Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5764631c-a6be-3f1f-9c3c-348fa8157fd2.roa
File:                     5764631c-a6be-3f1f-9c3c-348fa8157fd2.roa (raw, json)
Hash identifier:          p6WZUvwEvDwHCmNioPR9vCNZzIPh6cJLhTyxnBndGxA=
Subject key identifier:   0F:62:AB:DB:40:4D:1C:91:D1:1A:A1:FD:A9:4E:25:52:5C:53:A6:17
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F432858484EDABD68F2E82160F7873700
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5764631c-a6be-3f1f-9c3c-348fa8157fd2.roa
Signing time:             Tue 24 Dec 2024 02:00:38 +0000
ROA not before:           Tue 24 Dec 2024 02:00:38 +0000
ROA not after:            Mon 24 Mar 2025 01:00:38 +0000
asID:                     376
IP address blocks:        207.162.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4e:da:bd:68:f2:e8:21:60:f7:87:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Dec 24 02:00:38 2024 GMT
            Not After : Mar 24 01:00:38 2025 GMT
        Subject: CN=c467b925-7c1e-40f0-b92e-6dbc64af0a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:df:ac:30:b0:fb:4c:e6:05:f2:93:f5:b6:
                    3d:06:3f:55:56:1c:9d:45:2b:0f:cd:a8:d3:3c:a3:
                    d2:de:79:05:b3:cb:f8:fd:92:10:de:e6:7f:9d:1d:
                    04:dc:85:81:96:dd:61:69:37:b7:a5:9c:2a:02:18:
                    5b:7e:7b:ed:7d:cf:53:af:29:be:46:33:bc:f2:d3:
                    d3:31:45:bd:76:ad:a7:06:a0:b2:e1:a6:08:ff:68:
                    89:33:f9:d7:8a:73:d1:b8:33:95:21:e1:3a:17:87:
                    d8:63:a6:5e:31:62:d8:3a:17:17:55:77:2f:be:cc:
                    ed:05:16:aa:11:87:8a:60:2e:12:22:19:d5:15:53:
                    ee:43:c2:44:2e:79:7a:e6:dc:56:03:39:f1:01:2e:
                    8d:15:08:db:c0:cb:81:11:ae:1a:11:13:16:54:f4:
                    0b:e3:95:bf:d4:32:67:7e:32:c6:d5:81:82:b7:2d:
                    ed:2c:0a:82:e5:66:27:e6:3d:53:12:80:1a:09:78:
                    89:c2:14:50:7c:ab:59:f1:1d:71:6f:ee:03:8b:95:
                    89:9c:a2:08:36:9d:f7:3d:92:57:36:a0:81:60:32:
                    13:57:49:17:33:4b:37:c6:d3:e4:c4:b9:a4:d5:a3:
                    84:6b:2d:da:06:70:43:83:80:c4:7b:5e:26:61:4c:
                    44:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:62:AB:DB:40:4D:1C:91:D1:1A:A1:FD:A9:4E:25:52:5C:53:A6:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5764631c-a6be-3f1f-9c3c-348fa8157fd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.162.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:1c:0d:49:4d:34:7e:4c:eb:d4:dd:02:b0:3b:39:10:73:43:
         1b:f2:ba:a0:d5:1f:e5:34:b0:2c:6e:db:41:37:f4:36:b0:0d:
         44:bf:3b:81:7b:85:a0:da:2a:12:6c:6b:eb:f2:4a:af:8b:49:
         77:24:fd:c3:78:eb:43:2a:3e:63:f6:f7:fb:a2:31:aa:59:ae:
         2b:be:92:59:53:92:c7:05:74:82:69:b1:ba:25:05:4f:8b:95:
         63:ee:d7:b4:72:f3:b6:0c:db:d0:e8:b5:c0:4b:74:ec:c9:3d:
         61:46:27:74:8b:08:b5:4a:69:43:a4:40:00:fa:5b:04:41:fa:
         b1:b8:2f:54:65:d8:b0:b5:a6:b3:3b:05:40:8d:4f:2c:0d:5d:
         fb:58:25:92:7b:84:e3:10:f5:76:67:9a:a2:bb:92:fe:7d:c3:
         51:68:50:9b:44:af:fa:9d:56:36:dd:3d:95:8c:c0:98:6d:cd:
         89:e1:96:c8:e5:8f:00:f5:4d:32:e7:39:68:6c:9a:16:7a:70:
         4a:4f:1a:c9:2a:7f:ce:aa:b1:3c:c3:71:e5:db:0c:21:bb:f8:
         4b:d0:a9:56:c5:3e:5e:29:79:8c:7b:db:56:47:ab:60:7d:4b:
         51:b9:b5:a7:34:f9:5b:97:8b:39:ec:6f:02:7a:64:b9:e3:d4:
         14:8b:7f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:04:21 2025 by rpki-client