Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/8a1ac6fb-19ef-3295-ab25-55d37d8c7f74.roa
File:                     8a1ac6fb-19ef-3295-ab25-55d37d8c7f74.roa (raw, json)
Hash identifier:          hHCl3/3rEqOTZ8HmTLSM0WzBoeIbgyHJPBVhp8yObAw=
Subject key identifier:   5D:C0:60:93:33:C6:7D:17:93:31:9B:CF:38:55:8E:B8:BA:13:78:52
Certificate issuer:       /CN=d512566a-2d54-474a-a1b0-93c74d4f7e45
Certificate serial:       010D0C9F4328584862658E1F8F9DEEA5968F4F80
Authority key identifier: 1F:FA:6D:95:AF:5A:0B:BF:31:14:4C:3C:C6:AF:E5:51:0F:41:55:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/8a1ac6fb-19ef-3295-ab25-55d37d8c7f74.roa
Signing time:             Tue 31 Dec 2024 02:00:40 +0000
ROA not before:           Tue 31 Dec 2024 02:00:40 +0000
ROA not after:            Mon 31 Mar 2025 01:00:40 +0000
asID:                     17161
IP address blocks:        167.245.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/d512566a-2d54-474a-a1b0-93c74d4f7e45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/d512566a-2d54-474a-a1b0-93c74d4f7e45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:62:65:8e:1f:8f:9d:ee:a5:96:8f:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d512566a-2d54-474a-a1b0-93c74d4f7e45
        Validity
            Not Before: Dec 31 02:00:40 2024 GMT
            Not After : Mar 31 01:00:40 2025 GMT
        Subject: CN=b91437e1-2b99-46b9-ab8a-14866a6921c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e6:fc:a1:66:d7:2e:c8:bf:53:6c:83:cf:86:
                    52:ef:97:21:ce:22:f0:1b:10:07:6e:5a:5b:2c:fd:
                    77:6f:da:ed:af:4f:c9:5f:ff:e1:e0:31:79:7a:ac:
                    01:42:0a:d0:c3:39:05:7a:64:43:41:8c:ba:80:93:
                    1c:a4:ee:d0:ab:e6:bc:93:f9:98:4c:54:87:96:81:
                    15:8d:0b:3a:ba:07:82:4d:e2:77:af:7a:71:40:77:
                    ea:c6:b2:25:95:f0:cd:c6:8e:14:2b:36:45:ca:1b:
                    25:4a:eb:f6:69:28:33:ea:f5:17:34:e0:34:7c:c5:
                    6d:e2:6c:a9:0c:f3:79:5d:26:51:dc:25:16:96:d0:
                    74:71:d1:92:85:a9:f6:44:d5:69:99:ab:80:cc:5f:
                    e5:0b:b5:2c:93:cd:5d:e9:eb:b5:73:50:3d:2a:3e:
                    3b:e7:fe:21:93:f3:c9:d5:6b:cf:8c:99:76:09:60:
                    7a:9a:44:c1:d1:a0:03:ed:bc:6a:ae:b1:73:e3:f9:
                    19:e9:95:c9:5f:0b:1e:38:a9:fc:c9:34:46:33:6c:
                    c0:ff:53:16:b1:3c:46:6d:da:63:35:c5:75:5e:ea:
                    68:d7:1d:5e:4d:e5:7c:c4:fe:51:9a:2e:31:c9:5b:
                    fd:9d:06:79:f1:7f:b4:de:f3:19:82:13:19:16:ba:
                    6a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C0:60:93:33:C6:7D:17:93:31:9B:CF:38:55:8E:B8:BA:13:78:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/8a1ac6fb-19ef-3295-ab25-55d37d8c7f74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/d512566a-2d54-474a-a1b0-93c74d4f7e45.crl

            X509v3 Authority Key Identifier:
                keyid:1F:FA:6D:95:AF:5A:0B:BF:31:14:4C:3C:C6:AF:E5:51:0F:41:55:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.245.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:89:c2:55:64:16:e5:60:8e:df:88:56:38:f6:ac:f2:42:30:
         36:2d:f2:af:2d:04:1c:6b:10:c6:93:33:7e:d9:51:1f:80:07:
         17:69:27:f5:19:81:09:83:5c:13:b7:8e:c2:ac:e9:5b:a0:12:
         89:2d:01:30:a2:f7:e7:6e:6c:a5:6f:e4:52:c3:8b:05:41:c2:
         4e:52:10:6c:c4:60:6b:bb:e2:cb:0e:f7:14:75:8a:0d:b8:0e:
         f9:96:46:d3:06:42:4e:e7:93:ed:d8:c5:df:c1:58:1b:b4:80:
         a5:7d:b3:a5:30:cd:c1:bf:c4:89:ae:e0:04:fc:3f:4c:e7:ac:
         e9:3a:34:f7:1d:ca:32:c2:fb:97:63:8b:e5:d1:2a:69:b4:d6:
         e5:2f:d6:a1:75:b2:e0:3a:f3:01:20:3f:78:9e:72:64:fb:65:
         a6:55:0e:fd:3f:85:17:cc:4c:ec:51:b1:e7:28:00:86:0c:bf:
         b1:c0:c5:6e:9b:7b:46:72:bf:54:37:35:c3:42:58:c3:04:61:
         e9:9d:62:cb:13:12:7b:58:c2:e0:f9:70:70:69:23:35:04:94:
         20:7a:d7:a8:0c:c3:ad:3c:98:9d:12:88:70:1d:82:aa:ef:88:
         98:6c:f1:0f:d0:bf:75:4f:3e:1e:d4:bd:53:5e:dc:f9:ac:59:
         d9:9b:f7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:30 2025 by rpki-client