Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/ae8b1132-402a-3f68-97d8-07ff4b6033cc.roa
File:                     ae8b1132-402a-3f68-97d8-07ff4b6033cc.roa (raw, json)
Hash identifier:          z134ERAqdptKXC0v/rp3lJDgoSaLHi3ruSoQeBIRVFo=
Subject key identifier:   4F:E7:D4:93:07:D6:41:73:30:B0:67:A9:AB:6C:A8:44:94:95:C4:96
Certificate issuer:       /CN=112c6636-0b34-4e47-95cc-29a6b53a3388
Certificate serial:       010D0C9F43285848BBBB837E74E07DD57C11FD05
Authority key identifier: E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/ae8b1132-402a-3f68-97d8-07ff4b6033cc.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     262224
IP address blocks:        161.195.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:83:7e:74:e0:7d:d5:7c:11:fd:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112c6636-0b34-4e47-95cc-29a6b53a3388
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=06f82d78-361b-42c6-8fd8-dbfdebc64c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a6:e0:ac:3f:6e:ac:eb:38:a3:85:86:a5:c2:
                    38:5c:c6:ed:c3:95:94:77:01:3c:cc:98:b8:1b:41:
                    a9:b9:c7:22:14:c8:4d:91:da:53:5f:0b:80:b7:4d:
                    cc:2a:52:fa:32:b4:f3:43:3b:46:49:57:6a:ff:17:
                    ff:d5:10:c3:fb:0a:af:93:55:d3:81:7f:36:6c:75:
                    ec:01:90:ab:d2:ef:72:0e:0d:4e:02:5c:3b:ac:08:
                    d9:c1:b1:8b:96:31:2d:71:d8:47:48:d3:df:87:be:
                    54:8e:2e:8c:7e:fa:5d:5f:36:5b:2b:f9:12:ec:8d:
                    47:dc:70:df:72:e9:d3:36:79:e8:48:67:62:14:4b:
                    a4:db:7c:d0:a3:ca:e1:dd:0a:bc:42:c9:e6:22:58:
                    04:b8:11:7c:40:f9:81:03:10:ce:d2:e6:43:17:cb:
                    f3:15:11:57:b8:d6:81:1d:48:4c:65:1f:ca:e1:6d:
                    2e:02:7d:b9:6c:ac:05:ea:7f:53:9e:fd:df:66:df:
                    2c:11:ac:b1:7f:62:30:b0:df:d7:4b:8c:b2:1b:ca:
                    b8:d9:54:9d:ef:ab:e1:d5:56:65:73:93:9f:83:e5:
                    06:24:7a:6a:9b:83:98:ca:a6:c4:21:15:72:e2:2a:
                    86:0e:28:9d:65:d6:e5:21:9d:26:3d:cb:f0:4c:be:
                    1f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E7:D4:93:07:D6:41:73:30:B0:67:A9:AB:6C:A8:44:94:95:C4:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/ae8b1132-402a-3f68-97d8-07ff4b6033cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl

            X509v3 Authority Key Identifier:
                keyid:E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.195.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:80:c5:39:e3:d6:5a:ba:0b:0c:25:c8:f0:a2:56:3b:fb:a5:
         e5:7e:c0:bc:94:d1:18:ba:a1:a9:ab:a1:10:83:cb:3e:6c:c6:
         4e:94:c4:91:63:00:a6:33:02:28:ad:f5:17:90:78:6e:3d:a7:
         b2:80:48:60:5f:10:8f:47:59:0f:1b:1c:4d:0a:e5:77:46:98:
         c6:65:52:ad:2c:3c:f9:99:81:b5:ae:18:cb:f2:4f:82:ad:87:
         7c:2d:aa:b3:0a:e8:ad:6a:4c:ca:df:07:ce:70:86:3d:4b:da:
         90:94:a0:02:20:6a:98:9b:dc:54:6b:ae:67:d3:0a:8b:97:16:
         d6:01:a8:8a:ee:02:dc:b1:e3:e6:1f:00:cf:fc:1d:46:df:86:
         5c:52:53:e2:15:53:7c:af:fd:6f:3c:c0:5a:1d:29:b9:32:10:
         d3:34:04:3e:4d:18:18:3e:9c:50:07:3a:5a:c4:53:37:bb:91:
         14:38:c7:7a:ca:3a:69:8e:b6:0f:f0:9f:99:c4:0c:8d:25:cb:
         ce:7d:b8:d6:c2:3a:66:0d:b6:86:0d:cf:96:4c:cd:7b:79:55:
         5f:7c:48:68:23:a0:68:a6:4e:47:b7:97:ee:2c:43:15:a5:c6:
         84:39:8c:0d:c4:ae:7b:7f:30:69:2b:a3:10:c3:31:22:2e:c2:
         04:48:c7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:46 2025 by rpki-client