Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/ec4d1946-0497-3ea3-9f57-d095868add41.roa
File:                     ec4d1946-0497-3ea3-9f57-d095868add41.roa (raw, json)
Hash identifier:          NdmmcK889GljY3txVd03MogJe+VIBsA7W5wY48x9nu0=
Subject key identifier:   78:BE:0A:BC:71:9B:D7:34:12:80:EE:57:9A:C2:7F:D9:B5:0A:CE:D5
Certificate issuer:       /CN=112c6636-0b34-4e47-95cc-29a6b53a3388
Certificate serial:       010D0C9F432858481F6536783E735527F8605F80
Authority key identifier: E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/ec4d1946-0497-3ea3-9f57-d095868add41.roa
Signing time:             Sat 07 Dec 2024 02:00:39 +0000
ROA not before:           Sat 07 Dec 2024 02:00:39 +0000
ROA not after:            Fri 07 Mar 2025 02:00:39 +0000
asID:                     15502
IP address blocks:        161.195.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1f:65:36:78:3e:73:55:27:f8:60:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112c6636-0b34-4e47-95cc-29a6b53a3388
        Validity
            Not Before: Dec  7 02:00:39 2024 GMT
            Not After : Mar  7 02:00:39 2025 GMT
        Subject: CN=8e650c3d-9375-4250-876a-9a04c8220188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:47:a3:2c:65:8a:1a:4a:dd:4e:70:d1:eb:4a:
                    41:d6:1a:fb:cd:8a:83:42:14:92:f3:54:be:11:5b:
                    8e:37:e9:83:ff:9f:65:73:56:36:9b:42:be:92:41:
                    e1:c1:1b:01:6b:d5:c4:52:27:3f:68:24:fc:be:cb:
                    7f:36:40:4b:88:70:c2:60:93:a5:64:02:8c:64:db:
                    94:4b:e1:2e:ca:6c:f7:09:44:42:10:a7:4f:a1:18:
                    76:ea:a1:f8:6d:66:8a:a1:43:58:ee:1e:4b:c0:b9:
                    83:cd:ac:33:dc:ac:c6:86:5c:2d:92:de:dd:85:17:
                    d1:6d:15:fb:83:ec:12:fe:4f:69:ab:fd:4a:d1:f8:
                    b4:95:88:4c:39:39:bb:dd:8a:39:ea:eb:66:3a:83:
                    3f:b6:f3:a3:4f:e5:85:9a:0b:22:43:8c:8b:a1:40:
                    f1:7d:97:03:4a:2f:11:b4:c1:17:a1:ef:33:0f:87:
                    43:49:d0:52:c0:dd:84:07:e0:9b:a5:cd:2e:b6:7b:
                    1d:44:2e:c2:01:39:42:9a:b7:90:6d:6d:4c:fc:23:
                    aa:d9:64:13:d0:58:79:87:57:05:f8:f4:a7:69:c3:
                    6a:f0:39:b1:e7:54:11:49:aa:f1:48:38:43:83:72:
                    f6:eb:a9:b5:52:ce:b9:6d:96:a4:c2:38:99:36:2f:
                    65:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BE:0A:BC:71:9B:D7:34:12:80:EE:57:9A:C2:7F:D9:B5:0A:CE:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/ec4d1946-0497-3ea3-9f57-d095868add41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl

            X509v3 Authority Key Identifier:
                keyid:E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.195.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:20:a5:98:26:28:4f:0f:49:b0:b8:1c:10:39:a3:13:fa:ab:
         ef:d5:54:de:1f:33:fb:ad:41:6d:18:54:11:e1:de:7b:2d:12:
         bf:24:bd:5e:ff:e9:da:d0:97:41:58:b3:cd:fa:56:38:57:78:
         3f:e0:40:ce:69:de:5d:20:0e:38:77:fe:0e:a2:4f:27:a3:29:
         40:8e:e2:83:34:b5:4c:2d:48:74:76:09:59:ea:5c:6f:d9:60:
         f3:d9:c9:b3:aa:24:6a:c4:c9:d7:bf:83:4e:aa:69:0b:31:a2:
         0e:51:a9:f2:3d:f9:a7:ad:ca:43:36:95:f1:cc:48:dc:28:e9:
         13:29:2c:a7:93:fe:dc:90:57:b8:1d:ce:5d:d8:95:3e:fc:cd:
         3d:b4:a8:e0:dc:55:d7:e1:19:83:8e:02:ee:fc:70:33:db:6f:
         4c:35:60:6a:cf:94:49:7a:0b:4e:93:70:6d:03:de:9e:19:c5:
         d4:1a:60:c3:c6:c3:e4:52:ad:d6:ce:31:d4:d5:c4:62:83:a6:
         96:26:a6:63:43:42:44:43:4d:eb:4b:5a:a4:76:5b:aa:a0:8e:
         73:a9:97:65:76:51:d1:0a:20:eb:9f:d9:19:1e:f6:63:f2:c7:
         70:12:00:a6:49:fa:d5:b1:7b:12:21:47:a2:94:bc:73:27:fd:
         56:f2:ed:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:53 2025 by rpki-client