Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/78155cb5-b7a2-39e5-9c0d-f5af7ffdbc95.roa
File:                     78155cb5-b7a2-39e5-9c0d-f5af7ffdbc95.roa (raw, json)
Hash identifier:          tzzZcNZKLCHCBlf5CA7A8Lb4tHUfuAbK0PZpXPZE3RI=
Subject key identifier:   75:F0:EE:28:37:94:13:82:2E:0D:3D:AD:97:68:88:B0:7D:BA:1D:72
Certificate issuer:       /CN=73980674-4684-4801-b116-e9e08b4ff9f4
Certificate serial:       010D0C9F43285848D7A65320BD0D1B7ED5EBF300
Authority key identifier: 14:DD:E8:8A:3F:2B:21:89:32:80:26:85:A2:B1:DD:8F:BB:30:75:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/78155cb5-b7a2-39e5-9c0d-f5af7ffdbc95.roa
Signing time:             Tue 11 Feb 2025 02:00:39 +0000
ROA not before:           Tue 11 Feb 2025 02:00:39 +0000
ROA not after:            Mon 12 May 2025 01:00:39 +0000
asID:                     393875
IP address blocks:        152.37.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/73980674-4684-4801-b116-e9e08b4ff9f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/73980674-4684-4801-b116-e9e08b4ff9f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d7:a6:53:20:bd:0d:1b:7e:d5:eb:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73980674-4684-4801-b116-e9e08b4ff9f4
        Validity
            Not Before: Feb 11 02:00:39 2025 GMT
            Not After : May 12 01:00:39 2025 GMT
        Subject: CN=4d78fee4-134b-486e-8825-8f0c856443f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0f:32:3c:56:e1:17:8d:b5:3d:22:25:54:bc:
                    b5:10:f8:7a:34:e6:07:c2:4d:d7:ff:e1:3b:ad:68:
                    90:84:4a:e9:92:df:b8:4a:96:a3:70:b5:24:34:d8:
                    42:a2:74:d2:96:9b:21:2d:f9:04:7a:7b:b2:b9:f8:
                    81:0b:69:9b:8b:8e:98:0e:02:49:75:ca:16:a3:38:
                    19:64:2a:60:a4:02:89:17:b5:ef:d0:1d:51:8d:79:
                    be:fe:cf:21:89:d1:68:fd:b5:dc:6f:c3:39:5d:bc:
                    5c:1c:3f:17:22:43:d7:2e:c6:eb:74:6e:67:4e:cf:
                    90:33:06:25:a8:62:bf:a9:48:8f:29:f0:b3:c2:ef:
                    80:66:25:78:ad:84:5b:cb:9d:46:38:6a:59:71:3a:
                    15:55:c6:a2:4f:33:26:2f:67:12:a0:af:7e:b0:c5:
                    ee:a0:4f:12:37:ce:4d:d4:ab:0b:96:9a:bb:86:ce:
                    7b:9e:81:76:35:ec:99:9b:29:20:7a:e8:0d:32:48:
                    ab:1e:e1:a1:f2:ef:bc:37:a3:5c:6f:36:46:68:f7:
                    50:08:17:26:f0:06:52:13:3a:11:a8:b4:7a:cb:45:
                    b6:f0:23:a0:50:05:20:46:29:90:a8:25:7c:ef:e2:
                    4e:1d:d6:6d:38:65:78:92:bd:da:ec:50:f2:e0:e4:
                    36:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F0:EE:28:37:94:13:82:2E:0D:3D:AD:97:68:88:B0:7D:BA:1D:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/78155cb5-b7a2-39e5-9c0d-f5af7ffdbc95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/73980674-4684-4801-b116-e9e08b4ff9f4.crl

            X509v3 Authority Key Identifier:
                keyid:14:DD:E8:8A:3F:2B:21:89:32:80:26:85:A2:B1:DD:8F:BB:30:75:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.37.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:39:a2:b7:72:84:4d:9e:c3:52:fa:87:7f:60:04:bf:00:a5:
         36:5c:47:19:74:86:06:96:88:a7:59:30:4b:68:1c:77:84:81:
         ee:9d:4d:e0:73:be:0a:87:57:8d:b7:24:7d:e5:31:3f:3e:3d:
         9b:09:39:fe:b6:38:9f:7f:e3:30:7e:06:55:0c:58:9e:d5:dc:
         c7:1c:c8:e0:1a:4b:09:da:ec:25:21:e0:a1:14:9b:86:5c:f2:
         15:81:41:dc:73:07:9b:73:1e:b6:73:74:46:57:3a:f0:68:2e:
         91:e6:b3:75:e6:f4:2f:73:72:ca:a5:cd:fe:fe:d6:fe:93:3c:
         6a:0d:64:84:04:23:fd:5b:a3:08:c8:29:b6:98:b5:49:11:f1:
         19:1b:be:94:b9:0c:ba:05:0d:8f:20:fc:9f:64:ea:a3:10:09:
         ca:88:9b:0b:72:c1:3b:df:9d:1b:c1:6b:08:e9:90:a7:f4:04:
         a4:70:32:db:16:b7:72:13:a7:72:97:35:7b:c3:0a:b3:b3:b2:
         d4:3a:1c:bf:5f:58:db:d5:dd:bf:f2:12:11:2b:de:d0:da:cd:
         68:d7:56:cb:55:f1:38:92:29:fc:81:40:5e:44:37:41:2f:39:
         80:bb:66:79:0a:7f:71:b7:e3:dc:f8:20:38:93:10:78:3d:0f:
         d3:21:1b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:41:18 2025 by rpki-client