Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d76809c9-dc78-3d60-810a-aff46abe67b7.roa
File:                     d76809c9-dc78-3d60-810a-aff46abe67b7.roa (raw, json)
Hash identifier:          9+mV8zxbYaAHt8NQXIov6OPDKBBMadO2Uemr2FEjBBY=
Subject key identifier:   6D:DD:7A:0E:F2:8F:04:EE:12:28:8A:09:C3:15:7E:A8:D5:19:5E:D1
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584835BAA2A3CA7E4BA2CA9412A0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d76809c9-dc78-3d60-810a-aff46abe67b7.roa
Signing time:             Sun 15 Dec 2024 02:00:39 +0000
ROA not before:           Sun 15 Dec 2024 02:00:39 +0000
ROA not after:            Sat 15 Mar 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        204.195.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:35:ba:a2:a3:ca:7e:4b:a2:ca:94:12:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 15 02:00:39 2024 GMT
            Not After : Mar 15 01:00:39 2025 GMT
        Subject: CN=25a70e72-2a8c-43f5-ba1e-0d44035c0e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:68:2f:ed:ac:c2:39:9b:89:68:d0:24:db:66:
                    75:63:fc:e2:85:78:60:ee:5b:94:62:33:12:a7:35:
                    f0:f5:3e:29:0c:f5:43:c5:d3:32:65:10:46:20:82:
                    15:4d:0b:e3:69:d3:60:ce:46:76:f1:7d:49:0d:ff:
                    fc:0e:8a:14:83:4c:2d:c9:c1:57:b1:89:a6:7a:a0:
                    38:93:35:41:1d:29:68:f2:93:f2:01:87:5b:37:c5:
                    3b:91:f6:3f:00:02:d6:0e:18:55:28:4b:fa:8a:ca:
                    f0:b5:80:0e:bc:f3:eb:7d:59:4f:42:de:77:ac:15:
                    b1:39:86:a1:a1:e5:65:68:e2:69:0f:05:19:07:10:
                    32:af:84:44:a7:bb:a8:b1:e0:27:c5:01:18:47:2c:
                    5d:d8:15:65:e9:6b:50:a1:d4:fd:fe:77:9f:4c:ae:
                    3e:18:6a:de:36:9b:d8:9d:b7:61:66:10:2b:74:14:
                    2b:d2:d4:9d:0d:bd:bd:26:e8:87:10:31:3f:03:c5:
                    6c:8c:78:c4:ff:0c:49:69:e3:81:68:50:0c:36:56:
                    9b:27:a9:ce:fb:94:b2:71:32:27:0f:46:f2:05:cc:
                    f7:2f:05:b9:a8:31:13:ff:45:b6:7a:a2:3a:db:30:
                    81:1f:3e:16:2b:27:ab:4e:f9:85:01:b2:55:51:bc:
                    d7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:DD:7A:0E:F2:8F:04:EE:12:28:8A:09:C3:15:7E:A8:D5:19:5E:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d76809c9-dc78-3d60-810a-aff46abe67b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:fd:16:9f:a9:45:02:6d:cf:a8:d5:6a:6e:09:b2:cf:60:79:
         9b:9e:1b:d5:9f:4a:ff:eb:b1:22:09:b7:84:ac:79:c9:f5:7c:
         c9:72:28:b2:21:53:8e:f0:95:82:42:4d:c0:dc:1a:b4:10:3d:
         fe:7f:db:8d:27:09:b9:54:b9:22:dd:d3:1e:2d:b5:80:14:52:
         37:ee:85:0c:4a:f0:72:ab:b3:8d:45:ce:a9:9f:b3:6c:a5:6d:
         22:bf:58:2c:aa:62:5f:a4:8b:aa:97:59:33:c2:71:68:38:7d:
         ca:9c:12:90:f1:74:05:73:f4:0c:eb:51:4d:70:12:e6:34:aa:
         53:52:ff:65:65:5b:78:34:fb:3d:f4:e3:4a:88:ed:b5:0a:7f:
         48:dc:2d:3c:83:2a:a5:9a:88:aa:16:ce:63:22:d5:bb:6d:b9:
         fc:bc:bc:60:4f:42:9e:be:0c:18:02:1c:b1:32:b9:29:e5:b3:
         d4:57:4b:0f:98:17:1e:48:d8:ce:58:94:ef:d5:75:db:14:00:
         25:88:75:2d:59:a5:41:39:68:eb:72:0a:ff:7c:f7:4d:6d:7c:
         f0:e8:3b:3b:a6:43:ec:ce:81:fe:af:ba:88:5c:72:ce:8f:9f:
         e7:dd:c3:14:f6:20:54:20:42:52:02:47:b9:1b:b7:b0:0d:c4:
         b3:08:87:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:31:11 2025 by rpki-client