Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3334e644-b47c-3b35-94f4-957f9e29fd5c.roa
File:                     3334e644-b47c-3b35-94f4-957f9e29fd5c.roa (raw, json)
Hash identifier:          egiizC7AMQ6YoICe7mYfzfh58h+r2ZD8wBnnoz/F93o=
Subject key identifier:   06:85:0C:2A:EC:31:35:91:B7:E2:43:55:EF:56:A7:A5:7A:AD:C0:6A
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584830253D6C4187AE5EA0D8E3C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3334e644-b47c-3b35-94f4-957f9e29fd5c.roa
Signing time:             Fri 13 Dec 2024 02:00:39 +0000
ROA not before:           Fri 13 Dec 2024 02:00:39 +0000
ROA not after:            Thu 13 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        131.125.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:30:25:3d:6c:41:87:ae:5e:a0:d8:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 13 02:00:39 2024 GMT
            Not After : Mar 13 01:00:39 2025 GMT
        Subject: CN=9579fc48-1f7c-4da4-ac62-3018fd928abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:93:56:72:c8:86:0a:7d:69:2a:0c:35:0c:cb:
                    d7:9b:a2:df:d6:d6:df:c8:58:56:b1:c9:3c:15:6e:
                    74:19:a5:1c:b0:f1:a8:21:11:2f:57:f1:af:a8:37:
                    ba:d8:d1:3d:fa:b2:ae:32:ca:64:ca:ca:ab:20:9a:
                    75:9c:bb:95:21:86:b0:d2:24:bf:3f:a3:4d:3f:ca:
                    1a:3d:95:29:b4:77:16:13:ce:a8:96:0e:17:84:d8:
                    47:9a:71:e0:03:13:66:04:18:3b:e3:98:39:93:32:
                    91:52:71:3b:bb:25:7e:68:8d:d9:61:c9:0c:9c:7f:
                    54:a1:67:1e:09:a2:4f:50:cb:09:7c:d5:a1:b8:0b:
                    7a:2b:4c:c1:cf:3b:f5:4c:8c:71:82:54:bd:bd:f8:
                    9f:e6:3c:79:b7:aa:57:cb:2a:ef:fe:ab:57:6f:06:
                    76:e5:df:a3:cc:1e:64:d5:ba:e9:86:4f:60:e4:a4:
                    15:9c:28:5b:10:d9:32:37:fc:c0:72:36:c0:de:44:
                    b6:eb:c6:90:1e:e8:06:a9:39:ea:a1:0d:5a:fc:6c:
                    07:d9:7d:0e:91:db:d5:d5:79:a0:38:91:5c:4a:f0:
                    a3:f9:8f:c2:0b:66:47:f2:ad:6c:d1:63:0f:02:f1:
                    94:ad:97:09:80:b6:f0:ee:53:e8:21:3b:0a:84:6d:
                    a3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:85:0C:2A:EC:31:35:91:B7:E2:43:55:EF:56:A7:A5:7A:AD:C0:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3334e644-b47c-3b35-94f4-957f9e29fd5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.125.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:de:cf:b7:26:57:9d:6e:3a:3f:af:ca:4a:64:81:8b:84:d4:
         02:44:dc:b6:dd:b1:54:79:6e:d5:b3:17:91:a0:c0:36:d8:45:
         97:68:7f:66:f8:71:b4:b3:a7:05:e5:64:64:66:bb:fe:71:c8:
         f5:44:cc:e8:c6:9f:80:9b:41:1e:40:3d:ff:9e:71:eb:ea:77:
         55:b5:d1:70:7d:50:55:8e:a1:27:15:a2:e7:78:89:8f:f1:bb:
         ee:2f:8a:9e:76:1f:88:10:73:03:bc:30:39:e4:b9:08:aa:a9:
         bb:b4:cc:ef:39:a9:43:35:a2:4c:36:1d:85:b9:b1:95:9a:9c:
         76:6b:a3:21:ab:90:ce:cd:76:e7:10:f3:f0:dd:e4:c8:96:3f:
         07:51:08:d0:e2:c8:7e:1f:78:c5:f1:4c:b8:85:87:26:c3:c6:
         2e:7a:45:e9:b2:20:31:81:72:58:fa:7a:2d:07:d8:94:a4:5f:
         5e:2e:ec:5f:36:97:24:38:65:53:29:87:70:62:06:2b:57:e7:
         9c:c1:bc:af:f6:65:13:ee:16:2e:ee:48:0e:bf:2b:98:75:27:
         45:b7:47:ec:ca:ee:49:27:e2:49:8f:57:41:12:79:b8:25:c8:
         19:25:25:16:a7:9f:ed:38:5f:a7:e8:0d:32:80:a6:8f:ad:22:
         5a:c3:11:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:32:43 2025 by rpki-client