Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/757f9f4f-7bcb-4918-ad77-cb1331456bac/8c8e0628-57af-3f92-9289-26932712e04a.roa
File:                     8c8e0628-57af-3f92-9289-26932712e04a.roa (raw, json)
Hash identifier:          LQmt0nsJirSgEe0l+qTZMMe6rQ5XAadibMOUXKm2iBg=
Subject key identifier:   D0:F2:72:F6:26:E0:13:D1:1A:85:85:BD:A7:0D:CE:76:46:4F:5A:DF
Certificate issuer:       /CN=757f9f4f-7bcb-4918-ad77-cb1331456bac
Certificate serial:       010D0C9F432858484945737124CB15EB634955A0
Authority key identifier: DA:00:B6:5F:AC:3F:EF:68:BA:57:85:BF:96:B4:65:42:CE:26:54:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/757f9f4f-7bcb-4918-ad77-cb1331456bac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/757f9f4f-7bcb-4918-ad77-cb1331456bac/8c8e0628-57af-3f92-9289-26932712e04a.roa
Signing time:             Sun 22 Dec 2024 02:00:39 +0000
ROA not before:           Sun 22 Dec 2024 02:00:39 +0000
ROA not after:            Sat 22 Mar 2025 01:00:39 +0000
asID:                     13953
IP address blocks:        108.59.144.0/20 maxlen: 20
                          2620:103:4000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/757f9f4f-7bcb-4918-ad77-cb1331456bac/757f9f4f-7bcb-4918-ad77-cb1331456bac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/757f9f4f-7bcb-4918-ad77-cb1331456bac/757f9f4f-7bcb-4918-ad77-cb1331456bac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/757f9f4f-7bcb-4918-ad77-cb1331456bac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:49:45:73:71:24:cb:15:eb:63:49:55:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=757f9f4f-7bcb-4918-ad77-cb1331456bac
        Validity
            Not Before: Dec 22 02:00:39 2024 GMT
            Not After : Mar 22 01:00:39 2025 GMT
        Subject: CN=b3c820b1-e44b-4057-8c70-4a4b319a5197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8e:f0:ef:e2:1a:2d:c0:58:eb:9c:b1:40:ac:
                    39:2d:c8:1a:b7:8c:8a:d2:ba:a5:64:ed:67:42:44:
                    a0:5b:a5:84:9d:b6:bb:75:48:74:49:33:af:0e:8c:
                    b0:be:44:59:78:46:ed:f7:9c:9e:58:1a:6f:79:ad:
                    76:5f:a5:41:d6:6f:ba:7c:d3:1d:e6:dc:89:90:44:
                    41:33:ee:9b:ba:4c:83:0e:54:b2:cc:62:69:c9:12:
                    f7:cb:7f:fc:55:c0:de:9e:cd:46:a8:3c:bf:c4:f2:
                    5c:dd:6e:56:a1:e9:1d:b5:01:df:26:35:3c:c3:17:
                    49:ca:8d:c7:1d:b7:6f:c5:e6:fd:c2:ba:0f:ca:c3:
                    88:73:3c:2a:ed:29:7e:af:dc:b9:d7:2c:2a:0d:12:
                    35:58:36:10:fa:bb:2c:e3:5a:5f:2f:e6:76:0e:74:
                    ec:06:a6:c4:8f:dc:1f:65:ae:36:16:06:31:c0:18:
                    84:cc:be:03:af:ea:b6:b1:a3:18:ba:ca:8a:89:d9:
                    81:aa:05:ac:a8:79:6d:35:1a:e8:bd:07:44:7c:14:
                    34:98:f9:53:74:2e:c7:af:5a:3f:9d:37:3d:46:37:
                    09:0d:86:37:d0:0c:5a:87:27:a7:04:38:27:52:54:
                    9e:57:e6:14:f1:20:ac:51:7d:44:6e:db:4a:94:fb:
                    d9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F2:72:F6:26:E0:13:D1:1A:85:85:BD:A7:0D:CE:76:46:4F:5A:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/757f9f4f-7bcb-4918-ad77-cb1331456bac/8c8e0628-57af-3f92-9289-26932712e04a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/757f9f4f-7bcb-4918-ad77-cb1331456bac/757f9f4f-7bcb-4918-ad77-cb1331456bac.crl

            X509v3 Authority Key Identifier:
                keyid:DA:00:B6:5F:AC:3F:EF:68:BA:57:85:BF:96:B4:65:42:CE:26:54:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/757f9f4f-7bcb-4918-ad77-cb1331456bac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.59.144.0/20
                IPv6:
                  2620:103:4000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:35:b9:14:36:12:be:bd:46:4e:e1:95:dc:a9:79:a3:0e:de:
         24:39:18:3b:d5:ce:90:fb:67:5a:4d:61:33:e2:43:2e:2c:86:
         12:9f:f5:fd:f4:66:77:8b:85:bb:2b:a5:3a:10:15:16:f4:5c:
         6d:6f:07:af:8a:bd:9b:47:87:a7:c5:70:ad:71:0a:81:2d:58:
         77:70:87:51:e0:21:e4:ab:da:9f:fc:59:01:e4:68:d9:2a:ed:
         f2:80:62:35:3b:d2:9f:9f:9e:4f:17:e9:a9:e6:bf:a4:bf:1e:
         bc:ea:32:85:b6:4f:90:5e:e6:dc:79:81:df:9f:20:85:8e:5a:
         a3:69:5f:3c:e2:e1:d7:05:ba:35:f3:66:2d:25:d0:50:d7:11:
         2b:15:67:5d:f3:b5:2c:01:fc:a7:ef:e4:f6:bf:ea:fa:f6:68:
         91:ca:e9:25:6b:4c:26:6c:2f:30:8f:cf:81:9a:5d:74:06:b1:
         9e:fa:29:93:af:0a:ce:c6:38:ed:2f:b6:3f:e5:00:ac:6a:44:
         0c:26:66:c3:cd:e3:cc:28:2b:84:b9:1b:26:6b:ef:8f:4e:f5:
         d0:e7:e9:a5:51:f5:bf:a0:ce:1a:fc:2d:b3:38:5f:14:b8:52:
         91:7d:28:71:6f:0a:4d:70:ed:b7:f4:af:d2:49:52:9e:63:33:
         06:91:01:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:30 2025 by rpki-client