Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/5fdb8a7e-e93b-3ece-92ae-1cd3810975bd.roa
File:                     5fdb8a7e-e93b-3ece-92ae-1cd3810975bd.roa (raw, json)
Hash identifier:          QlKOiyc0eUDA0mmgmG7dcTyp5hK5FgNn1lsTbEHRoU8=
Subject key identifier:   5A:66:F0:D6:4D:D9:DA:AD:08:A8:43:11:A0:46:6D:54:91:22:F0:65
Certificate issuer:       /CN=a6ba0fd2-b526-4985-9314-bf6485056a64
Certificate serial:       010D0C9F43285848E16BE400DCC2A03F6B92C1C0
Authority key identifier: CC:23:95:78:8D:02:B3:B1:39:3C:D8:49:09:D0:31:6B:4F:1C:A6:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/5fdb8a7e-e93b-3ece-92ae-1cd3810975bd.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     2552
IP address blocks:        128.252.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/a6ba0fd2-b526-4985-9314-bf6485056a64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/a6ba0fd2-b526-4985-9314-bf6485056a64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:e4:00:dc:c2:a0:3f:6b:92:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6ba0fd2-b526-4985-9314-bf6485056a64
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=885455c6-6144-41ca-8dcb-50e76c83213e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:9d:84:d9:0b:72:ac:4c:c2:7b:8c:18:5b:b4:
                    d2:4f:d5:a4:81:f8:0f:88:ee:1d:6d:d4:28:50:af:
                    46:dc:8c:e5:38:ee:8a:9e:81:56:23:3b:cc:93:59:
                    b3:3f:76:d6:34:cf:5f:61:74:13:22:0d:fb:a1:39:
                    84:27:ca:9e:6f:d1:0d:d4:fe:1e:0b:60:3e:b5:0e:
                    be:3a:34:53:e8:c4:e2:b1:cf:c9:8f:a9:bc:1a:18:
                    ae:f3:e3:20:dd:9b:26:8a:38:3a:74:d1:05:65:3a:
                    dc:1a:5a:84:89:cf:bd:42:31:0d:c3:79:dc:f2:37:
                    8d:77:27:55:04:bb:a4:a3:de:d3:3e:4b:e2:2c:df:
                    62:22:56:3a:95:c5:cb:46:df:b5:e1:1d:71:40:bd:
                    f8:51:8f:e4:60:26:0c:71:5d:d4:dd:67:02:eb:4a:
                    1a:10:d9:d5:7d:95:56:8c:7d:48:60:4d:28:a4:b6:
                    10:4b:50:dc:43:58:4d:b3:4c:4d:32:00:f7:d3:40:
                    d1:ca:a9:fd:e6:c5:3b:51:c6:51:03:3f:a8:02:ae:
                    73:f5:d2:f5:74:3b:63:84:88:f9:04:73:83:6b:3d:
                    99:63:01:b8:a4:71:34:2d:94:89:73:5a:de:30:10:
                    6f:2d:86:cf:83:59:d5:e5:91:c5:34:b0:37:fa:e2:
                    5a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:66:F0:D6:4D:D9:DA:AD:08:A8:43:11:A0:46:6D:54:91:22:F0:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/5fdb8a7e-e93b-3ece-92ae-1cd3810975bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/a6ba0fd2-b526-4985-9314-bf6485056a64.crl

            X509v3 Authority Key Identifier:
                keyid:CC:23:95:78:8D:02:B3:B1:39:3C:D8:49:09:D0:31:6B:4F:1C:A6:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.252.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:41:cd:45:5b:f4:30:b5:9d:05:2d:96:b0:4f:16:d0:a7:c0:
         29:45:cd:66:03:2d:73:9a:3e:99:6f:7c:af:b8:a8:80:9f:39:
         2d:cf:d1:0f:a3:46:cd:50:ad:44:b0:00:3f:e0:93:e5:b3:82:
         a1:73:0b:df:10:26:fa:64:28:94:68:75:7e:be:a4:4f:df:c0:
         90:76:e6:07:bd:18:e9:32:5a:4a:cc:9a:68:e6:ca:31:c5:cc:
         16:6a:9a:e4:af:ff:6c:10:b4:84:22:b5:bd:d5:a1:47:02:7b:
         34:c5:e5:b6:c1:15:bd:07:b7:ce:26:ff:f3:8f:0e:09:84:bb:
         63:9a:23:1a:61:68:c7:13:07:b3:9d:0d:68:66:ba:f9:26:8a:
         81:f3:ad:23:53:62:85:12:b7:d9:a6:43:e9:df:06:db:9f:b0:
         5e:53:59:1a:5e:b2:18:b0:91:ea:b9:33:e8:15:ed:40:1f:9e:
         07:92:02:49:b0:f1:7e:a8:cd:8c:79:66:ca:da:c1:8d:10:f4:
         07:41:4e:1f:56:1f:8c:e0:a8:5a:78:68:e2:b4:d9:12:86:b3:
         20:5e:29:22:cc:9c:79:e9:c2:76:88:dd:64:87:6d:c4:1a:9a:
         90:07:15:ee:c1:d8:eb:d9:68:79:da:01:4e:c1:60:dd:35:0d:
         45:87:e0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:05:08 2025 by rpki-client