Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/59a8d12c-2901-3f55-9792-58f7dfe71557.roa
File:                     59a8d12c-2901-3f55-9792-58f7dfe71557.roa (raw, json)
Hash identifier:          TJFSEYkBF7OxQlwd+8dd1uhRcg9sTXW2XpoJGqWyDVw=
Subject key identifier:   AD:D4:0F:95:E3:89:8D:5B:B9:A2:55:78:62:AD:FE:B1:30:94:2D:A4
Certificate issuer:       /CN=6b0ae85a-8757-4947-940f-aa533d9ca479
Certificate serial:       010D0C9F43285848090FBBAB4546C823E71122F0
Authority key identifier: 22:CD:8F:E8:89:5A:3D:75:95:61:F8:C2:D0:D4:6A:F1:BB:D8:8D:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/59a8d12c-2901-3f55-9792-58f7dfe71557.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     14618
IP address blocks:        155.72.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/6b0ae85a-8757-4947-940f-aa533d9ca479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/6b0ae85a-8757-4947-940f-aa533d9ca479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:bb:ab:45:46:c8:23:e7:11:22:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b0ae85a-8757-4947-940f-aa533d9ca479
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=6ae248ec-5c25-4654-af8c-965457e54bb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fb:56:4b:a2:25:6b:77:a4:97:57:99:83:c8:
                    d9:26:0e:89:6e:e7:8f:a7:93:06:45:66:11:d2:1c:
                    b3:61:eb:25:95:27:84:a9:2e:d1:0e:9d:f2:12:7b:
                    dd:40:a8:86:e7:9a:38:75:ec:e0:e6:b2:09:a6:4c:
                    69:31:78:7b:8c:6c:e8:0d:66:a6:cb:a9:39:c2:02:
                    85:e3:6a:73:dd:eb:e1:63:dd:9d:6a:31:e8:b0:98:
                    f1:04:ea:d0:e6:de:66:a9:fb:68:65:2a:23:db:2e:
                    6d:bc:d4:a4:dc:80:7a:b3:c4:ca:13:c7:c1:f3:e2:
                    32:04:52:33:46:e7:0e:0a:69:66:b1:03:a3:ae:3a:
                    00:93:41:34:33:e5:e7:4a:ea:6f:55:74:10:46:c9:
                    93:98:b8:66:83:69:3a:28:dd:b5:34:da:c0:b1:46:
                    e1:e1:0c:ba:38:6d:a2:50:76:e5:68:10:a8:7f:d3:
                    ea:95:3b:30:01:90:03:d0:d2:95:66:5e:03:08:af:
                    dc:e6:54:e9:e2:18:3b:e8:35:b4:65:05:4e:ce:c2:
                    56:4d:8c:31:95:16:e9:4b:56:60:9b:dc:f8:31:ce:
                    28:a2:ca:fc:6d:c0:fb:b1:c1:6a:cc:a2:87:f5:8d:
                    00:f8:57:da:da:ec:fd:dc:80:83:07:8b:b7:e4:a8:
                    2f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D4:0F:95:E3:89:8D:5B:B9:A2:55:78:62:AD:FE:B1:30:94:2D:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/59a8d12c-2901-3f55-9792-58f7dfe71557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/6b0ae85a-8757-4947-940f-aa533d9ca479.crl

            X509v3 Authority Key Identifier:
                keyid:22:CD:8F:E8:89:5A:3D:75:95:61:F8:C2:D0:D4:6A:F1:BB:D8:8D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.72.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:d6:a4:e3:dc:0a:f7:70:d9:d3:91:4a:a3:58:1b:41:04:36:
         da:47:2b:e2:62:4b:54:bd:37:43:02:80:36:b4:1b:93:a1:b1:
         b5:1d:7e:4d:49:fb:f8:5c:9e:f5:e8:41:43:2d:61:17:f9:8f:
         a0:a8:9a:4a:42:dd:1e:51:5a:cc:39:31:8b:38:da:68:89:e9:
         95:25:d0:15:ed:00:bc:6b:f1:64:a0:f6:2a:78:8b:f2:bd:b0:
         7a:15:81:6f:be:e3:38:71:60:9f:c3:1a:8f:77:14:7a:3b:e8:
         e2:47:23:e2:02:17:c3:89:a7:67:93:e1:59:63:8b:58:7f:2e:
         2d:b9:9f:18:14:15:27:07:ad:cb:93:79:1f:85:63:40:d4:2d:
         6f:6d:49:2c:f1:8d:8b:fe:83:cd:d7:36:17:8d:4b:7c:ec:11:
         46:7a:a0:a8:19:9e:01:f0:b6:a9:9b:04:96:d6:8e:97:21:9d:
         1c:df:d5:49:0e:80:e7:e4:c4:2b:fd:48:44:6f:4f:96:9f:df:
         9d:c0:b0:43:24:51:48:80:d9:dd:5d:8b:62:00:fb:fb:56:83:
         c7:c7:be:49:cb:1c:c7:39:6b:95:a7:92:3c:dd:00:d9:ec:c0:
         db:bc:61:d3:1f:61:bc:23:9c:56:37:65:12:e4:7a:29:37:2f:
         77:47:d9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:23 2025 by rpki-client