Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/c783b5b1-62d2-3e36-9c48-67d35e8c19f8.roa
File:                     c783b5b1-62d2-3e36-9c48-67d35e8c19f8.roa (raw, json)
Hash identifier:          DBs+AQz7+/SSUUBmhK7qC6999MhXTuOl5pYJ/NAStvY=
Subject key identifier:   D9:50:51:C0:C7:84:5B:7D:77:FA:6F:8D:39:6F:D9:73:23:6A:D8:62
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F432858484EDABFD5AFEB3F90464F4500
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/c783b5b1-62d2-3e36-9c48-67d35e8c19f8.roa
Signing time:             Tue 24 Dec 2024 02:00:38 +0000
ROA not before:           Tue 24 Dec 2024 02:00:38 +0000
ROA not after:            Mon 24 Mar 2025 01:00:38 +0000
asID:                     376
IP address blocks:        207.162.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4e:da:bf:d5:af:eb:3f:90:46:4f:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Dec 24 02:00:38 2024 GMT
            Not After : Mar 24 01:00:38 2025 GMT
        Subject: CN=207a8f5c-90e6-4b34-8695-a27e49a16762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:45:14:82:b8:68:1e:2b:f8:4c:f2:04:23:65:
                    fb:e8:c3:6b:62:ed:4d:5d:b5:f5:d6:26:93:8a:ab:
                    94:95:c9:2d:0b:f3:1c:7d:09:88:14:91:a6:35:b3:
                    7a:8d:3a:45:48:f7:2e:8e:2e:26:93:07:2b:8c:05:
                    e7:81:1b:f3:ad:d7:8e:ac:8c:fb:86:3f:7d:1b:e2:
                    d8:85:09:a3:aa:9b:fe:b2:ac:c8:bb:3b:27:ac:c5:
                    1b:16:2e:ed:40:8c:e8:9f:9b:5c:02:fb:94:31:aa:
                    a4:44:da:eb:a5:99:55:2b:df:83:36:c9:76:fd:bc:
                    08:db:b3:b4:46:0a:4e:44:b0:d2:de:00:75:35:70:
                    d9:82:3a:af:f3:53:55:c8:eb:7c:5c:e5:18:d9:65:
                    79:84:a4:aa:51:45:9d:76:3a:4d:16:a3:b8:35:ab:
                    09:5d:24:2c:da:67:57:8b:9c:f7:97:43:3c:88:ce:
                    c0:ed:6d:be:59:df:e9:8b:66:97:14:e6:a0:13:6c:
                    1b:4d:a3:e4:32:af:51:9b:bc:33:10:eb:0f:5b:94:
                    d1:5b:a8:43:55:2e:b8:7a:a0:84:60:a9:de:81:98:
                    a6:aa:96:9a:60:dd:51:64:14:3d:a2:bb:4f:7d:d6:
                    cd:fc:1e:b2:4c:27:e1:2b:a0:5d:11:54:ce:0d:8a:
                    bf:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:50:51:C0:C7:84:5B:7D:77:FA:6F:8D:39:6F:D9:73:23:6A:D8:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/c783b5b1-62d2-3e36-9c48-67d35e8c19f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.162.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:bc:f7:0f:7b:36:53:76:2c:68:99:d4:11:1e:b2:2f:74:e4:
         68:1a:ae:d5:96:7c:89:16:ec:f9:63:be:b6:37:94:fb:a1:6b:
         22:ba:01:5f:24:e7:3a:c6:7b:e0:6f:91:f8:13:48:0f:17:35:
         ac:70:68:75:ce:25:88:ad:83:49:57:4a:44:bd:ee:42:b2:86:
         33:82:27:2b:9d:4b:e4:3e:fb:68:c2:ed:f1:33:65:7b:f9:37:
         5b:1d:b5:f2:cd:7a:a1:50:09:26:58:b0:5c:9c:89:e8:af:13:
         37:b9:26:bd:aa:29:a2:75:61:8f:6f:83:7a:63:dd:81:e2:e9:
         54:3c:3a:81:e1:7d:b0:9a:8d:4c:2a:95:a1:34:89:7a:77:5f:
         d9:cf:ef:1e:c6:16:8e:80:60:da:2b:74:19:89:e1:7d:ea:e8:
         e1:32:73:20:1d:f9:3a:eb:58:e6:6c:ed:cc:c9:b1:73:ed:36:
         de:43:4a:c0:cc:32:e9:58:2b:57:14:40:4d:dc:ab:ac:ea:cb:
         85:8e:2b:59:af:19:2f:b0:ff:32:be:f9:df:3b:e1:65:c7:73:
         cc:61:70:58:db:ef:16:32:cd:2f:74:7a:f8:92:7f:7f:3d:92:
         a7:0b:4e:5b:82:9f:c4:83:ff:cc:40:4f:02:ab:03:89:57:19:
         35:fd:31:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:17 2025 by rpki-client