Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/e77ce8b1-7b72-36cf-93c0-8f26bf5dca15.roa
File:                     e77ce8b1-7b72-36cf-93c0-8f26bf5dca15.roa (raw, json)
Hash identifier:          vqoSS3934F6V/ZDVxB7s131OqNiWRwKs4ZZg4u2jRgI=
Subject key identifier:   1C:AE:E4:3F:DA:FC:95:85:30:C9:8C:ED:39:03:41:17:EA:E8:C5:5F
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F432858488AE0A6DFAC37D0F16740D920
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/e77ce8b1-7b72-36cf-93c0-8f26bf5dca15.roa
Signing time:             Tue 14 Jan 2025 14:00:51 +0000
ROA not before:           Tue 14 Jan 2025 14:00:51 +0000
ROA not after:            Mon 14 Apr 2025 13:00:51 +0000
asID:                     109
IP address blocks:        161.44.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8a:e0:a6:df:ac:37:d0:f1:67:40:d9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Jan 14 14:00:51 2025 GMT
            Not After : Apr 14 13:00:51 2025 GMT
        Subject: CN=79dff7e0-6920-4ddf-93d5-129c5bb62355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:77:54:31:81:e1:1e:3a:a8:76:59:0b:28:c0:
                    cc:86:8e:eb:84:9e:18:25:75:97:6e:3b:00:36:1a:
                    de:27:8f:99:e8:20:a2:02:06:de:f3:97:d1:be:1f:
                    ca:ae:cf:50:20:53:e4:ba:b2:ee:ae:c0:55:6b:78:
                    b0:f7:24:21:7f:6e:ce:a8:25:8d:b5:c7:58:e1:ae:
                    9c:b4:ac:78:63:18:35:e1:cf:a3:fa:de:3a:65:a3:
                    fc:80:20:ec:1b:f0:ea:c4:3d:eb:3a:1e:78:28:74:
                    e3:d9:ff:2b:c6:cc:9e:6d:9c:79:19:34:e1:be:6b:
                    e2:d6:35:76:96:cd:91:78:88:8c:b1:6a:70:d1:eb:
                    fc:91:6e:fc:75:b8:4d:d7:20:74:eb:fa:bb:dd:61:
                    2c:9e:a2:45:c2:18:8a:ff:50:ee:ef:9d:ab:1c:1c:
                    09:52:21:fd:5d:93:c2:69:35:c0:e1:b0:bb:62:5f:
                    4b:a1:27:e5:7b:f2:7a:8d:0d:2e:66:1b:5b:bd:3b:
                    8d:d3:2a:7e:20:4b:30:15:47:a0:b0:ce:1c:e6:e5:
                    cc:67:f1:22:7f:7c:07:35:55:54:7b:bd:fd:be:fa:
                    58:23:b9:55:ca:f6:40:c1:55:02:9b:b6:09:ec:43:
                    c2:75:23:7d:3d:8f:c6:bc:c1:2c:1f:8f:1c:38:3b:
                    bb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:AE:E4:3F:DA:FC:95:85:30:C9:8C:ED:39:03:41:17:EA:E8:C5:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/e77ce8b1-7b72-36cf-93c0-8f26bf5dca15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.44.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:78:ad:c6:53:5f:d9:2d:49:b8:47:e2:5e:90:a0:95:61:63:
         e6:71:eb:7f:5e:4a:8d:18:1c:ac:dc:53:0c:3d:75:da:d3:47:
         1b:6b:1e:77:51:e4:48:e9:95:56:ca:59:e7:83:c6:58:5c:38:
         51:ec:bc:cb:18:00:1c:a2:db:99:d8:08:61:73:00:1e:75:02:
         19:1e:3e:77:c8:c9:03:4c:9a:f1:fd:d3:fd:36:db:48:68:f0:
         f9:17:64:da:67:b2:17:90:07:f9:d0:ca:3c:73:a6:44:66:7d:
         78:1c:4d:6b:6d:9b:b0:f0:07:c1:11:00:d1:5e:66:dd:d7:12:
         e2:35:15:e2:0b:72:8c:49:01:fe:d8:14:79:ab:fe:90:65:cd:
         e3:ce:91:ad:68:8c:ca:6a:58:06:0a:0d:2b:8a:35:84:fb:99:
         5d:12:5c:84:f6:a2:35:a8:a0:93:ab:50:b9:a4:78:ed:ab:c5:
         a5:62:d9:2c:c4:83:d2:54:0b:29:bc:62:3e:cc:d0:53:39:6c:
         39:14:42:40:a6:ec:a0:d3:fa:9f:02:9c:25:10:6a:53:f3:11:
         50:e3:39:94:c1:b5:8b:a6:a1:9c:dd:e4:ab:74:26:a2:76:a8:
         9c:b1:9a:b8:c0:00:8c:f3:16:ba:18:f5:da:e1:62:15:9c:9e:
         2c:99:8d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:40 2025 by rpki-client