Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/e95e7009-bba1-3d4c-907f-59184c496169.roa
File:                     e95e7009-bba1-3d4c-907f-59184c496169.roa (raw, json)
Hash identifier:          yCPYMn+lRn4XLmy0UD0FA0WUUTmlG5TAagSaLbojBgc=
Subject key identifier:   A9:46:19:01:5E:83:08:C9:78:F0:02:E2:80:54:B4:0E:2B:6A:21:ED
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F43285848159FEFC78B3E73B7EDAA6780
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/e95e7009-bba1-3d4c-907f-59184c496169.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     14618
IP address blocks:        143.244.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:ef:c7:8b:3e:73:b7:ed:aa:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=f62cc0c0-74e6-467e-b112-e88b8d95fe64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7f:b6:21:82:84:7c:26:a5:f2:4e:44:e1:61:
                    f4:3f:a9:c6:37:2f:31:76:7e:ce:d6:34:e3:eb:b3:
                    58:45:1a:f3:72:93:e2:28:6c:5a:1c:96:b8:f8:94:
                    6c:7b:c9:9d:44:5d:6b:95:32:ae:ce:7f:93:ef:51:
                    93:05:f7:16:aa:a3:66:dd:33:00:31:67:51:bf:be:
                    1c:0f:ca:de:f6:af:12:a8:b8:30:31:80:10:c2:84:
                    7e:60:bf:e2:8f:38:69:fc:7a:40:da:1b:28:90:f3:
                    7e:38:78:a7:3b:a0:6b:80:69:17:9b:54:d9:a3:d7:
                    d5:c8:ef:27:8f:2d:e1:76:2f:0a:e7:57:f6:9d:d1:
                    53:d5:17:f8:38:f2:a1:5d:ea:57:e4:fb:94:29:f0:
                    13:57:c7:a8:b6:bc:e0:59:14:57:85:4e:45:41:80:
                    12:a2:b5:dd:6c:7e:3f:19:80:16:1a:ae:2a:a3:ce:
                    ea:eb:f7:ab:4e:d1:32:37:a4:f6:ce:7e:5a:e4:89:
                    30:fd:37:47:ac:87:43:43:6b:fb:72:90:d4:bc:19:
                    7e:de:b1:e5:c3:d7:a7:ab:2f:c6:40:51:00:d7:6e:
                    b1:45:d3:e4:49:56:3a:57:ce:83:16:82:6e:1f:d2:
                    06:11:65:91:1e:a7:00:b5:3b:32:56:03:5e:8d:83:
                    51:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:46:19:01:5E:83:08:C9:78:F0:02:E2:80:54:B4:0E:2B:6A:21:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/e95e7009-bba1-3d4c-907f-59184c496169.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.244.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:61:7a:87:f5:90:28:f9:ad:87:ea:65:a0:85:99:55:a8:13:
         87:19:e3:a7:b3:28:63:b1:78:fe:4b:97:2c:6c:0d:91:0a:5b:
         da:71:0c:04:67:c6:c2:6c:8f:28:be:ff:24:b4:78:ad:10:10:
         19:a0:9d:01:90:1a:59:de:0f:10:ab:a7:4b:d1:61:d7:f5:e8:
         23:d6:78:a0:d4:e1:bd:06:2e:52:42:65:e0:c7:ec:36:de:fe:
         5a:f4:ef:41:ea:89:1f:a5:db:d0:83:41:d4:14:90:4c:74:cf:
         48:26:5a:5a:cf:5f:32:23:c3:8c:ea:8b:fb:e0:e0:c5:90:fe:
         6d:33:31:94:de:fa:eb:64:38:68:14:b5:d7:42:23:67:de:e2:
         35:b2:0f:86:73:97:eb:65:06:38:ce:77:8a:23:e7:86:d1:70:
         58:69:dc:02:46:b3:be:32:08:8f:de:2c:54:8d:6f:9e:45:ae:
         38:4d:3d:73:1c:2f:49:43:f6:db:9c:30:41:fe:15:37:27:b5:
         b6:40:cd:8f:c2:86:30:9b:cb:ef:1f:4c:9d:12:7f:76:7e:9d:
         ed:e4:0d:d1:b3:45:ec:c2:ec:e0:0f:a9:bd:5e:b6:19:05:75:
         42:ca:e1:39:98:fe:55:e7:35:6c:a9:dc:da:f8:a3:82:2e:b7:
         dd:43:7a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:21:15 2025 by rpki-client