Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e4217924-b89f-3a6b-b726-c4acf11988c3.roa
File:                     e4217924-b89f-3a6b-b726-c4acf11988c3.roa (raw, json)
Hash identifier:          9tME72saXzDxD9qxxvbt6kAR4w8a4ZuM6AFxGv2Eb/U=
Subject key identifier:   3A:21:CD:3A:F6:6D:45:CC:C3:84:FF:DA:15:D4:A2:64:04:16:5B:3A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848AF2B9CC895704E8D7A278800
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e4217924-b89f-3a6b-b726-c4acf11988c3.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     206728
IP address blocks:        108.171.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:9c:c8:95:70:4e:8d:7a:27:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=e04b3742-2afc-47ba-b81c-e680fba7dd6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3b:b1:90:b0:79:4a:64:83:c7:e9:d2:49:8f:
                    e4:bf:9f:7f:99:1b:e9:49:7c:13:d0:38:e0:65:bd:
                    05:50:0b:b6:44:10:20:9f:0f:4a:c9:3d:98:ad:a6:
                    c2:83:6b:2b:e5:be:8b:87:c1:c6:48:74:45:fc:27:
                    bd:60:dd:52:7f:e5:6e:fb:a8:e9:a4:7c:03:2b:69:
                    a2:1e:db:b3:f1:d1:b1:8f:3f:b7:74:b2:eb:a0:d4:
                    c7:89:e3:c5:dd:4a:97:0d:a9:5f:ba:90:2b:84:f9:
                    88:ab:39:01:15:9d:f6:d8:94:4d:2f:53:f4:63:24:
                    cc:4c:b6:0a:c8:02:31:39:e9:fd:9a:fa:12:93:cf:
                    53:bd:ea:95:64:13:15:3e:02:eb:b6:cc:de:66:70:
                    6c:72:e1:40:25:9d:7e:49:c9:21:7e:1c:ad:00:18:
                    56:7f:96:b3:dc:45:cd:9f:2a:e5:cd:af:74:23:c4:
                    66:07:22:81:31:87:d0:41:b7:62:f7:9a:f1:98:ac:
                    d4:fa:3d:45:fa:73:6d:3b:1a:24:40:57:a5:47:88:
                    07:3c:19:a8:db:d8:63:18:0d:a5:aa:67:be:32:a8:
                    fd:6a:46:2a:b5:3e:db:75:7b:ab:3a:8d:48:cf:a4:
                    8f:6f:6b:f4:75:c2:93:e6:41:7b:53:8d:ab:6c:8a:
                    75:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:21:CD:3A:F6:6D:45:CC:C3:84:FF:DA:15:D4:A2:64:04:16:5B:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e4217924-b89f-3a6b-b726-c4acf11988c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.171.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:8d:87:24:d5:d5:69:96:26:9f:ae:ae:79:a5:36:a7:4b:bb:
         0d:75:b6:18:62:eb:6a:fa:0f:a7:d3:f9:58:11:e4:15:eb:c2:
         d7:39:5b:f5:81:35:c2:39:17:49:82:25:aa:de:69:99:d9:f2:
         dc:e7:30:a9:3c:85:f0:5a:4f:09:76:aa:a7:78:af:a2:e7:b1:
         e6:13:54:c7:0c:a5:91:ab:e1:b8:62:e7:8e:b6:cc:cb:88:e3:
         1d:a7:f0:28:e3:09:20:6e:6f:8f:cf:06:27:7f:11:21:78:52:
         ef:57:47:dc:e2:f3:ec:fa:8f:19:1b:2a:b2:ea:ff:32:e2:7f:
         e9:8c:5a:69:c1:f0:ee:db:9f:85:24:4e:fd:11:d9:5c:1b:d1:
         e3:cc:76:b1:56:a7:8f:30:d5:1f:82:fd:ca:7e:aa:99:3c:43:
         7c:be:ca:46:ec:f8:e5:d6:cf:95:10:d2:25:5a:f4:09:fd:9f:
         f5:05:11:ee:32:fd:f9:59:52:2b:f5:95:7e:04:35:b0:58:e0:
         69:84:da:5f:8f:c3:e0:c7:c2:f4:41:d5:56:16:66:50:21:ee:
         1d:cc:7c:5e:82:e4:3a:ba:3d:be:a5:21:de:fa:19:2d:00:d9:
         e0:83:a5:a0:10:09:60:72:e5:26:a8:85:68:61:f9:b9:24:8a:
         6f:45:cd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:22 2025 by rpki-client