Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d0a9369b-8352-3ace-bb34-43ef1f2cbd10.roa
File:                     d0a9369b-8352-3ace-bb34-43ef1f2cbd10.roa (raw, json)
Hash identifier:          jC4HZpksdWH46AQMkwJ/b3QaipW9i/VFGDyKPsT92XA=
Subject key identifier:   B2:E7:0B:4E:CE:63:2B:5A:81:5D:2E:57:8A:79:3D:E0:A0:60:55:D1
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584830253D1F46BFBB3653A1F780
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d0a9369b-8352-3ace-bb34-43ef1f2cbd10.roa
Signing time:             Fri 13 Dec 2024 02:00:39 +0000
ROA not before:           Fri 13 Dec 2024 02:00:39 +0000
ROA not after:            Thu 13 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        131.125.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:30:25:3d:1f:46:bf:bb:36:53:a1:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 13 02:00:39 2024 GMT
            Not After : Mar 13 01:00:39 2025 GMT
        Subject: CN=e4b2feb4-e139-4154-9f8e-16febdf8c692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:de:c6:3e:1a:ff:a9:15:14:75:55:73:7c:ed:
                    ae:e5:87:33:c8:01:6b:b3:20:64:8d:10:68:23:d5:
                    96:6f:8f:ef:57:7b:fc:11:c0:d3:fd:49:56:f8:1d:
                    e2:fa:6a:23:98:bc:b8:19:d2:0e:16:3b:ca:58:ee:
                    20:9f:9b:a4:82:95:0c:5e:8d:c6:25:ba:34:0f:f4:
                    1d:95:c0:95:15:55:32:2d:ed:11:ce:0a:72:7e:72:
                    a4:7f:4a:ad:21:00:b2:0d:fd:78:1a:c8:f3:33:7b:
                    1c:7e:62:a4:86:8e:d4:5d:ee:1a:1c:65:fc:d7:67:
                    5d:c4:5d:99:96:d8:75:41:03:89:be:f0:62:43:58:
                    3c:76:73:22:ce:73:8b:ec:6b:21:75:98:75:7d:03:
                    64:cb:e5:b5:9a:58:e2:98:1c:8b:98:c4:04:81:7d:
                    3e:e0:43:7b:e6:fb:b3:17:c8:da:41:99:25:07:76:
                    0f:be:2a:90:a4:54:31:95:a2:67:74:2f:33:2f:84:
                    0c:af:97:5e:10:32:32:0c:78:a1:2c:ed:f3:ea:58:
                    b1:cb:60:fb:fb:8e:f2:9e:fc:ca:ee:ba:3b:f5:04:
                    e9:68:69:30:9b:d5:85:fc:08:e2:5a:93:54:bd:6b:
                    26:1c:ab:a2:5d:cd:73:bc:4a:1c:15:43:1d:1d:ee:
                    54:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E7:0B:4E:CE:63:2B:5A:81:5D:2E:57:8A:79:3D:E0:A0:60:55:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d0a9369b-8352-3ace-bb34-43ef1f2cbd10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.125.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:8d:17:49:c5:69:19:05:dd:55:bc:03:fa:c3:f1:41:ba:cd:
         31:7a:51:5c:4f:b1:d1:b0:b6:7b:e1:fb:ec:fd:c5:06:97:58:
         0c:1c:22:1f:f2:d4:e4:fd:5d:59:f9:f8:1f:71:47:8d:a2:6a:
         4d:7e:ce:e5:f7:1c:41:ca:0f:0c:6f:9a:37:dd:40:cc:93:ee:
         8e:a5:b0:98:f5:a8:70:9c:ef:71:ff:52:94:33:8b:c1:06:b4:
         b6:1d:84:bc:b4:60:1b:ab:91:6d:2c:28:28:cc:63:37:6e:94:
         81:4b:2a:f3:e9:1f:7f:be:f1:37:5a:ad:a1:15:c0:c2:7f:01:
         ef:ed:ce:e4:1a:b1:9a:dc:49:58:0a:a0:8c:29:74:6f:cf:77:
         d3:07:5c:ee:a9:96:04:0c:e6:bc:24:66:eb:c6:a6:6d:35:a6:
         94:7d:ea:66:e9:ac:78:49:bd:4b:b6:19:5f:1e:24:8c:8d:11:
         04:1b:48:ea:03:b3:66:d5:06:b5:ca:3d:6a:ce:dc:d3:e7:84:
         dc:bb:37:8a:71:2f:04:04:97:d2:e5:17:bb:36:e1:61:6c:59:
         42:1a:b0:35:10:f6:20:23:04:0d:05:b9:80:eb:7a:6c:16:3c:
         19:a1:0f:ef:ca:39:ce:d7:4b:2f:59:71:f4:2f:9a:5f:52:3c:
         b5:21:11:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:29 2025 by rpki-client