Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/49ff6e9b-a1b4-33aa-b1fb-f8ca27e7f067.roa
File:                     49ff6e9b-a1b4-33aa-b1fb-f8ca27e7f067.roa (raw, json)
Hash identifier:          o9sR2I6ImUnHejSuovnQZXAIVz4zCbPOSciAUCfscs8=
Subject key identifier:   1C:EA:B3:96:01:35:BB:4A:92:EC:F1:C6:CC:C8:1D:04:4E:40:86:69
Certificate issuer:       /CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
Certificate serial:       010D0C9F432858484C1020402260BF2E70680880
Authority key identifier: D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/49ff6e9b-a1b4-33aa-b1fb-f8ca27e7f067.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     16509
IP address blocks:        192.80.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:20:40:22:60:bf:2e:70:68:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=9d2ad862-3708-4501-8a64-450efe0e22ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:50:1d:98:71:fe:5b:38:ef:ab:87:9f:56:7d:
                    25:56:76:28:55:70:34:5c:de:5c:84:55:1f:2f:0c:
                    38:80:b1:a0:d0:ff:74:f8:ed:64:3d:72:c4:f4:6a:
                    f5:c8:e5:c6:55:a2:0d:5e:bd:67:24:db:52:61:69:
                    71:34:df:8a:ba:de:e8:a9:f0:68:8a:27:36:63:ca:
                    be:39:b7:9f:ae:83:0d:94:d1:fd:84:73:09:6d:bf:
                    98:0d:ab:1e:7a:4b:21:b9:c9:25:30:fc:48:15:c0:
                    f3:77:38:1d:4b:b0:ea:e4:fe:84:65:9d:89:6b:4d:
                    60:5c:c7:6c:4f:b9:65:87:99:8f:b6:53:f0:df:2c:
                    f9:12:ae:b4:d5:cc:32:73:27:13:9d:22:00:b5:6f:
                    f6:c0:5e:dc:3e:42:3f:8b:2b:7a:68:c1:68:c9:01:
                    2b:61:ab:b8:54:cd:4b:7e:72:1b:b4:9d:d2:59:11:
                    22:4d:5f:3f:21:95:51:ef:72:c4:b4:3e:f2:0b:c5:
                    c4:a6:24:f5:37:bb:d2:37:77:d5:d6:50:2b:0e:94:
                    3a:0b:ec:9e:04:ce:0b:6e:d4:ef:24:1f:22:dc:f3:
                    05:01:ba:9f:e2:32:e1:fc:b1:0a:32:2e:98:fd:b1:
                    8e:95:bb:43:46:26:a9:49:fd:73:b9:50:be:95:9a:
                    f7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:EA:B3:96:01:35:BB:4A:92:EC:F1:C6:CC:C8:1D:04:4E:40:86:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/49ff6e9b-a1b4-33aa-b1fb-f8ca27e7f067.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl

            X509v3 Authority Key Identifier:
                keyid:D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:27:31:ff:77:9d:a4:77:73:75:6e:12:01:e8:e3:e2:df:a4:
         d9:0a:8c:77:33:23:c2:ea:e2:2f:51:f4:ec:90:f2:c5:f1:ae:
         7c:07:37:b2:61:bf:c0:ee:86:29:43:cc:92:1d:38:85:1f:b7:
         ff:32:40:ce:b1:86:8a:dd:ce:b7:bd:48:81:98:67:19:f3:a7:
         da:b2:bb:b1:41:d7:17:a5:e1:89:23:d1:9f:f5:0a:79:b1:61:
         47:24:61:f6:87:05:35:b1:48:f6:f3:59:ac:7f:24:e5:78:02:
         38:1a:c6:2e:8e:42:7f:d3:68:8d:a6:34:18:0a:d5:36:b8:83:
         44:f4:cf:66:cc:86:44:94:1a:fb:a1:31:ac:35:7c:67:f7:89:
         f8:fe:21:95:86:d4:3e:94:03:b3:ff:dd:2c:42:e4:99:33:1c:
         83:a7:19:b0:3d:9c:ef:86:57:46:d8:45:3f:ef:80:66:68:da:
         25:02:97:04:30:a8:55:ba:4c:9e:c5:20:aa:e1:61:96:22:52:
         1a:59:d9:09:61:91:ff:c2:2a:9b:e3:93:02:d2:64:f0:bc:e6:
         f7:73:c0:13:af:53:33:3a:9c:d8:9f:7a:49:19:c8:b9:7a:35:
         38:50:72:2c:cb:e5:6d:6c:ea:41:12:fd:8c:0a:27:47:72:7b:
         7e:ee:b7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:29 2025 by rpki-client