Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/2863cd8d-e932-373f-bff5-503c406d81fa.roa
File:                     2863cd8d-e932-373f-bff5-503c406d81fa.roa (raw, json)
Hash identifier:          MxC8onf4OmTdPgvT+5xY/uNrU3ouyJ8cosXnm5YsSPY=
Subject key identifier:   70:1F:65:0F:9B:96:B6:D1:3A:DA:1A:72:0C:4B:2E:4D:12:17:5F:A1
Certificate issuer:       /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial:       010D0C9F43285848DD3BA479C0028794B4E8DE80
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/2863cd8d-e932-373f-bff5-503c406d81fa.roa
Signing time:             Thu 13 Feb 2025 02:00:40 +0000
ROA not before:           Thu 13 Feb 2025 02:00:40 +0000
ROA not after:            Wed 14 May 2025 01:00:40 +0000
asID:                     46455
IP address blocks:        199.71.230.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:dd:3b:a4:79:c0:02:87:94:b4:e8:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
        Validity
            Not Before: Feb 13 02:00:40 2025 GMT
            Not After : May 14 01:00:40 2025 GMT
        Subject: CN=e5ecc0ef-4b24-4836-b051-ac91eb30bb5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6e:52:58:86:00:ed:54:ca:16:63:30:46:3d:
                    37:19:a0:2b:7f:14:07:10:69:7e:87:37:b8:4a:59:
                    00:54:e0:2c:62:21:38:90:97:bc:74:f1:06:0a:9d:
                    4f:7a:07:c6:29:26:9a:ba:2d:6f:d6:91:9b:94:a1:
                    96:d8:cf:82:d8:64:55:37:58:fe:16:e0:76:0c:36:
                    ac:7d:63:83:23:68:e4:a4:53:0a:ef:2c:eb:38:5b:
                    26:5b:80:56:9f:90:ee:81:ee:a4:a0:66:4e:30:89:
                    10:ab:6a:53:f0:d1:4e:f3:9c:4f:06:78:26:14:12:
                    96:42:ea:82:83:bb:96:da:52:b5:58:54:19:81:c7:
                    9d:d1:32:8b:01:bd:66:f8:4c:34:c2:f2:cb:e0:5b:
                    9f:24:7d:1a:f3:88:a2:42:71:1f:db:14:91:53:20:
                    88:f7:cd:82:98:02:d8:29:18:96:6c:a4:21:29:f5:
                    b4:54:1b:72:94:d8:69:c5:c2:41:3a:69:b6:df:77:
                    81:b9:cd:40:3a:70:ee:c6:1f:01:22:80:b7:2d:68:
                    ab:86:0a:f6:75:7c:dd:89:84:a5:51:87:98:2f:94:
                    ea:87:96:2b:a5:4c:02:4c:aa:ee:d1:2a:05:40:b8:
                    d4:ac:72:69:ea:c2:f2:72:22:c8:bc:11:06:04:86:
                    0e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:1F:65:0F:9B:96:B6:D1:3A:DA:1A:72:0C:4B:2E:4D:12:17:5F:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/2863cd8d-e932-373f-bff5-503c406d81fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl

            X509v3 Authority Key Identifier:
                keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.71.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:05:ee:c2:14:f5:65:ef:86:66:98:4e:02:6a:3b:6d:9b:6b:
         67:8f:8f:e3:81:b2:8a:2e:5a:aa:a3:a0:f3:4b:5c:bf:57:6c:
         de:ed:2f:f2:3c:2f:91:98:73:53:0b:95:e3:ff:f8:fc:5b:41:
         f0:b5:fc:f5:cf:10:a5:d6:da:96:25:c0:ce:c5:56:a4:2c:58:
         40:8b:a6:38:66:b0:16:74:c5:93:cf:eb:4d:94:1c:f5:02:73:
         23:85:36:90:36:64:df:41:cc:9f:dd:6c:24:63:09:23:6e:87:
         23:e1:06:d1:f6:d1:34:c9:ab:3d:c5:25:f1:e0:02:bd:66:67:
         de:54:de:85:92:aa:cc:cf:92:92:39:fb:55:7e:cd:73:a1:7e:
         1e:e6:a0:d6:87:38:68:45:6b:46:70:20:df:3e:b8:2e:fc:77:
         d9:6a:e7:82:62:40:b2:bf:57:72:04:fc:32:c8:f3:1e:b5:13:
         9f:73:ed:23:72:20:4e:21:ab:86:9d:fb:4c:df:1d:ba:3e:9c:
         e3:56:c9:e4:28:ff:21:f1:d7:43:8a:72:3d:3b:44:b3:28:70:
         d2:67:3b:96:03:93:d0:2b:59:ee:30:83:9f:be:6f:bb:73:ca:
         3d:16:f6:b8:37:ff:ee:03:3b:4b:b8:ef:34:4e:5f:6e:9b:ab:
         f6:37:2e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:23 2025 by rpki-client