Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/85c0e341-4084-31df-a68e-613e31da31fc.roa
File:                     85c0e341-4084-31df-a68e-613e31da31fc.roa (raw, json)
Hash identifier:          CrsslcQ8iQaXnkYa0SZ4dWqHGXxYVIB79YW9iuHWmY4=
Subject key identifier:   E0:C6:E7:A2:54:07:94:1A:BA:7D:50:B3:94:4B:5A:F2:59:CC:B8:00
Certificate issuer:       /CN=58fcef31-bc61-4217-a648-2d5bb00c93a9
Certificate serial:       010D0C9F43285848DA70FAB2036F895C72B66C00
Authority key identifier: 54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/85c0e341-4084-31df-a68e-613e31da31fc.roa
Signing time:             Wed 12 Feb 2025 02:00:39 +0000
ROA not before:           Wed 12 Feb 2025 02:00:39 +0000
ROA not after:            Tue 13 May 2025 01:00:39 +0000
asID:                     19281
IP address blocks:        149.112.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:da:70:fa:b2:03:6f:89:5c:72:b6:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58fcef31-bc61-4217-a648-2d5bb00c93a9
        Validity
            Not Before: Feb 12 02:00:39 2025 GMT
            Not After : May 13 01:00:39 2025 GMT
        Subject: CN=824c2ab2-e435-42bb-bbbf-027335f7dac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1a:fe:46:f5:da:1b:6e:1e:a3:10:29:28:b7:
                    30:52:25:51:26:7f:02:79:c7:a9:30:06:62:76:7d:
                    6b:c7:73:64:da:a6:45:d8:50:ff:ad:f5:c3:92:04:
                    1c:8c:b5:17:c9:42:54:3d:a6:f3:09:20:3c:81:c1:
                    a7:bf:e2:22:63:d9:b4:f6:f8:fe:1d:84:be:a2:48:
                    fc:fc:cf:af:1e:85:94:b5:1f:a4:11:00:1a:d1:17:
                    3b:72:ba:3b:2a:cb:96:52:64:21:d7:49:85:f0:8b:
                    32:82:d1:af:20:7c:0f:22:44:de:2c:76:8d:f0:d8:
                    20:ae:10:f5:ab:fa:a0:3e:71:4f:c1:bd:b2:fa:04:
                    01:4e:a9:91:ff:56:93:df:4c:0a:af:da:bc:03:80:
                    27:9b:3b:98:53:58:1a:bf:fa:e5:cc:2a:1f:0f:f0:
                    e2:b4:00:a2:6b:00:1d:04:ac:dd:44:e2:22:2a:2b:
                    24:37:83:7e:a9:22:d9:58:6d:89:49:e6:21:ce:e6:
                    0b:fb:65:d4:2a:6c:54:4a:dd:37:9c:ce:e4:b2:c5:
                    89:3d:c9:fe:8c:51:21:01:16:7e:71:86:2e:22:00:
                    86:a4:ec:04:e4:54:76:d9:36:8c:52:15:a3:68:ff:
                    df:46:33:cd:0a:f6:55:81:5c:09:9f:05:61:9a:7b:
                    39:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C6:E7:A2:54:07:94:1A:BA:7D:50:B3:94:4B:5A:F2:59:CC:B8:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/85c0e341-4084-31df-a68e-613e31da31fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl

            X509v3 Authority Key Identifier:
                keyid:54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:e0:85:4f:36:e2:f8:cd:36:45:93:f8:7e:a9:ff:5e:4a:1f:
         24:5e:0c:38:40:2f:52:d8:d0:dd:23:2c:29:23:d1:a7:b4:80:
         d1:e7:74:e5:ff:96:ad:cf:14:a7:d3:79:32:52:f8:7d:db:f5:
         3c:f3:ae:d6:3f:fa:9c:0e:3f:0d:e3:f8:aa:44:0c:0f:bc:cc:
         46:ba:bb:28:60:73:b3:0c:a3:2f:26:f5:2d:78:7c:5c:27:ae:
         fd:2e:b7:19:8d:5d:6c:59:e1:af:d1:82:27:09:93:ea:e6:34:
         dc:84:30:b7:66:7d:a7:d5:13:3c:8d:4f:28:39:e3:3e:8c:46:
         a2:d3:e4:cc:08:83:96:52:b9:d3:d2:79:11:e5:b1:13:52:d3:
         fa:c4:a7:3d:48:40:70:16:e4:9d:58:60:7e:54:67:ba:88:4a:
         ab:6b:95:28:5d:2e:13:58:76:ca:84:fc:34:b4:0e:97:bb:9b:
         5d:20:1b:ec:0e:26:e5:79:4f:a1:28:07:9f:49:1f:33:b0:43:
         74:88:2f:ff:0f:98:52:37:fc:35:33:82:b0:96:f6:45:72:fd:
         6a:e5:ba:22:3d:0a:81:f8:d5:48:5a:59:5e:fd:b4:bc:13:7e:
         23:c3:f7:a5:a9:8c:1d:e5:7d:60:04:07:65:56:dd:af:6b:12:
         56:3b:75:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:02:44 2025 by rpki-client