Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/36299741-5221-3281-8e07-e0942d30dd62.roa
File:                     36299741-5221-3281-8e07-e0942d30dd62.roa (raw, json)
Hash identifier:          hmcdwPmaMYsfpOvjHzygisgmKUaIHYq2HA80Vz8noOU=
Subject key identifier:   33:F7:F7:4A:C6:E9:EE:53:4E:BA:E9:B0:5D:D6:E0:F8:09:AA:99:06
Certificate issuer:       /CN=b1896033-ca2b-44a4-b67f-7160d614cf31
Certificate serial:       010D0C9F4328584819CFCEE80B6003BEC8994A00
Authority key identifier: 58:AF:A3:F2:C0:80:A9:DA:AA:96:D3:A6:D5:D1:C6:BA:69:F0:89:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/36299741-5221-3281-8e07-e0942d30dd62.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     12186
IP address blocks:        192.189.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/b1896033-ca2b-44a4-b67f-7160d614cf31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/b1896033-ca2b-44a4-b67f-7160d614cf31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:ce:e8:0b:60:03:be:c8:99:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1896033-ca2b-44a4-b67f-7160d614cf31
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=8dec2788-0fba-4671-9b87-c919f6cb5132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:33:13:18:18:c1:1b:b3:8a:c7:6b:4c:30:52:
                    24:7d:4a:ef:c2:17:b6:1f:e4:b1:92:4b:4e:01:6f:
                    a0:77:ea:4f:9b:4c:13:95:6a:ee:5f:a5:4f:cb:aa:
                    b3:db:9a:6a:b3:85:35:37:68:c2:fc:2a:c9:39:91:
                    5a:9f:b7:ee:8a:89:40:5c:61:f0:39:1b:73:6e:29:
                    4c:e6:87:05:c8:09:b2:98:49:4a:79:6b:06:d6:1a:
                    fc:c3:04:64:7c:ca:86:83:55:08:3c:bd:18:6b:ec:
                    31:08:8e:cf:b8:3f:f4:9e:45:2c:8f:b9:2a:1d:cc:
                    60:61:81:6e:06:f0:48:67:a2:d4:4d:2b:b0:c5:9d:
                    39:ca:5c:ed:ee:17:62:9f:be:25:78:de:8a:6e:f2:
                    4c:b5:5d:8d:8f:ee:10:70:41:fd:32:89:25:d1:8e:
                    de:a7:4b:cb:aa:45:67:42:d8:55:cb:bc:2a:0f:00:
                    6a:89:23:63:b3:81:7f:9c:b2:05:7d:77:01:64:85:
                    c7:5d:6e:8a:c5:98:0e:3a:f8:89:5d:1b:17:f3:6f:
                    52:0f:f1:67:cd:48:03:23:83:d9:84:e3:5b:af:91:
                    21:e4:25:45:08:d0:75:4e:8f:dd:17:33:9e:a7:47:
                    5f:ad:91:98:a5:fa:5e:2c:77:95:89:e7:d8:11:d0:
                    c9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F7:F7:4A:C6:E9:EE:53:4E:BA:E9:B0:5D:D6:E0:F8:09:AA:99:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/36299741-5221-3281-8e07-e0942d30dd62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/b1896033-ca2b-44a4-b67f-7160d614cf31.crl

            X509v3 Authority Key Identifier:
                keyid:58:AF:A3:F2:C0:80:A9:DA:AA:96:D3:A6:D5:D1:C6:BA:69:F0:89:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.189.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:5b:c9:b4:49:74:53:0f:6d:cc:d3:9e:d9:c9:4f:94:5f:c2:
         05:73:23:19:9f:18:42:ad:79:c5:3a:07:a3:66:07:65:33:83:
         38:92:26:0b:81:c9:02:59:af:44:89:79:cd:30:b2:f2:c0:d4:
         bf:77:a7:34:88:57:59:3b:09:43:9d:a3:02:c3:2e:ac:8e:aa:
         e2:57:17:88:cc:54:66:74:cd:65:eb:2c:d0:d8:3d:72:63:68:
         2b:b0:bc:ce:2a:48:08:86:85:5c:84:44:69:ec:5d:b4:76:5f:
         50:d7:34:df:b6:56:95:0a:bf:74:8e:75:bf:b9:b6:59:8f:20:
         14:d3:22:9a:52:5b:7e:a5:a0:91:98:f5:fd:c3:25:66:52:b9:
         9d:e6:75:cf:a0:b8:45:f7:b0:57:33:67:c3:8c:b9:d0:ab:51:
         9e:f8:d8:b9:60:db:8e:23:3b:ba:17:f1:cb:13:f4:1a:e4:48:
         32:14:8b:af:ae:36:87:90:0d:45:88:da:67:b3:02:21:1a:39:
         81:3e:04:78:4e:e0:f1:bd:ed:d4:1f:fb:30:93:2f:b9:b8:43:
         9d:ec:b3:77:e4:c8:5d:dd:0c:dd:fe:09:86:a6:02:a9:98:93:
         33:21:b6:dc:28:e7:a6:97:ae:a4:64:6f:20:f2:eb:67:2e:23:
         4a:b8:b0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:34 2025 by rpki-client