Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a/172a58ae-0159-3bc8-b56c-825b818215c1.roa
File:                     172a58ae-0159-3bc8-b56c-825b818215c1.roa (raw, json)
Hash identifier:          YXBIeIq5GPj3tlEhK6sONatIMzljegxURXazCG8rVlI=
Subject key identifier:   B6:77:60:90:29:C6:FA:31:7D:77:2B:13:5D:F5:98:E1:B8:EF:51:AE
Certificate issuer:       /CN=700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a
Certificate serial:       010D0C9F432858482BF54EA25EDDCD942166BE40
Authority key identifier: B1:50:98:51:7F:5C:92:2A:E9:5E:CC:4C:9B:E4:A7:4C:59:A9:AC:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a/172a58ae-0159-3bc8-b56c-825b818215c1.roa
Signing time:             Wed 11 Dec 2024 14:00:52 +0000
ROA not before:           Wed 11 Dec 2024 14:00:52 +0000
ROA not after:            Tue 11 Mar 2025 13:00:52 +0000
asID:                     399361
IP address blocks:        142.79.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2b:f5:4e:a2:5e:dd:cd:94:21:66:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a
        Validity
            Not Before: Dec 11 14:00:52 2024 GMT
            Not After : Mar 11 13:00:52 2025 GMT
        Subject: CN=d9b6c4ac-791d-4213-9012-5d8453abe880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ce:a3:ac:76:d0:96:13:14:a3:70:3b:d8:7e:
                    99:f0:ec:18:19:2d:13:a1:e8:d4:59:2a:4d:4c:4f:
                    08:5b:07:5b:d3:ab:bc:63:70:b7:eb:97:71:00:e2:
                    a6:24:3d:97:c0:0e:c9:05:f3:a2:94:4c:9f:2f:39:
                    6c:c9:77:4e:ab:2b:c0:44:06:f8:5f:6d:6d:5d:a8:
                    dc:7e:90:c0:1d:f3:75:f8:11:25:f4:e5:8d:2d:6d:
                    ca:be:af:cd:be:53:4c:67:38:c3:a8:1f:c1:fb:8a:
                    1f:04:2b:8a:df:37:59:dd:f0:a8:65:d6:5f:0b:27:
                    a5:e0:a1:92:96:42:cc:f2:f8:f9:27:3d:c4:fa:ae:
                    ea:cb:21:fc:cd:d9:95:c7:11:26:d0:e5:0c:d7:c3:
                    67:de:e8:0d:af:06:e2:d2:c6:93:7e:8e:ee:94:d9:
                    f1:1c:44:5b:e5:e3:2c:1a:55:ec:29:bd:b9:3d:c4:
                    57:a5:58:10:17:40:a5:4b:6b:c9:75:15:74:75:e7:
                    5c:9a:dc:b0:81:eb:b2:64:93:9c:42:3e:de:51:4b:
                    de:ad:0d:07:1d:4a:71:1a:6c:a5:07:e1:85:02:1b:
                    c7:4a:7c:b2:1b:2e:8e:e3:56:d7:79:c8:50:03:17:
                    b2:c6:4a:de:da:b8:5b:a7:85:81:d9:a5:ed:10:19:
                    f4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:77:60:90:29:C6:FA:31:7D:77:2B:13:5D:F5:98:E1:B8:EF:51:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a/172a58ae-0159-3bc8-b56c-825b818215c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a.crl

            X509v3 Authority Key Identifier:
                keyid:B1:50:98:51:7F:5C:92:2A:E9:5E:CC:4C:9B:E4:A7:4C:59:A9:AC:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.79.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:e5:32:b3:c4:c5:ca:97:85:9b:49:ab:d8:c0:3f:c6:d9:14:
         95:8b:a9:36:12:b8:3b:c5:e9:a5:89:59:7b:d5:ee:81:00:f0:
         64:a6:47:86:7c:9f:c2:c7:75:4c:43:c8:27:7f:3f:61:9d:7d:
         b3:6e:66:3f:ff:b5:44:b0:16:d9:63:ac:a9:23:fe:70:52:b4:
         ae:d5:9c:bf:a9:3c:8c:13:d5:68:19:df:02:01:1e:90:cf:06:
         6d:bc:22:cc:7c:73:27:f7:03:97:bf:36:46:0b:aa:95:a1:14:
         cd:6d:11:40:2e:a1:0b:17:d0:c0:87:a6:22:d9:6a:69:9c:4c:
         ca:5c:44:13:d6:75:32:24:12:a3:b4:f2:b2:eb:55:fc:b2:e1:
         ea:60:08:c4:80:2b:6e:2f:54:6e:ec:6e:76:84:c2:89:f2:31:
         24:5b:e9:5e:df:a5:a4:49:1e:a8:db:d2:d3:21:81:3c:6c:70:
         f4:72:92:38:58:e0:77:66:4e:6f:41:7a:44:74:04:fd:c3:19:
         68:a3:17:a3:a8:ff:5a:ec:86:39:49:38:76:48:88:2f:98:95:
         8d:80:70:2d:5f:5b:6c:da:9a:0b:bb:89:41:b5:d0:1d:d5:3e:
         39:b1:eb:10:ff:c4:53:f9:a5:cc:47:63:e8:32:05:b7:b4:85:
         38:e5:86:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:31:39 2025 by rpki-client