Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/ea8cd07e-4a6c-3b3f-b530-0ac585b107de.roa
File:                     ea8cd07e-4a6c-3b3f-b530-0ac585b107de.roa (raw, json)
Hash identifier:          RWttSAhxpbrE707XuIfUrO7UCs2HKbdfisP22Vu4Jws=
Subject key identifier:   CC:C6:02:CA:7A:68:3F:8F:40:68:ED:51:D9:84:6B:A6:6A:61:B5:D8
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584838854E632843C35025674FE0
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/ea8cd07e-4a6c-3b3f-b530-0ac585b107de.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     22822
IP address blocks:        208.111.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:4e:63:28:43:c3:50:25:67:4f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=dc36fb3d-1a88-4d4d-81ba-62509c959a16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d1:2b:fc:30:c9:c4:08:90:93:2d:f0:f4:92:
                    02:3c:01:d2:dc:7d:90:b2:09:d5:75:99:98:86:53:
                    5c:cb:d4:03:9a:bc:d0:3c:f7:4e:36:ac:9d:53:1e:
                    a9:84:56:34:6f:ad:ba:bb:72:e8:ed:8a:46:4e:c5:
                    82:0c:57:77:65:2b:c5:16:d4:56:48:b5:0f:33:20:
                    e2:06:99:12:27:05:9e:06:0f:53:89:52:a5:f5:84:
                    f3:51:d3:ea:71:40:71:96:7b:b3:3b:31:3a:31:88:
                    51:5b:43:1a:fa:d2:3e:05:fd:9b:ca:3e:bb:6c:2f:
                    31:65:d1:d1:59:0c:97:ad:ca:b7:10:46:64:39:c1:
                    7c:f1:27:2d:2c:b0:b2:92:db:a4:95:fe:1a:dc:90:
                    40:fa:ca:a4:cb:59:34:d6:c9:2a:74:76:12:74:4b:
                    46:a4:c2:27:c4:49:78:f3:b6:b6:72:c0:95:7a:d7:
                    2c:6f:e9:fa:3c:e3:02:b9:e1:af:ac:9b:01:4f:3f:
                    70:b5:33:25:05:99:81:65:70:d8:dc:34:58:05:b0:
                    f5:36:a7:4b:41:3a:7e:89:9b:cb:39:97:dd:7e:91:
                    34:38:1c:4a:9a:17:68:5d:6f:fe:ce:8a:f4:59:9c:
                    50:bd:8e:a6:af:5e:47:2f:08:52:bc:89:fb:9d:34:
                    88:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C6:02:CA:7A:68:3F:8F:40:68:ED:51:D9:84:6B:A6:6A:61:B5:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/ea8cd07e-4a6c-3b3f-b530-0ac585b107de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.111.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:68:5b:a4:c1:92:61:57:94:34:d4:6a:3c:ea:37:3a:fe:3d:
         ca:31:2f:c8:4b:8c:7c:69:c8:6f:95:d0:21:1a:61:b5:f3:c7:
         b3:1b:fa:9d:c8:89:97:a4:d8:15:99:4d:9e:cd:46:e5:fa:f6:
         00:0e:66:16:5a:10:b0:ff:f6:65:51:77:1b:da:bd:0b:01:97:
         86:a8:ce:7a:9f:23:b6:67:b5:ed:68:a8:e5:6f:6d:06:f8:07:
         be:c8:0d:84:72:2a:7a:d0:1f:aa:06:f6:be:af:59:67:95:a8:
         fd:9e:80:a2:6b:1c:85:e6:7c:d1:14:4c:75:93:2a:fe:bb:3e:
         7a:28:90:8b:fe:0c:88:7c:87:b4:40:9f:05:26:d7:22:07:67:
         d9:d1:e6:94:e4:ff:59:34:73:d2:49:9d:fc:51:e6:9f:9b:38:
         ee:17:7e:c7:73:12:f6:a0:be:7e:42:95:54:60:aa:68:5f:1c:
         3c:dc:8e:c7:c7:8e:34:9e:39:8e:a4:f2:94:08:d9:dd:3b:3e:
         3c:68:d8:99:62:8a:b7:4b:ac:6f:35:6f:fa:7f:97:77:bc:c3:
         5d:ca:56:80:d0:ab:87:ee:bf:8d:43:0d:0c:d7:ca:8a:07:d8:
         0b:e5:3e:d6:44:28:82:16:26:23:ca:8b:f0:4b:9f:4b:88:d2:
         00:a7:51:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:20 2025 by rpki-client