Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/b7cfc94e-3868-3c6d-ac09-5bcd12f0ce16.roa
File:                     b7cfc94e-3868-3c6d-ac09-5bcd12f0ce16.roa (raw, json)
Hash identifier:          EwwodpK1259nu8QZA0LwNATD6hlskUIPy8diWGWu0dg=
Subject key identifier:   CB:24:DA:A3:E7:1F:2D:66:10:BA:3B:B1:E5:56:D2:C6:32:17:D9:6A
Certificate issuer:       /CN=28aae7db-2f51-4656-bba0-64f1d3ee3256
Certificate serial:       010D0C9F4328584839EACF7C82556A3B73674080
Authority key identifier: 8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/b7cfc94e-3868-3c6d-ac09-5bcd12f0ce16.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     32435
IP address blocks:        199.189.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:cf:7c:82:55:6a:3b:73:67:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aae7db-2f51-4656-bba0-64f1d3ee3256
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=6ab35ab7-5aff-4dc8-b5ea-911e32f720d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:64:bf:18:82:35:d0:bc:96:dc:53:77:7b:ce:
                    a7:49:10:50:72:a6:6d:5e:df:50:c5:76:54:20:e9:
                    a9:6c:a7:08:35:90:d1:01:03:30:f1:79:c6:10:12:
                    f6:d9:50:15:b4:bc:cd:36:f7:29:9c:47:97:12:bb:
                    2c:4c:f8:e6:a0:c6:57:af:71:02:74:9f:40:6c:66:
                    4e:97:cf:6c:b0:d9:29:f6:9a:8a:47:a4:0f:e0:f4:
                    0a:53:db:8e:85:3e:e4:3c:d4:e0:42:8b:4c:64:a8:
                    64:c9:fb:06:ba:c9:43:0b:5d:be:33:85:f7:65:14:
                    f0:41:1d:e7:fd:76:d2:79:1e:f3:44:af:b6:6a:db:
                    69:12:f5:ba:8d:55:f8:77:86:3b:d8:d0:27:8e:62:
                    90:e0:b7:82:f5:95:35:a1:73:7d:d2:be:4f:49:b5:
                    f8:28:2f:e5:c3:ae:55:49:f7:10:d7:2d:b9:d8:e3:
                    c3:dc:26:eb:57:8e:aa:40:8e:3d:04:81:32:42:86:
                    28:c8:7d:8f:b2:ba:30:fd:ce:ec:bc:09:a5:5e:f0:
                    5a:a5:7a:15:89:1b:9f:df:35:28:d0:39:d5:d4:14:
                    e3:5c:0d:59:b6:74:3d:bf:97:d9:35:9f:6f:8c:59:
                    fb:b6:87:65:63:fe:fd:0c:f9:00:16:f1:66:f5:22:
                    7d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:24:DA:A3:E7:1F:2D:66:10:BA:3B:B1:E5:56:D2:C6:32:17:D9:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/b7cfc94e-3868-3c6d-ac09-5bcd12f0ce16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl

            X509v3 Authority Key Identifier:
                keyid:8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.189.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:37:a5:2c:b8:cb:13:9b:8d:7d:b2:3a:84:b3:4c:d5:b0:9f:
         ec:e2:a5:f4:8e:21:41:e2:b4:9f:2f:d6:cc:53:0d:05:0c:da:
         55:95:86:50:e3:0f:b7:40:4d:bc:11:15:54:86:b8:af:84:e4:
         a5:7c:3c:89:79:94:ab:a6:96:7b:b1:f9:48:89:07:d2:9f:6a:
         ca:25:6c:e9:89:43:b5:fb:57:f3:1d:0b:4e:ad:d2:7d:c7:1b:
         27:57:be:20:d8:58:8a:50:fd:04:b5:31:82:e0:88:b9:54:87:
         32:9d:dc:79:a0:40:5c:f4:27:55:54:cd:50:e9:aa:66:f6:5b:
         02:b9:65:e6:c6:12:f4:17:61:61:95:69:a4:ba:58:f2:d6:d4:
         e8:d8:ee:75:b5:aa:1d:df:86:e4:6a:37:02:a4:17:96:48:87:
         45:14:01:06:e4:c3:d6:fa:b3:98:2f:64:7d:27:10:a0:65:1b:
         42:70:7d:91:60:77:ca:12:61:a8:f2:47:14:02:60:25:c2:87:
         98:a3:62:5b:b5:59:26:f7:f9:b4:ad:68:f3:6e:cd:e0:6e:35:
         e5:ae:d9:17:fe:de:a8:bd:c9:69:2b:95:19:1d:04:6c:4e:89:
         f6:4c:12:2c:61:a5:8f:2b:74:ea:b9:d9:9d:6e:38:f9:cd:38:
         b1:5b:76:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:10:12 2025 by rpki-client