Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2/daba5534-f075-3304-b7ba-2bc53bbd08cc.roa
File:                     daba5534-f075-3304-b7ba-2bc53bbd08cc.roa (raw, json)
Hash identifier:          nxRfNThdCq0y61Jn8mtvy0sKR3tyFoD+fIG4GNmSx/Q=
Subject key identifier:   22:1C:10:AD:98:71:BD:3E:4C:36:D4:E4:F0:FB:0C:15:7D:91:D2:D6
Certificate issuer:       /CN=91d07432-fb87-439b-b14e-e063470edfd2
Certificate serial:       010D0C9F4328584827C545CDB9F6869D12C04BE0
Authority key identifier: FF:B0:3A:26:A8:5E:CE:2E:EC:AC:D1:74:45:5C:4C:38:D1:24:A9:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2/daba5534-f075-3304-b7ba-2bc53bbd08cc.roa
Signing time:             Tue 10 Dec 2024 02:00:40 +0000
ROA not before:           Tue 10 Dec 2024 02:00:40 +0000
ROA not after:            Mon 10 Mar 2025 01:00:40 +0000
asID:                     14618
IP address blocks:        72.18.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2/91d07432-fb87-439b-b14e-e063470edfd2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2/91d07432-fb87-439b-b14e-e063470edfd2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:c5:45:cd:b9:f6:86:9d:12:c0:4b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91d07432-fb87-439b-b14e-e063470edfd2
        Validity
            Not Before: Dec 10 02:00:40 2024 GMT
            Not After : Mar 10 01:00:40 2025 GMT
        Subject: CN=db7d20eb-92af-4c9e-b509-d946ab904dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9d:52:39:4a:9a:1e:c0:bd:24:f7:07:55:33:
                    da:ef:bb:99:58:d4:7c:22:d5:20:92:23:79:23:c5:
                    f5:73:65:88:f4:b1:3e:74:f0:a7:04:2e:7e:ce:47:
                    fb:38:ca:33:78:e3:29:24:a4:68:19:b0:72:9e:bd:
                    f2:63:8e:78:1d:0c:e0:8b:81:32:de:e5:a4:ba:52:
                    6b:24:f6:50:55:fa:9d:9b:ac:c0:ef:b0:e3:db:15:
                    27:87:98:d6:a0:65:84:f3:a2:a0:5b:02:95:b1:9c:
                    00:d4:f2:d9:50:6b:4b:ee:c2:46:26:71:7f:f7:f0:
                    af:d9:d6:c6:dc:12:77:54:2e:b1:6b:ca:f9:22:4b:
                    47:21:4c:8e:83:0c:dc:80:5e:b3:b4:3c:af:3d:3b:
                    ed:f9:df:a9:44:60:5e:61:ab:63:cd:7b:28:46:bb:
                    41:d6:6a:f0:e8:44:f8:74:69:a8:be:ec:a8:53:cd:
                    1b:6f:da:fe:2f:31:1f:7b:09:a7:b1:b9:c9:6e:37:
                    8f:7a:65:e0:f7:ed:bb:06:12:ea:f6:5b:32:e2:06:
                    15:42:29:ff:21:7a:35:3b:83:5e:03:c3:be:62:ac:
                    39:91:ee:b9:0e:b8:6c:e5:b9:c8:f8:3a:72:d8:dd:
                    5d:9d:e3:9e:21:aa:2c:89:eb:88:b2:d7:9d:97:65:
                    9e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1C:10:AD:98:71:BD:3E:4C:36:D4:E4:F0:FB:0C:15:7D:91:D2:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2/daba5534-f075-3304-b7ba-2bc53bbd08cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2/91d07432-fb87-439b-b14e-e063470edfd2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:B0:3A:26:A8:5E:CE:2E:EC:AC:D1:74:45:5C:4C:38:D1:24:A9:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.18.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:67:15:4c:20:5b:3f:b5:e9:34:14:ed:33:6c:b7:f4:4f:4d:
         7a:81:bf:7f:99:69:98:51:48:0a:cb:77:91:3c:e5:e7:e6:84:
         3c:01:df:c7:ea:9b:04:eb:e6:03:53:21:49:e7:d2:fd:a8:37:
         13:ed:65:2f:11:20:c9:83:a7:e8:02:30:96:80:8c:cb:71:7d:
         40:69:8b:50:7e:98:c3:68:94:13:61:bf:b3:97:fb:d5:cb:8c:
         8f:c7:c6:13:83:e8:be:85:31:f8:f6:a7:6e:f3:b7:0c:b3:fe:
         76:dc:e5:e5:aa:2f:0c:b1:4e:30:ae:8f:88:5a:39:46:cc:de:
         06:07:bf:ca:ba:09:cf:bc:dc:58:af:18:3b:72:39:c2:c4:a6:
         89:50:88:ba:c3:c2:ac:5e:39:59:5d:ee:8b:53:77:c5:f7:58:
         c1:86:89:42:d1:1a:07:ac:74:6a:b9:f3:22:3a:d9:4a:49:b6:
         c6:55:23:77:ae:f0:a8:a6:53:b4:a8:6c:6c:b5:ec:b3:a4:66:
         c4:c8:4f:cb:d0:66:9f:56:40:7a:02:72:f1:64:9c:f9:b0:b1:
         d8:21:06:32:4c:89:2c:a4:41:27:48:56:77:e1:34:a2:30:59:
         36:30:29:e8:35:76:a1:74:8f:df:74:6c:dd:3b:8f:f8:79:a5:
         67:29:90:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:06 2025 by rpki-client