Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/83748a93-6000-31e8-bafc-53c88c748715.roa
File:                     83748a93-6000-31e8-bafc-53c88c748715.roa (raw, json)
Hash identifier:          q4pgemJdt3GtH2sPfbTVlsh8XehAXFUQxcXcETJzuKA=
Subject key identifier:   93:6D:F6:5E:78:CD:99:2C:3C:CE:C8:57:FA:AD:42:81:46:D8:9C:23
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F432858485F9ADC4AB896CD450E464800
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/83748a93-6000-31e8-bafc-53c88c748715.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     41378
IP address blocks:        161.129.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:dc:4a:b8:96:cd:45:0e:46:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=68711252-9a52-4b3a-b09d-9392075c4206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e6:4f:11:ca:b1:cb:ff:c1:ac:95:10:5a:26:
                    09:57:77:c6:c6:63:31:97:62:4e:1c:16:15:b3:01:
                    74:34:a7:4f:71:c3:5e:32:5d:81:79:21:a3:f2:a2:
                    fa:5d:89:b4:2b:64:a0:95:2d:64:84:40:8c:3b:65:
                    d7:30:ba:37:85:08:a4:54:ea:0d:4d:b0:2f:ba:44:
                    bc:e6:b8:21:9c:54:30:68:cb:09:7e:71:44:3e:b1:
                    7c:02:e1:e7:73:44:66:81:8f:db:99:0d:7a:b8:a9:
                    c0:d8:c8:fc:8e:2f:a9:05:c3:cd:25:9e:98:7f:32:
                    00:5b:7e:6a:ba:5f:ae:51:28:16:9a:48:a6:80:22:
                    69:7f:45:9b:4b:87:2e:ac:ec:ef:ab:95:04:dd:e8:
                    3b:90:ed:cf:9b:74:e2:a7:a7:24:b0:82:f4:59:4a:
                    bf:12:86:96:e5:52:0b:e2:02:fc:cf:01:78:53:6a:
                    57:bb:bb:bd:6f:55:f0:a9:80:3b:69:a1:e2:f2:18:
                    89:68:f3:a3:66:d5:5a:17:76:57:45:78:10:47:9e:
                    96:14:72:81:90:3a:27:7a:ea:3c:27:cf:ff:fd:3e:
                    92:73:b4:99:ff:e7:bc:1f:ec:be:13:9a:b3:69:0f:
                    ef:45:29:33:ca:96:ee:92:56:31:17:14:1f:01:71:
                    00:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6D:F6:5E:78:CD:99:2C:3C:CE:C8:57:FA:AD:42:81:46:D8:9C:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/83748a93-6000-31e8-bafc-53c88c748715.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:3e:48:ad:8c:dd:70:02:bd:f5:32:4b:7a:1e:43:a9:43:ef:
         c1:2b:42:2a:ed:19:59:17:2b:7e:12:0d:1a:4f:ba:c7:4f:24:
         48:59:ba:a6:a1:ff:c0:79:65:72:52:62:bf:d1:15:5a:91:5b:
         86:f4:21:ac:ba:3d:9a:ff:94:6d:b2:43:d6:2f:5c:05:a1:06:
         35:9c:4c:ab:bd:c3:27:63:e6:5d:31:ed:3d:33:af:b2:8d:e7:
         5d:66:85:53:56:7a:41:00:19:80:27:6c:b4:8e:98:52:7b:33:
         f9:7c:c6:6c:13:a3:7b:7a:b1:d8:ee:0c:47:df:22:d8:7e:5c:
         49:9d:8b:40:ae:d9:6a:50:46:af:44:0f:19:15:16:6e:1c:a1:
         ce:d0:85:e4:33:3e:e0:a5:44:61:18:40:58:ee:8e:fb:6e:e6:
         a9:99:7c:3b:d2:ac:47:7c:9e:d0:1e:a0:7e:72:4c:44:ae:24:
         2e:4f:c6:3f:9f:b3:1f:ab:59:f1:c3:18:5b:b3:68:cc:18:f0:
         a2:f1:26:14:5f:79:65:1b:e7:a5:a0:66:32:64:c6:a0:1a:44:
         e6:23:9d:67:38:9e:6c:54:a4:67:22:e6:e9:aa:39:ff:55:21:
         14:1d:53:d5:92:7d:9c:3f:0e:08:56:fb:55:c1:60:72:35:80:
         b6:fe:fd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:21 2025 by rpki-client