Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/457a525f-110e-3b8c-bf8a-9b319f9ae451.roa
File:                     457a525f-110e-3b8c-bf8a-9b319f9ae451.roa (raw, json)
Hash identifier:          So8ED1euECm8wVyS8FgeTPxfJrRZu532JSkHzWGozg0=
Subject key identifier:   46:96:30:92:67:63:A0:C2:43:C1:C0:AD:11:B7:14:A1:16:78:15:5B
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858491AA6BBE0FBB2647E83D9F080
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/457a525f-110e-3b8c-bf8a-9b319f9ae451.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     46129
IP address blocks:        159.18.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:bb:e0:fb:b2:64:7e:83:d9:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=236a302a-fc29-4001-a267-83d85814a78e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f6:6f:32:93:15:d1:9b:9d:c8:7f:80:e8:95:
                    e4:73:50:6c:67:b7:d9:d1:57:95:87:70:4e:f1:bb:
                    ee:e9:28:38:03:64:1f:d6:87:ca:ce:a5:db:97:87:
                    fa:8b:34:f8:45:72:3f:d7:1c:31:4d:94:2b:f2:59:
                    e4:3c:62:19:e4:aa:5c:f7:b0:55:6e:16:33:b5:b8:
                    88:6a:f1:5a:29:4b:4a:d0:d6:e7:d8:64:c2:b0:a2:
                    3a:93:57:4c:53:12:dc:e7:92:8e:5d:28:94:13:00:
                    1a:fb:e3:36:2b:7a:64:80:74:6c:8d:05:f2:22:a2:
                    df:b1:ca:06:a7:61:82:8a:b6:1e:25:60:07:19:b2:
                    02:4c:e4:93:7f:d5:13:cb:e4:98:4a:7a:3e:57:50:
                    32:10:66:ae:53:8d:02:0e:cd:cc:52:22:b0:1e:1e:
                    f6:05:25:5d:b9:f2:8a:9f:3f:21:3e:33:01:e4:b5:
                    55:99:12:34:b8:13:3a:37:5d:05:51:47:82:96:6e:
                    a0:75:04:65:be:27:32:2e:81:c6:d5:39:42:dc:2e:
                    19:68:8a:83:21:21:7e:c4:9c:39:44:66:1f:c2:34:
                    cb:1a:4e:13:54:83:56:bd:87:fd:47:15:4f:5a:99:
                    e0:39:f8:32:20:82:d3:c4:d4:b4:8d:2a:67:2d:50:
                    58:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:96:30:92:67:63:A0:C2:43:C1:C0:AD:11:B7:14:A1:16:78:15:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/457a525f-110e-3b8c-bf8a-9b319f9ae451.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:ec:92:82:67:11:6b:89:d3:1e:09:67:e3:36:6b:9b:34:da:
         4c:20:6f:ad:50:f1:0e:83:2a:4a:80:13:0f:72:36:7b:e6:76:
         0b:03:cb:5c:3e:1b:1f:28:a0:da:99:21:f7:4e:23:00:e3:ca:
         66:28:ef:71:6e:fa:8c:16:97:86:3c:10:b8:64:33:74:55:7d:
         99:c8:56:03:8d:dc:40:e2:37:1e:33:6d:54:ea:dc:eb:cf:f9:
         cf:a6:15:9d:9b:8f:c7:40:c2:91:67:1b:c9:f9:5f:bc:3c:28:
         17:b5:4d:00:11:f6:2c:94:23:1e:1f:36:04:5b:27:9c:05:de:
         e3:be:70:e0:a7:c0:f8:d3:7a:56:82:5d:13:2c:53:d5:3d:3c:
         a7:3f:76:65:a1:6e:15:a3:f7:fd:54:75:4a:ab:5b:0e:c5:ff:
         70:f9:32:cd:2e:72:8e:9d:e4:9d:4d:6e:3a:52:b6:47:0b:a4:
         90:8e:2e:de:b8:fb:9b:c7:7f:ac:c3:e8:4f:23:35:cb:b4:ce:
         78:1e:b3:29:db:19:d3:0f:1b:fb:8a:b6:fe:f4:89:96:44:4c:
         c9:60:e6:9e:15:6f:dd:0f:30:52:61:bf:a6:04:46:93:b1:ee:
         0c:62:67:5f:e2:60:05:e9:e0:84:d0:78:11:f5:46:24:e7:82:
         e8:ec:e9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:00:22 2025 by rpki-client