Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/793e03f9-65aa-4b5c-975f-f3bfc8509008/a9800316-b985-301b-a711-7bf1091c6351.roa
File:                     a9800316-b985-301b-a711-7bf1091c6351.roa (raw, json)
Hash identifier:          uR9PGS5kfJVe18NliuF/vtHhFc7ig2rRnXeucRXM8is=
Subject key identifier:   3D:25:62:BF:49:B3:24:E7:D5:31:0C:43:41:3F:3A:79:9A:74:AD:63
Certificate issuer:       /CN=793e03f9-65aa-4b5c-975f-f3bfc8509008
Certificate serial:       010D0C9F43285848C84B9E30FBB19C36C9BC1500
Authority key identifier: 87:4B:B1:D3:D6:67:35:F8:75:2B:36:3F:F8:BA:DD:34:61:B9:54:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/793e03f9-65aa-4b5c-975f-f3bfc8509008.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/793e03f9-65aa-4b5c-975f-f3bfc8509008/a9800316-b985-301b-a711-7bf1091c6351.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     395987
IP address blocks:        192.108.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/793e03f9-65aa-4b5c-975f-f3bfc8509008/793e03f9-65aa-4b5c-975f-f3bfc8509008.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/793e03f9-65aa-4b5c-975f-f3bfc8509008/793e03f9-65aa-4b5c-975f-f3bfc8509008.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/793e03f9-65aa-4b5c-975f-f3bfc8509008.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:9e:30:fb:b1:9c:36:c9:bc:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793e03f9-65aa-4b5c-975f-f3bfc8509008
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=de2dfe08-936d-459f-b5e8-f702564725b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b7:d4:c7:b5:dc:32:c2:cf:a2:fc:cd:b2:6f:
                    eb:f1:7c:72:fa:12:ac:21:23:62:f9:f1:6d:78:58:
                    1b:fc:76:b3:2a:7b:43:30:c3:cf:22:7f:33:f4:5a:
                    79:9c:4b:db:0b:52:ff:b9:76:ea:bb:e6:34:a9:78:
                    fc:4b:38:6c:93:d7:07:53:cb:0e:b6:4c:6c:fe:27:
                    49:6f:8b:ac:6b:b9:e9:c5:48:d0:6e:b7:44:6f:18:
                    31:60:74:81:26:12:49:07:4d:d5:03:65:86:00:d8:
                    99:14:81:82:9f:14:83:91:22:c9:3e:c7:0c:65:2b:
                    f7:e2:e3:69:33:c8:07:06:26:89:3c:7e:de:51:57:
                    35:1b:bf:99:b8:2f:07:a5:05:2d:ab:3f:71:16:72:
                    6a:9c:0c:51:a4:15:e6:50:17:07:4c:0a:69:3a:37:
                    3a:d8:7d:08:b4:bc:de:58:20:d2:09:22:07:a7:96:
                    ce:10:0e:03:e0:04:d3:2e:4d:00:98:39:fb:f7:c3:
                    69:fc:b2:30:e1:ec:c2:96:72:42:45:7c:52:e6:25:
                    a4:57:f4:d4:4d:65:5d:77:d9:fb:02:6b:60:c5:a0:
                    dd:e7:1a:2d:c8:fd:47:31:bf:f8:4b:80:29:9a:ee:
                    ff:f0:e5:79:9d:2a:4a:bf:71:14:4e:a2:4e:0d:bb:
                    ac:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:25:62:BF:49:B3:24:E7:D5:31:0C:43:41:3F:3A:79:9A:74:AD:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/793e03f9-65aa-4b5c-975f-f3bfc8509008/a9800316-b985-301b-a711-7bf1091c6351.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/793e03f9-65aa-4b5c-975f-f3bfc8509008/793e03f9-65aa-4b5c-975f-f3bfc8509008.crl

            X509v3 Authority Key Identifier:
                keyid:87:4B:B1:D3:D6:67:35:F8:75:2B:36:3F:F8:BA:DD:34:61:B9:54:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/793e03f9-65aa-4b5c-975f-f3bfc8509008.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.108.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:43:c6:df:1c:95:75:e8:97:66:c0:9d:67:b6:e3:8a:25:4d:
         db:ac:52:ed:d0:de:4f:9f:f7:f2:62:ea:11:70:60:de:60:fd:
         8b:78:f2:af:18:45:a2:bb:44:62:50:c7:61:76:15:75:0f:2a:
         3f:ce:45:8d:9e:80:b9:9a:f7:b0:76:67:c6:05:f2:0f:90:be:
         5c:36:18:93:88:b9:41:32:74:4f:32:d9:62:28:40:cd:12:22:
         22:36:fc:60:99:6f:f7:0a:d8:2d:df:2b:54:1c:cf:4c:24:5e:
         27:8f:2e:b4:ad:14:7b:01:ab:17:23:50:0a:d7:7c:00:ab:45:
         6c:50:c0:98:d3:e6:05:53:2e:25:31:05:63:ee:49:52:0a:3b:
         83:e7:38:4a:50:2c:ba:c3:e4:1a:29:c2:85:a3:af:dc:6b:ed:
         5d:df:e1:eb:54:96:b5:9d:63:ba:fe:ae:2c:97:bb:2a:ea:6e:
         ed:eb:2c:fc:87:e8:e8:f3:2a:35:c9:83:bc:d3:b9:ab:75:2d:
         46:f5:d2:ee:24:21:95:31:33:ab:e9:d8:7b:db:8e:28:0f:03:
         2d:d2:00:17:24:a4:28:0e:0e:97:11:02:d7:a6:d1:fa:77:8e:
         ab:d1:8c:52:f3:66:fe:cf:b3:68:a5:4e:14:48:bd:e8:1b:ac:
         a1:0d:13:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:03 2025 by rpki-client