Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/ae2eb33e-3141-3b16-8357-8e390f00f2ef.roa
File:                     ae2eb33e-3141-3b16-8357-8e390f00f2ef.roa (raw, json)
Hash identifier:          oszgQMfIzLZ/+KtfmHIdqncnwA1JKaepTgjP9LZ/ZkE=
Subject key identifier:   5B:F5:B4:6D:C5:39:8A:AA:28:FD:AC:FD:19:80:47:23:67:D5:59:21
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F432858484EDABF5CC876189BC8971080
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/ae2eb33e-3141-3b16-8357-8e390f00f2ef.roa
Signing time:             Tue 24 Dec 2024 02:00:38 +0000
ROA not before:           Tue 24 Dec 2024 02:00:38 +0000
ROA not after:            Mon 24 Mar 2025 01:00:38 +0000
asID:                     376
IP address blocks:        207.162.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4e:da:bf:5c:c8:76:18:9b:c8:97:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Dec 24 02:00:38 2024 GMT
            Not After : Mar 24 01:00:38 2025 GMT
        Subject: CN=45700ff7-e8de-4ea0-ab66-5af08e162292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:59:fe:7e:88:bf:2d:5a:c9:c6:20:31:f8:db:
                    cc:cf:7e:19:95:f5:41:9a:b2:39:98:ec:5d:a5:ab:
                    d8:12:06:11:6f:e4:e2:8e:e6:e3:ef:1b:40:d3:75:
                    c9:42:82:69:64:11:ab:91:e4:9a:98:f0:e4:b1:0c:
                    95:6a:c9:0d:f0:93:ca:75:ce:48:88:ae:93:dc:af:
                    3a:b8:b5:98:94:d3:0a:42:db:2e:31:2f:30:90:58:
                    0e:04:d4:51:8a:8a:73:ec:13:bf:59:d7:5f:17:33:
                    ce:09:b2:b6:a2:44:c4:8d:21:48:a3:9c:ff:23:11:
                    59:2a:d5:c6:e5:1e:42:94:cb:16:40:d5:10:e2:3c:
                    eb:fe:c0:24:97:c2:36:9d:b5:8e:0d:8d:1b:05:2d:
                    bd:97:bb:c1:fb:f2:7b:cf:b6:4e:9b:4a:07:fa:b0:
                    f5:cd:e3:7e:65:f2:da:86:eb:35:61:24:58:30:b6:
                    a5:58:e9:56:9c:e0:55:b5:0a:92:8f:f7:94:1e:f1:
                    cb:65:5e:2a:27:7a:4f:0a:46:cd:bf:71:94:e9:d8:
                    71:ad:a0:47:89:ef:d7:db:83:3f:a9:7d:cc:d3:fb:
                    cc:7a:b9:66:a3:74:29:b1:75:81:c9:7e:cd:e4:f4:
                    dd:95:1b:4e:74:70:90:c4:43:3a:33:f1:b6:9c:e1:
                    bb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F5:B4:6D:C5:39:8A:AA:28:FD:AC:FD:19:80:47:23:67:D5:59:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/ae2eb33e-3141-3b16-8357-8e390f00f2ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.162.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:10:4c:ba:08:1e:36:39:16:c6:7a:5d:1d:80:9d:88:af:a1:
         43:cb:7d:d3:7d:6e:a4:24:c2:3b:45:78:00:e6:8a:7a:16:91:
         52:42:bd:b1:84:74:73:76:d7:fe:d0:6f:b4:c9:cf:41:2a:e8:
         73:09:6e:62:3c:39:0b:d4:44:31:37:fa:61:e3:2e:7e:46:39:
         72:80:ed:07:6b:a0:f0:ac:b9:12:6d:23:a4:4b:73:9e:a4:08:
         17:01:2f:ac:47:3a:a5:3b:ce:4a:94:60:86:0a:ba:82:f1:1f:
         64:25:1f:8f:b2:53:b7:64:dc:d8:84:96:6f:72:26:03:04:31:
         ef:b3:ad:e1:8d:6f:e6:0a:2d:6f:ed:00:e1:20:a4:a2:ed:74:
         98:f3:b3:60:be:be:5e:1a:70:9e:cf:d7:0d:76:1d:82:76:91:
         60:f9:ed:32:22:25:51:22:28:05:d6:6a:81:60:52:a2:bb:42:
         0f:36:8d:ac:6e:82:89:be:fd:05:40:bb:4b:28:70:bd:99:b6:
         51:5d:4e:23:34:f9:0c:db:75:00:db:61:d9:ff:c5:90:09:4d:
         29:3e:d2:3b:ea:8d:4a:64:dc:ba:1a:80:10:aa:95:3c:fb:4d:
         86:93:9f:48:e7:c7:4c:12:05:7a:75:98:9e:87:b2:af:c3:d1:
         88:2d:58:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:57 2025 by rpki-client