c9:aa:75:a7:fa:ae:
                    cf:c2:2a:a1:82:59:e1:22:42:6d:7d:7b:ba:15:a4:
                    8d:f7:52:45:9e:ff:49:36:92:1a:58:96:64:b7:73:
                    35:62:a6:db:be:f2:88:06:38:24:9e:e0:07:fb:96:
                    90:cd:e5:e9:bd:92:27:6b:8c:51:a7:16:a1:c1:55:
                    b8:02:96:cc:5a:a9:db:53:fe:d5:b0:b6:e9:d9:b7:
                    28:51:43:39:fe:dc:e7:0c:49:98:ed:86:c5:d0:b6:
                    5a:6e:6b:d4:64:c2:5b:95:80:64:e5:1f:3c:73:ba:
                    f5:51:13:20:bf:72:6a:7c:10:93:da:d8:19:cc:30:
                    79:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0A:76:B8:3D:C0:48:42:B5:01:DB:7A:57:D5:1F:CD:FD:98:F4:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/7bccef14-6bf3-3185-b3ed-6a39e782c834.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.crl

            X509v3 Authority Key Identifier:
                keyid:25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.147.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:48:eb:b6:40:da:f2:8a:50:2c:b5:d4:aa:f6:71:b5:ad:ca:
         f3:98:e6:af:56:cd:df:f4:24:d6:d5:bd:6d:cd:d9:43:24:e4:
         d7:ed:06:ee:30:49:13:17:f9:4e:82:71:9a:03:96:8e:15:89:
         eb:63:6d:8d:a4:c9:d6:c3:5f:f4:92:1a:42:91:79:23:1c:6d:
         d4:f7:2f:03:01:72:d7:86:53:ee:20:81:9b:43:2e:e7:44:df:
         5e:a9:e2:e8:1d:8c:8c:68:19:70:d0:c4:25:30:5d:dc:5d:d6:
         9b:fe:e0:d7:ec:9f:ee:0b:03:12:f1:c7:ee:00:72:b0:bf:0b:
         ec:7f:20:49:da:d9:2a:10:fa:7e:5f:8a:b6:8b:b8:3b:24:44:
         4d:47:5d:03:fb:11:93:55:d9:65:97:98:49:7d:03:73:b1:02:
         fc:56:00:b6:d2:ad:00:e6:16:10:88:af:93:12:57:f5:a4:c7:
         8d:dc:4b:92:26:41:78:3a:6b:6d:ce:15:42:ff:3a:34:0b:20:
         37:d5:d8:dd:d3:2f:49:b4:39:64:7a:ef:c6:fe:68:e8:90:2b:
         dc:53:4b:2b:4a:db:0a:f2:5d:fc:07:90:6e:dd:32:82:ef:ce:
         6e:73:83:77:3d:7c:57:73:49:b3:80:64:43:99:ef:70:80:6c:
         c9:4c:46:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:18 2025 by rpki-client