Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/33559173-86f1-3ca2-b6a0-a0c0930573bd.roa
File:                     33559173-86f1-3ca2-b6a0-a0c0930573bd.roa (raw, json)
Hash identifier:          RRc2blluSVH/nUmo9qy1Udi9jxfRdBr6cf5j+CSK8qw=
Subject key identifier:   76:A4:2E:87:B0:D2:85:B0:7F:1F:51:11:D3:9A:1B:A5:92:FE:25:B7
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858482BF55B4519020ABEEE874B40
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/33559173-86f1-3ca2-b6a0-a0c0930573bd.roa
Signing time:             Wed 11 Dec 2024 14:00:52 +0000
ROA not before:           Wed 11 Dec 2024 14:00:52 +0000
ROA not after:            Tue 11 Mar 2025 13:00:52 +0000
asID:                     40560
IP address blocks:        159.18.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2b:f5:5b:45:19:02:0a:be:ee:87:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Dec 11 14:00:52 2024 GMT
            Not After : Mar 11 13:00:52 2025 GMT
        Subject: CN=755e78e1-434f-462b-83f2-9137cca2a5e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dd:ff:16:63:e1:f8:6d:5f:f5:0b:85:de:79:
                    e5:ce:f7:50:83:1d:70:2c:a5:a4:b4:6c:a7:a0:c2:
                    ce:95:34:54:02:87:43:de:6b:75:10:ea:ce:3a:d5:
                    66:2d:67:0f:81:e3:5b:2b:59:c4:11:6a:99:e4:1b:
                    ec:ae:4c:31:6a:5a:d5:11:64:45:79:17:6c:58:51:
                    b8:f0:ae:b2:f7:25:74:23:15:99:a1:1e:a6:75:df:
                    f7:d3:78:71:86:92:0c:25:b1:57:f2:e1:97:e0:84:
                    37:ba:11:53:98:0f:7e:e3:65:d1:51:e2:da:75:1d:
                    b8:ab:16:82:b9:f8:04:bd:74:03:37:aa:2f:19:53:
                    16:17:6c:cb:d1:87:55:ca:ed:42:ee:ca:3b:26:19:
                    4d:45:9a:0d:e3:3f:39:10:7a:26:7e:a3:28:75:f6:
                    78:bf:8a:98:5c:6e:0d:79:07:07:71:a8:d6:ba:1a:
                    b9:d5:86:4c:ef:0f:6d:e0:ac:e7:57:35:c7:ae:8d:
                    1d:e8:72:42:a8:d5:8e:bc:82:5c:10:23:fa:94:7d:
                    ce:c5:71:cf:d2:e1:4e:67:c7:3b:cc:aa:78:01:b9:
                    aa:f9:cb:bc:ff:1f:c8:f7:7b:e5:f4:94:d6:93:0a:
                    81:55:b7:49:4c:67:15:86:0b:67:71:5d:7d:55:ad:
                    65:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A4:2E:87:B0:D2:85:B0:7F:1F:51:11:D3:9A:1B:A5:92:FE:25:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/33559173-86f1-3ca2-b6a0-a0c0930573bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:71:12:c1:61:6c:0b:92:58:16:9a:e7:2b:f0:f3:2c:50:84:
         7a:59:1d:4e:45:4d:41:7a:20:d1:ea:a8:a3:27:d0:8b:22:fa:
         7f:ef:d9:89:ba:3e:40:88:a7:65:8d:2b:c1:0f:5a:93:c7:08:
         be:25:59:d8:9d:60:fd:d2:62:ee:da:9d:35:17:2d:06:6e:4b:
         bc:d5:b2:0a:f6:70:df:35:d3:fd:ba:f6:2f:4f:fd:44:6c:e6:
         7a:d8:c2:f2:05:ca:81:9a:8d:f3:b5:d1:82:2e:15:18:e7:48:
         57:5e:74:a3:e3:e5:a1:52:23:63:69:17:78:2e:c6:d7:e7:bb:
         66:7d:a7:ec:1f:2a:d7:00:dd:d1:50:f7:a8:33:6e:8a:76:e1:
         b1:41:60:ec:97:85:fc:a2:95:8a:b4:4b:e7:55:cf:72:4e:84:
         14:a2:15:30:d6:b7:5d:6f:0c:c5:ee:46:ce:9b:f3:3d:85:5a:
         9e:ed:83:99:1b:c2:3e:00:90:86:b3:4e:0d:7d:73:f0:15:f7:
         ad:ef:a8:cc:d7:7a:be:22:2e:a4:f1:03:92:09:a8:bd:01:a2:
         ef:d3:15:55:35:23:00:35:1f:6e:7b:3e:cb:ce:7a:e5:ac:b5:
         e0:81:7e:90:58:17:8f:ac:2c:73:ee:52:c2:f7:f5:cc:99:98:
         b5:7c:29:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:28 2025 by rpki-client