Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ed81831-d382-493b-b622-f4fb0157e101/0e30f86d-e5b6-318d-8855-b6fa2cdb548d.roa
File:                     0e30f86d-e5b6-318d-8855-b6fa2cdb548d.roa (raw, json)
Hash identifier:          TRPiXFdXU9YhHmL3i+faHHclwC0sKWj0NW/WPlIazqc=
Subject key identifier:   4C:34:1C:F5:F5:3A:86:BC:65:1B:AA:A4:6E:A1:AB:7D:FC:F3:06:A9
Certificate issuer:       /CN=4ed81831-d382-493b-b622-f4fb0157e101
Certificate serial:       010D0C9F432858486C2B13C342E704FA15F46520
Authority key identifier: 2F:E1:5E:47:8D:8C:6C:AF:87:A0:D3:19:00:87:BD:37:DA:B7:CC:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ed81831-d382-493b-b622-f4fb0157e101.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ed81831-d382-493b-b622-f4fb0157e101/0e30f86d-e5b6-318d-8855-b6fa2cdb548d.roa
Signing time:             Fri 03 Jan 2025 14:00:51 +0000
ROA not before:           Fri 03 Jan 2025 14:00:51 +0000
ROA not after:            Thu 03 Apr 2025 13:00:51 +0000
asID:                     53871
IP address blocks:        199.188.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ed81831-d382-493b-b622-f4fb0157e101/4ed81831-d382-493b-b622-f4fb0157e101.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ed81831-d382-493b-b622-f4fb0157e101/4ed81831-d382-493b-b622-f4fb0157e101.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ed81831-d382-493b-b622-f4fb0157e101.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6c:2b:13:c3:42:e7:04:fa:15:f4:65:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ed81831-d382-493b-b622-f4fb0157e101
        Validity
            Not Before: Jan  3 14:00:51 2025 GMT
            Not After : Apr  3 13:00:51 2025 GMT
        Subject: CN=172ad774-a1cf-4aec-969f-90329114542b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:73:f3:ce:9f:22:d3:69:66:8e:65:2d:34:30:
                    66:68:32:85:64:c1:5a:71:89:8d:4c:90:a5:f3:bc:
                    7f:48:26:19:91:4d:7e:2b:fd:c2:9e:09:74:ea:e2:
                    85:1c:bd:03:3e:38:f3:f8:fc:13:d7:6f:f8:f1:0e:
                    1d:74:f8:cb:66:4b:7c:a4:89:77:50:c0:14:9f:64:
                    b6:a8:a6:bc:f8:bf:cf:10:ed:7d:0a:13:3a:c2:96:
                    2d:ae:1b:2f:38:85:90:4a:81:c0:f7:eb:2a:65:cd:
                    d4:c1:cb:ec:5f:5c:b3:3d:ca:fa:0c:4d:0d:e8:4a:
                    11:1c:f9:86:68:d8:9e:74:54:6f:6a:0a:cd:fc:f1:
                    43:49:63:3c:11:c2:29:7c:04:59:36:ec:b3:a5:fa:
                    5f:d4:43:01:9d:17:30:2b:26:4b:2b:6e:ec:b1:53:
                    a2:46:f6:55:e7:8e:7d:25:51:44:cd:8d:1f:83:a3:
                    93:52:55:5f:d7:dc:36:a4:51:83:cb:b3:e4:9d:b8:
                    e0:8e:cf:9f:d7:d3:92:e4:84:9c:47:61:d0:2a:56:
                    22:03:06:ab:e3:ba:aa:f4:fa:65:aa:95:94:ab:d0:
                    b8:08:c5:ef:d4:9d:2d:b2:77:8f:ad:6b:43:e4:34:
                    9b:41:85:cd:e3:56:9f:a2:1a:77:d7:65:9b:3a:5f:
                    14:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:34:1C:F5:F5:3A:86:BC:65:1B:AA:A4:6E:A1:AB:7D:FC:F3:06:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ed81831-d382-493b-b622-f4fb0157e101/0e30f86d-e5b6-318d-8855-b6fa2cdb548d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ed81831-d382-493b-b622-f4fb0157e101/4ed81831-d382-493b-b622-f4fb0157e101.crl

            X509v3 Authority Key Identifier:
                keyid:2F:E1:5E:47:8D:8C:6C:AF:87:A0:D3:19:00:87:BD:37:DA:B7:CC:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ed81831-d382-493b-b622-f4fb0157e101.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:cc:73:92:ba:0a:93:8e:66:94:d1:4d:ec:9b:6a:52:4f:2c:
         d0:4a:02:eb:ba:13:b7:7c:a7:0b:ee:43:02:f2:55:02:04:d9:
         28:f9:40:8a:35:12:c9:d5:64:e5:c7:80:f4:d8:8d:12:12:c1:
         b6:c8:d2:31:dd:8a:ca:2f:dd:2a:cf:63:12:c7:85:5f:5c:29:
         d8:bf:d9:be:0b:84:b6:01:26:b1:0f:67:c1:4f:16:90:b6:d2:
         fe:72:4d:fe:07:c4:67:e4:3f:d4:16:39:8a:35:68:e7:ad:d1:
         3a:35:fc:16:95:9a:d6:57:94:34:65:ac:6b:6c:60:45:cc:52:
         0f:17:f0:2e:77:0a:57:75:84:ae:08:91:0c:2f:db:5c:58:4f:
         35:80:88:50:1d:61:4e:4b:0b:ab:8c:33:1c:4e:35:f3:41:88:
         63:89:af:ca:6b:db:d4:cc:b7:2c:c4:df:7a:ed:11:2d:b6:0f:
         e1:c0:37:00:a7:a9:1e:d1:8d:e9:3d:2f:ec:77:1e:6d:4d:07:
         14:84:3a:11:5f:8f:12:c8:01:7b:3b:82:0a:3d:16:38:5c:c9:
         f3:d1:c9:cd:1d:e9:4a:d7:68:be:6d:bb:28:29:bf:8e:86:45:
         8f:93:32:0a:e1:eb:18:2d:8e:18:fa:44:e5:63:c5:b7:5d:75:
         0c:33:ad:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:01 2025 by rpki-client