Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/19339f31-b153-3829-9fd6-1843f4f2d30e.roa
File:                     19339f31-b153-3829-9fd6-1843f4f2d30e.roa (raw, json)
Hash identifier:          j/K86Y1DfRePkeAJxN/hhxRwB5NGsVASEAHrH/D3XXQ=
Subject key identifier:   83:2C:2D:C8:40:8E:25:44:D7:CB:14:E9:3D:1B:C6:16:76:E7:70:66
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F432858493C0939B34E45CCC5B0E13400
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/19339f31-b153-3829-9fd6-1843f4f2d30e.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     20425
IP address blocks:        96.45.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:39:b3:4e:45:cc:c5:b0:e1:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=7f929b83-e679-496c-ae44-8f49afc15eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2b:35:d7:8e:5c:e6:51:ef:06:9c:e9:c6:5c:
                    71:4b:51:7d:ba:c2:37:e6:b8:c8:99:3f:f4:53:46:
                    b9:e8:7b:6a:63:2a:19:38:51:a1:08:53:f9:10:a0:
                    09:13:b9:06:cb:78:f9:0c:bd:b0:7b:4d:87:9c:56:
                    da:37:5d:e4:83:71:18:a0:cd:4f:00:d3:a0:60:9c:
                    32:d6:50:87:0a:55:54:0a:59:42:81:66:1a:f8:0f:
                    f0:82:e0:4e:72:fc:88:30:fd:96:ea:c9:e7:31:10:
                    70:50:90:9c:33:40:73:d9:84:0b:fd:e0:a6:ef:5e:
                    0e:e5:5f:f3:ef:88:fb:d9:0f:66:4a:f4:55:55:a3:
                    bd:f2:e6:d6:85:d5:0b:e4:08:cc:43:e4:1b:0a:0e:
                    ba:76:25:75:45:4e:ee:b9:6f:75:6e:38:13:14:5d:
                    62:eb:d7:92:fe:79:19:92:cd:94:ca:62:2b:1e:81:
                    f3:0f:70:db:e9:46:15:ce:54:34:6c:cf:f3:4c:e2:
                    61:d0:59:3c:86:a7:eb:d0:7d:b7:7a:e0:98:d2:13:
                    4a:33:10:7a:e2:74:96:03:85:79:3d:eb:79:71:74:
                    67:90:7a:ad:1d:37:b0:0f:3b:ae:22:cb:ed:af:40:
                    33:01:8b:f1:13:77:10:8a:9b:9c:8f:7f:05:77:49:
                    3d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2C:2D:C8:40:8E:25:44:D7:CB:14:E9:3D:1B:C6:16:76:E7:70:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/19339f31-b153-3829-9fd6-1843f4f2d30e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.45.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:bb:0f:34:10:fa:c1:54:a1:a2:61:ac:5d:bd:10:75:ac:a6:
         c0:87:1d:6e:5c:cd:c0:1c:e6:fd:5c:c4:87:53:cb:b2:8b:0e:
         ce:3a:f3:ba:3e:36:9a:21:50:c1:00:95:4e:87:e6:37:04:6f:
         cd:0b:8b:0d:bc:15:0d:26:3b:65:fd:e8:78:f4:aa:ec:f4:00:
         df:a7:20:d4:16:fd:2f:1d:51:f8:52:70:9b:20:9e:80:af:53:
         96:e3:31:20:7f:41:78:5b:42:55:09:c7:d9:5c:d3:f0:b5:30:
         7b:6b:0a:24:c2:39:57:07:90:d4:32:fe:cf:26:88:a8:54:fa:
         c1:93:f1:a3:09:a1:7c:9a:c7:94:36:61:86:83:8f:b9:bf:fc:
         45:45:34:27:5d:9e:60:90:47:43:7d:35:44:19:d3:74:aa:f4:
         c7:6c:2c:49:aa:58:cb:c0:20:e2:e2:4d:ce:f8:07:f3:0a:8d:
         9c:fd:b5:b5:bb:06:44:53:00:57:82:10:99:1e:4c:89:3c:c6:
         79:1b:e8:b4:0c:cb:72:98:8c:3b:9c:c9:61:71:79:f2:31:ad:
         e3:8d:7d:5f:54:7e:54:19:4f:92:cf:bf:c0:1a:7b:54:d8:45:
         21:92:5b:2d:90:73:ba:cf:89:38:45:94:e3:1f:42:85:c1:1d:
         dd:e9:f8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:33:04 2025 by rpki-client