Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/48183b0d-014a-3b40-903d-63977be0fd76.roa
File:                     48183b0d-014a-3b40-903d-63977be0fd76.roa (raw, json)
Hash identifier:          rJQdPyGxXE9+jhRa4tZ0GcbiX3EJj0M8e2iGwHU8pr8=
Subject key identifier:   C0:DF:B2:0F:8A:5E:0B:71:CA:84:22:F8:93:17:D6:5F:A8:85:4F:42
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F432858489770906953617A23D6480C00
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/48183b0d-014a-3b40-903d-63977be0fd76.roa
Signing time:             Sun 19 Jan 2025 02:00:39 +0000
ROA not before:           Sun 19 Jan 2025 02:00:39 +0000
ROA not after:            Sat 19 Apr 2025 01:00:39 +0000
asID:                     13768
IP address blocks:        209.15.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:97:70:90:69:53:61:7a:23:d6:48:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Jan 19 02:00:39 2025 GMT
            Not After : Apr 19 01:00:39 2025 GMT
        Subject: CN=11bbbe89-8ad9-4509-be00-7f836ee85682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:af:59:e1:9a:52:59:cd:48:93:96:b4:51:a9:
                    30:c7:3f:b4:06:b3:40:8d:05:93:aa:b2:a3:42:55:
                    1c:7e:b1:1e:d0:bd:06:ca:c0:69:7d:72:ba:79:39:
                    42:67:a3:7a:86:d7:81:ab:72:8a:3f:da:33:40:9b:
                    4b:44:93:ff:ae:b2:4e:95:ed:96:24:04:f4:c7:3e:
                    a2:1b:53:5a:e5:9d:eb:aa:4c:eb:92:ba:c2:76:cb:
                    8f:86:01:04:40:fc:b2:9a:f1:d6:7c:6a:19:79:08:
                    a9:59:4d:9a:d4:e1:1c:59:20:7a:fc:a5:60:d8:bc:
                    87:53:6a:31:4a:74:76:84:8e:10:d5:6d:10:73:c9:
                    17:eb:1a:0c:03:3a:f5:31:92:a8:30:74:b9:a5:6a:
                    cf:f6:82:90:2a:55:fd:97:8c:fe:a4:23:dc:21:7e:
                    e3:bc:46:68:32:72:77:3b:df:07:b5:9b:79:a0:1e:
                    00:04:e2:59:8c:80:21:1c:e4:1c:e5:f3:52:12:36:
                    3d:50:e0:0b:f3:9e:00:12:09:3b:12:e1:20:c9:f6:
                    90:9c:61:c5:e5:03:b1:00:92:ae:c2:86:45:aa:d8:
                    7e:b4:4f:7e:02:e5:31:bb:cb:1f:51:8c:e2:30:4a:
                    32:1e:89:36:1c:89:e1:5d:6c:27:c3:2b:e6:f1:8a:
                    77:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DF:B2:0F:8A:5E:0B:71:CA:84:22:F8:93:17:D6:5F:A8:85:4F:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/48183b0d-014a-3b40-903d-63977be0fd76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.15.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:c9:c0:31:fc:a3:23:09:25:b9:c1:95:c1:2d:a7:ca:bd:49:
         6e:19:28:34:89:24:15:2a:39:9e:a0:73:7e:74:89:8b:87:2e:
         a5:7b:a4:7f:d6:29:af:eb:69:6c:d9:ad:3f:63:03:7a:37:a8:
         3d:38:ba:af:9d:33:e2:80:8e:d6:85:86:6d:8b:b6:ca:62:2a:
         bc:77:a7:8e:25:bd:a1:2f:2f:20:ed:e5:1e:d1:55:5f:6a:1d:
         cb:44:9e:ec:5e:f0:95:6b:c3:40:ec:f2:3e:97:79:47:97:f2:
         4d:92:c8:37:4c:f2:55:24:c6:99:c0:02:29:85:19:c8:58:f5:
         32:d7:27:78:ae:c1:18:67:14:18:01:d0:b0:88:00:ff:0f:48:
         fe:f1:78:fd:78:13:38:1a:2d:fb:7c:aa:9d:c0:0d:e8:39:e5:
         7f:72:22:04:7e:d6:54:91:9a:39:9e:9b:9a:8e:70:ca:7e:72:
         b5:ed:d2:3e:9f:ef:0d:77:0a:f8:be:58:e9:f7:ed:8a:75:11:
         95:a8:24:05:aa:bb:05:e0:98:79:5a:6e:43:76:f2:17:72:d1:
         52:46:6c:24:ab:16:a3:9a:2f:8c:66:eb:52:5f:ad:b7:4d:50:
         c1:94:32:ec:f2:3f:08:92:db:f2:09:88:64:d5:ef:26:33:9f:
         c8:e8:66:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:43 2025 by rpki-client