Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/3b43806d-c024-3592-8e0d-0b5ac42b3924.roa
File:                     3b43806d-c024-3592-8e0d-0b5ac42b3924.roa (raw, json)
Hash identifier:          +i3oETOH1ak85u2lrvFAKGCzeRwxwYWzrUy0W7A27Tk=
Subject key identifier:   CA:EF:0D:1C:7F:39:65:0F:DB:15:37:84:B0:5A:D2:8D:A5:7E:95:BD
Certificate issuer:       /CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
Certificate serial:       010D0C9F432858487755D63D238046972D033430
Authority key identifier: DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/3b43806d-c024-3592-8e0d-0b5ac42b3924.roa
Signing time:             Tue 07 Jan 2025 14:00:53 +0000
ROA not before:           Tue 07 Jan 2025 14:00:53 +0000
ROA not after:            Mon 07 Apr 2025 13:00:53 +0000
asID:                     62654
IP address blocks:        57.140.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:55:d6:3d:23:80:46:97:2d:03:34:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
        Validity
            Not Before: Jan  7 14:00:53 2025 GMT
            Not After : Apr  7 13:00:53 2025 GMT
        Subject: CN=3346ab17-e41d-4ba9-8922-8674b64cbd88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a5:08:4d:81:4a:8d:16:ce:8c:ca:b8:7d:5d:
                    54:09:a1:4d:e9:d7:f1:0d:4d:a7:96:ad:48:9e:d8:
                    f9:88:58:bf:e3:2b:2e:0b:15:17:9a:cf:5e:6d:08:
                    50:33:0c:9b:73:a5:30:d8:43:98:de:4f:17:46:7d:
                    1c:ce:88:96:cc:a1:5c:f9:b3:64:18:fd:e7:4d:c4:
                    25:d1:d0:bb:70:88:8c:89:53:17:06:c7:07:80:7d:
                    ad:e5:34:c5:c5:36:3c:7b:44:3d:8c:62:73:7e:fa:
                    17:7b:d7:c4:4d:93:c7:99:43:bb:c1:5f:1b:eb:09:
                    78:09:8f:d2:ad:c7:19:bf:9b:d1:ef:63:e0:c6:02:
                    9c:91:0e:6f:31:a2:26:10:67:40:cd:12:6d:93:d3:
                    46:76:06:d4:b2:b2:68:74:ef:68:c3:0a:f9:dd:74:
                    39:ae:ee:48:cd:38:47:b6:7a:74:af:5c:b7:c7:5d:
                    0d:59:8b:58:95:77:0c:10:fc:1b:f3:c6:f2:6b:c1:
                    58:ba:4e:a3:82:73:e0:d5:94:5e:a5:62:fc:45:13:
                    46:77:16:d1:01:20:51:ac:b5:01:89:f3:2b:00:ad:
                    1c:26:6d:b6:08:d2:f6:14:97:6a:17:80:e1:aa:dc:
                    3e:e8:4c:6f:fe:f6:a3:b5:96:19:bd:60:15:1c:87:
                    cb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:EF:0D:1C:7F:39:65:0F:DB:15:37:84:B0:5A:D2:8D:A5:7E:95:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/3b43806d-c024-3592-8e0d-0b5ac42b3924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl

            X509v3 Authority Key Identifier:
                keyid:DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.140.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:a7:31:7b:dc:c8:81:59:3e:e0:0a:fa:06:49:08:1d:c7:2f:
         2e:38:e6:3a:15:7c:33:a3:ab:ec:26:b0:57:a4:ff:41:7d:cd:
         dd:04:b8:f6:c8:9a:94:a6:eb:1d:35:de:78:ee:af:af:da:29:
         76:56:96:1f:1c:27:54:fa:f0:06:96:c5:ac:9a:cc:1e:e1:23:
         e7:3b:7c:06:d6:bf:f9:23:d5:5d:31:60:58:73:11:97:0f:61:
         7e:61:f6:44:8f:70:f1:9e:c4:f3:70:65:95:76:66:69:8c:d6:
         49:11:34:c0:e6:e1:0b:e0:80:32:de:87:db:fd:a4:0c:ca:ae:
         f0:d6:6e:92:28:32:9e:c5:84:44:e2:ce:ad:48:c0:2f:40:2a:
         68:c2:17:a5:f3:40:c2:0c:fa:76:7b:66:b7:cb:10:ea:02:ac:
         15:23:0b:e2:62:93:30:28:66:57:19:4b:67:6c:af:17:30:ca:
         ec:dc:00:f0:b9:d8:bf:d9:71:98:87:59:60:da:d7:b0:72:12:
         a3:82:19:d0:20:92:f3:05:6b:fa:11:6f:1f:99:8d:ec:6e:c1:
         5b:fd:09:5a:b7:dd:68:d8:46:4b:60:53:a8:fb:47:91:3b:ff:
         08:b2:6f:9c:e5:d5:a2:84:46:66:3c:69:74:60:29:de:55:1e:
         3d:93:e2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:07 2025 by rpki-client