Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/66637ec7-a576-3dcd-9cfe-d9c166a3feb3.roa
File:                     66637ec7-a576-3dcd-9cfe-d9c166a3feb3.roa (raw, json)
Hash identifier:          LdMuvZC8mTH7NhU/DppKWHa0enPcyYTOZZJJvahzCF0=
Subject key identifier:   F4:A1:BC:17:80:CF:F0:9F:21:6D:50:DD:8A:05:00:A2:E2:64:5A:29
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F43285848E16BD556428170B46B819400
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/66637ec7-a576-3dcd-9cfe-d9c166a3feb3.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     21928
IP address blocks:        100.128.0.0/9 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:d5:56:42:81:70:b4:6b:81:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=ed356c24-a694-4163-ad57-0bacca13097c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:65:3f:bb:04:25:b6:52:68:b9:98:e9:da:14:
                    41:bb:96:95:4a:16:df:b2:09:c7:d1:b4:a9:64:d8:
                    77:ee:e5:a7:54:2d:bf:2a:7d:9c:95:3a:74:7f:5c:
                    d8:ae:25:7b:76:e7:bf:dc:f5:1f:29:9f:3e:95:89:
                    74:bf:ca:d1:89:94:4d:85:65:b1:e8:63:52:ca:66:
                    79:80:70:4d:14:ae:64:bc:b1:ab:15:81:a8:90:80:
                    b8:29:ad:14:22:33:11:5a:7e:65:84:d3:7a:84:c3:
                    9a:5e:c0:1a:df:79:b5:b7:8b:e8:1c:00:14:b9:40:
                    cb:47:b7:d1:88:24:ed:50:d4:ca:3b:fa:72:ca:72:
                    b9:03:ef:b9:22:65:7f:0d:ac:8d:97:27:1b:bd:2f:
                    6a:6c:2e:7c:cf:9c:d6:b6:0b:58:9c:70:63:48:0b:
                    92:c7:17:27:c8:3a:a2:f5:3a:3e:87:75:78:94:bd:
                    c2:c9:e6:59:06:4f:b3:05:be:f1:7b:f0:85:6a:bb:
                    59:07:3c:3f:6b:dd:57:8c:e9:6d:e7:87:26:cc:c1:
                    26:e4:7f:16:35:a6:a3:de:61:05:b4:4e:32:84:e2:
                    3e:5a:95:bd:24:74:6f:8d:c1:52:0b:b6:c3:9f:eb:
                    c4:a4:ee:8f:72:c1:a5:64:5d:d1:c5:07:a0:05:c0:
                    52:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A1:BC:17:80:CF:F0:9F:21:6D:50:DD:8A:05:00:A2:E2:64:5A:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/66637ec7-a576-3dcd-9cfe-d9c166a3feb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.128.0.0/9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e3:99:d9:c2:85:67:6a:9b:b2:7b:c6:0e:f2:04:46:84:f3:65:
         4b:de:40:10:1f:c2:08:f4:db:d8:a8:2e:60:65:58:4b:ca:a7:
         16:97:77:e4:7f:ce:1b:cd:3e:4d:fe:e4:be:4e:9e:ea:5c:73:
         4c:4e:cb:a1:0a:d3:18:40:f8:ff:71:0b:d3:27:b7:b1:2b:7c:
         ca:db:f0:ec:7f:5b:de:c2:02:9b:64:09:27:08:3b:04:b2:04:
         9b:1f:29:d1:87:4b:6e:29:5e:0f:dc:15:8b:85:6d:c5:3e:c3:
         6a:10:16:94:a5:6c:37:5b:1e:d8:14:98:f0:2d:c1:d9:39:3f:
         17:2a:80:88:09:6d:37:a1:e1:b4:9c:98:0e:f9:0b:a3:27:b2:
         b4:5a:fd:46:08:2a:c3:5a:73:37:9a:2d:a2:39:4b:fd:6f:61:
         b0:62:65:43:a4:08:ae:45:69:54:55:11:17:e9:9b:14:9e:d2:
         9a:46:4a:71:26:cf:c2:98:5d:de:ac:79:4e:0f:bc:29:12:dc:
         d5:0d:78:43:24:3e:81:b9:eb:bb:85:8d:f4:53:e6:a2:5d:4a:
         e7:c3:b8:3d:72:b5:ec:0d:c9:c6:01:20:fc:84:ea:ff:2d:be:
         bd:5d:8e:18:71:13:5e:a1:ca:bd:4f:3d:88:e2:7f:12:4f:0a:
         af:c7:da:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:32:19 2025 by rpki-client