Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2506ca4-5ea6-4c51-a5ab-86fb444fbf7a/1b8cab08-8213-3294-a58f-98442f42dc77.roa
File:                     1b8cab08-8213-3294-a58f-98442f42dc77.roa (raw, json)
Hash identifier:          EelW/MaDzs/eCHZzhN9f+K/zI68q6rSMq07PiqWQp50=
Subject key identifier:   62:D6:32:D0:7A:59:A6:1F:F7:44:7D:FA:53:C7:BD:C7:C8:DB:62:0C
Certificate issuer:       /CN=c2506ca4-5ea6-4c51-a5ab-86fb444fbf7a
Certificate serial:       010D0C9F432858483AB9638DE2F1A803163A2500
Authority key identifier: 53:1C:C2:92:EE:E4:F4:2F:FF:D6:5F:8D:6A:A7:99:73:69:96:E3:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2506ca4-5ea6-4c51-a5ab-86fb444fbf7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2506ca4-5ea6-4c51-a5ab-86fb444fbf7a/1b8cab08-8213-3294-a58f-98442f42dc77.roa
Signing time:             Mon 16 Dec 2024 20:57:18 +0000
ROA not before:           Mon 16 Dec 2024 20:57:18 +0000
ROA not after:            Sun 16 Mar 2025 19:57:18 +0000
asID:                     14618
IP address blocks:        208.80.252.0/24 maxlen: 24
                          208.80.253.0/24 maxlen: 24
                          208.80.254.0/24 maxlen: 24
                          208.80.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2506ca4-5ea6-4c51-a5ab-86fb444fbf7a/c2506ca4-5ea6-4c51-a5ab-86fb444fbf7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2506ca4-5ea6-4c51-a5ab-86fb444fbf7a/c2506ca4-5ea6-4c51-a5ab-86fb444fbf7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2506ca4-5ea6-4c51-a5ab-86fb444fbf7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3a:b9:63:8d:e2:f1:a8:03:16:3a:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2506ca4-5ea6-4c51-a5ab-86fb444fbf7a
        Validity
            Not Before: Dec 16 20:57:18 2024 GMT
            Not After : Mar 16 19:57:18 2025 GMT
        Subject: CN=6a0ef452-6878-4780-bc54-76b81d22da55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:db:69:08:93:3d:cc:be:ef:cc:1b:bd:52:02:
                    e3:07:49:5a:42:2c:5a:67:72:c9:bf:0c:31:d4:d8:
                    fe:97:9c:9f:9e:28:df:62:2f:5d:f9:35:42:75:77:
                    d2:a1:51:15:5a:4f:de:84:44:ea:25:e9:5b:67:f4:
                    33:a6:c4:67:32:18:51:99:dc:66:ee:9b:cc:f9:a7:
                    19:93:55:bd:2c:51:54:b9:5b:08:e1:c7:65:a1:e5:
                    54:82:23:7c:09:3c:67:73:63:6f:46:f5:ef:94:fe:
                    f7:60:a4:a2:96:07:8b:5b:c6:f8:35:f6:12:7f:bf:
                    c9:05:fe:be:cc:47:82:1e:f1:06:94:fb:4c:0f:16:
                    e6:e5:5c:f4:d8:b7:8d:a8:a1:47:5e:a0:c6:52:3b:
                    35:a3:4d:a0:2b:1d:98:b4:d0:38:be:f0:19:91:e2:
                    c0:bf:09:99:73:64:b8:5f:e7:0b:9a:71:6c:f0:19:
                    9d:ff:ed:c3:39:90:05:48:12:21:38:cb:ae:93:ed:
                    d6:19:90:5c:13:d0:49:0d:62:0a:a3:a3:78:aa:81:
                    2c:d9:88:67:c8:14:99:df:f1:34:3a:0d:74:ef:c2:
                    7f:7a:df:00:36:26:e7:0b:87:f6:66:7e:22:99:ab:
                    30:e8:e4:53:6e:86:19:dc:46:03:8b:07:5b:a6:9f:
                    c2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D6:32:D0:7A:59:A6:1F:F7:44:7D:FA:53:C7:BD:C7:C8:DB:62:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2506ca4-5ea6-4c51-a5ab-86fb444fbf7a/1b8cab08-8213-3294-a58f-98442f42dc77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2506ca4-5ea6-4c51-a5ab-86fb444fbf7a/c2506ca4-5ea6-4c51-a5ab-86fb444fbf7a.crl

            X509v3 Authority Key Identifier:
                keyid:53:1C:C2:92:EE:E4:F4:2F:FF:D6:5F:8D:6A:A7:99:73:69:96:E3:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2506ca4-5ea6-4c51-a5ab-86fb444fbf7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.80.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:58:4d:8b:db:73:bb:50:43:0c:9a:35:c4:3b:6b:b5:4b:d7:
         dd:6a:ee:5c:69:7b:9f:c4:b9:b5:9a:b8:24:0a:f9:9d:36:53:
         15:03:9e:9a:86:c9:e9:ac:d6:c5:26:a4:ba:7d:e8:e2:a7:a3:
         5b:44:86:0d:7d:d6:1e:e8:60:3a:52:ed:6e:32:16:23:6c:bd:
         23:44:82:f7:43:09:9d:c0:6d:8c:aa:ef:3f:0d:71:1a:19:ed:
         09:ab:7e:90:ef:d1:b8:cd:f6:e2:c4:f7:6f:b7:f0:71:0b:63:
         3f:3b:9e:70:68:fe:95:2a:6b:d2:f2:7a:b8:24:18:95:94:ed:
         f2:6a:5c:51:96:58:12:f1:96:3e:47:6a:86:65:a4:53:39:0e:
         27:74:c2:e0:ae:77:3d:86:76:da:48:f0:41:a8:df:23:2f:73:
         6a:4b:e0:bb:cb:df:77:27:c8:04:1c:83:1b:97:8e:10:d5:e3:
         91:5c:3b:60:c5:1d:a1:b5:d1:e2:48:a0:81:c2:fe:01:11:d5:
         37:52:e4:a2:1c:08:48:a1:fd:0e:ff:48:4d:4e:23:4a:47:ed:
         82:49:b6:97:ca:6d:db:c7:71:81:a9:25:ee:24:37:1f:a6:d4:
         c0:5a:9b:9f:cf:59:a0:d9:db:99:79:d6:6b:1e:d0:da:91:99:
         5a:11:e5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:41 2025 by rpki-client