Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c96c282b-8c51-3548-83bc-00ad7dc2bb40.roa
File:                     c96c282b-8c51-3548-83bc-00ad7dc2bb40.roa (raw, json)
Hash identifier:          Z7JlXRcjxszLRCoaZl2SLqqTTDnet9Z+S2k2ssQgRiM=
Subject key identifier:   D3:EE:32:21:50:F2:37:C5:4F:BD:5C:AF:3E:1D:56:BB:77:F2:7E:60
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584835BAA21F8417804E31A62B60
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c96c282b-8c51-3548-83bc-00ad7dc2bb40.roa
Signing time:             Sun 15 Dec 2024 02:00:39 +0000
ROA not before:           Sun 15 Dec 2024 02:00:39 +0000
ROA not after:            Sat 15 Mar 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        204.195.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:35:ba:a2:1f:84:17:80:4e:31:a6:2b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 15 02:00:39 2024 GMT
            Not After : Mar 15 01:00:39 2025 GMT
        Subject: CN=4709887f-e3b6-4143-8a3a-552573cbcb40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1f:87:ba:10:c9:a1:6e:55:68:91:bd:ad:f5:
                    5d:0a:c5:07:2d:e7:82:29:ec:25:39:c9:88:a0:bb:
                    30:a1:1c:b0:c8:f6:75:4d:e3:23:51:b9:7f:cd:88:
                    8c:39:fa:17:43:bf:10:40:25:25:43:d1:c6:38:d6:
                    5c:d6:8a:fd:1e:82:65:b8:40:ea:b4:87:78:5d:a4:
                    97:39:d6:fb:78:28:c2:4f:43:b4:96:82:1d:e0:00:
                    3f:54:a7:42:c3:b0:c9:4b:32:fa:5c:26:22:8f:ce:
                    a3:f1:12:e9:8b:2d:38:aa:5d:b3:52:10:0e:98:dc:
                    d4:cb:43:2e:f9:0c:ed:5e:85:d4:a9:fa:6e:76:12:
                    aa:b7:85:ac:78:59:8f:c2:ae:9b:5b:4f:29:85:6a:
                    8a:f8:f8:eb:fd:59:64:5e:74:80:3c:fb:3c:fe:36:
                    63:32:f6:38:6d:af:81:4a:1f:f1:07:9b:e5:69:0b:
                    c1:0b:4e:ea:72:50:a8:79:b6:b1:40:90:8a:97:d9:
                    d7:5c:27:2d:36:14:77:56:3b:d6:dc:22:1a:43:7e:
                    0f:2d:41:17:65:59:4d:36:04:6b:ce:95:6b:9a:87:
                    56:23:5c:90:b3:9c:df:e9:b3:04:92:0f:9f:23:69:
                    af:dc:97:cc:91:08:33:81:02:97:1e:ef:7a:c7:d4:
                    87:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:EE:32:21:50:F2:37:C5:4F:BD:5C:AF:3E:1D:56:BB:77:F2:7E:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c96c282b-8c51-3548-83bc-00ad7dc2bb40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:02:06:51:f3:34:1f:93:ac:36:dd:4f:83:54:05:5d:28:9f:
         b6:9a:21:70:9d:be:85:96:d4:22:b6:7b:91:f5:cf:97:49:bb:
         07:9f:fd:f6:5f:83:dd:fd:de:ec:99:c8:5e:c6:b8:c3:4b:c8:
         d8:a6:58:b9:aa:9d:d6:15:36:6a:15:16:b6:3c:6d:d9:fb:76:
         9a:d2:cf:89:3b:b6:33:dd:3a:aa:f8:93:fe:1e:45:6b:c5:d9:
         ad:de:05:3c:9b:ff:eb:38:9f:e1:3e:fb:1c:b9:68:32:ff:9e:
         81:69:4d:ad:9a:fd:dc:aa:1f:35:4d:68:3b:dd:cf:45:95:83:
         6d:d9:49:b2:96:ed:37:da:9a:7e:76:19:cb:cd:d7:09:02:5e:
         8f:3a:d3:00:2d:08:71:fa:33:9f:04:b0:3a:b5:12:61:ea:5e:
         d4:26:83:94:14:9f:4c:af:4e:0a:7c:f6:c6:4b:f3:db:41:03:
         86:36:ad:5e:af:65:34:ba:79:20:7a:72:8e:00:80:10:c9:de:
         f9:af:18:25:88:1a:09:6a:f2:ac:11:99:6f:67:66:62:79:72:
         16:9e:62:75:7f:99:e9:6e:3b:ba:d3:13:8e:5d:d0:97:ef:66:
         62:04:32:23:64:73:ad:fd:25:ad:e7:6f:1f:00:dc:42:35:61:
         bf:86:ca:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:25 2025 by rpki-client