Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/58e9a629-4feb-3da7-8c39-422b216ebda2.roa
File:                     58e9a629-4feb-3da7-8c39-422b216ebda2.roa (raw, json)
Hash identifier:          piNoiXX8WB+Z9rWf8sgPOvhHWii+yu8THP4AUzzhUno=
Subject key identifier:   59:F3:38:E1:AB:70:A3:D8:4F:59:B7:EA:83:B6:7A:87:D9:78:AD:2E
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848705AF79966CFE83971F393C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/58e9a629-4feb-3da7-8c39-422b216ebda2.roa
Signing time:             Sun 05 Jan 2025 02:00:39 +0000
ROA not before:           Sun 05 Jan 2025 02:00:39 +0000
ROA not after:            Sat 05 Apr 2025 01:00:39 +0000
asID:                     8881
IP address blocks:        168.93.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:70:5a:f7:99:66:cf:e8:39:71:f3:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan  5 02:00:39 2025 GMT
            Not After : Apr  5 01:00:39 2025 GMT
        Subject: CN=9a262560-5abc-4141-b2de-ee7918cc8855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9e:2b:ea:8f:ef:b4:a6:0e:5d:43:14:76:1c:
                    a4:84:d4:33:40:3a:0a:e8:ad:47:c5:db:b7:cf:89:
                    0f:ab:37:4d:4a:d7:b3:01:56:1d:44:7c:cf:0d:e6:
                    57:4c:54:df:56:d9:39:9f:17:75:6c:d1:41:02:4f:
                    5f:ca:bb:70:55:d2:91:d5:d2:5f:82:ea:95:b1:00:
                    65:52:9a:d3:3f:59:40:37:60:32:7f:79:99:db:8a:
                    77:37:95:8a:1e:e1:00:93:20:f2:9e:71:73:68:0e:
                    72:c7:9a:00:c3:3b:6d:dc:42:f9:d8:e6:aa:0f:84:
                    e7:5f:9a:74:ba:b0:83:25:f3:b3:3f:35:67:58:56:
                    84:72:77:dc:14:07:0d:e6:93:de:69:5f:15:ca:65:
                    cd:4f:08:b3:f8:de:82:86:39:18:4f:8a:5f:93:c3:
                    2c:5a:4a:25:b2:8e:98:67:2f:b0:aa:b8:32:79:3d:
                    8f:be:b2:e6:7a:9a:45:50:19:97:39:09:24:ed:07:
                    e4:a0:f4:43:0c:a7:36:f9:fa:9c:67:51:02:61:e9:
                    6e:a2:e8:46:6e:97:ad:a6:36:4f:a8:56:4a:55:23:
                    bd:2a:16:1d:17:01:d9:78:46:f8:7a:8f:7a:2f:7c:
                    8b:59:c6:cd:3f:3c:03:c5:ac:f4:61:50:a2:ad:2b:
                    ed:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F3:38:E1:AB:70:A3:D8:4F:59:B7:EA:83:B6:7A:87:D9:78:AD:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/58e9a629-4feb-3da7-8c39-422b216ebda2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:61:34:1b:5f:6b:20:fd:5f:79:4f:ce:25:cd:46:50:f4:99:
         2d:65:4a:93:66:e5:a3:d2:51:3e:54:f2:2e:79:ab:4b:f4:65:
         ef:c1:db:e7:db:5b:66:bc:e8:ce:6b:7b:36:5b:15:13:16:e6:
         c8:b5:fe:3b:71:4f:6b:1f:a0:4c:eb:b6:33:6e:25:2b:04:9d:
         ce:a0:94:b4:2f:1d:13:f0:16:fc:49:2a:49:40:ec:2c:c7:69:
         e5:bf:3f:dc:d1:c4:6c:82:43:fe:cf:7e:66:fc:cc:75:19:a8:
         26:cb:c2:49:a0:48:3c:0a:f9:4f:08:e9:51:d3:b3:d3:7b:4a:
         10:e2:9c:05:b4:fa:3c:58:e7:c8:87:3a:2c:28:77:14:74:d9:
         d7:db:75:01:50:15:de:0e:65:9f:cc:54:36:0c:93:87:12:67:
         d1:ca:27:31:27:4c:68:89:79:c3:c5:95:3f:b5:1d:94:c7:6e:
         73:40:0e:61:a2:81:c2:ec:ed:1a:0b:f8:41:6d:ca:8f:3e:0e:
         c2:15:3c:c9:63:8e:b6:7b:df:a2:62:0b:20:9a:fa:f2:a3:e8:
         f1:05:21:05:cb:99:08:f1:c3:62:5a:49:a5:b8:67:cc:b3:1c:
         03:2b:2f:6f:92:b5:a3:99:c7:04:61:47:1b:d2:ca:15:fb:d4:
         e5:03:de:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:19 2025 by rpki-client