Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/7d4d6ea5-f2f1-352f-a26a-d47427d40f5e.roa
File:                     7d4d6ea5-f2f1-352f-a26a-d47427d40f5e.roa (raw, json)
Hash identifier:          cHpdaaDoKVpPpStJE6pJeFXG+moBybYuOWFvsuOl3pM=
Subject key identifier:   8D:42:95:88:F6:6F:EB:D1:56:53:6E:E9:4F:F3:3F:DB:85:F8:43:7C
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858483B500475D6AE3EABB3BE1E00
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/7d4d6ea5-f2f1-352f-a26a-d47427d40f5e.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     15290
IP address blocks:        207.230.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:04:75:d6:ae:3e:ab:b3:be:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=9bc30ac3-2fdb-44e8-8ddd-da225ca182ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cc:39:e7:de:1f:39:1f:fa:1f:33:90:94:40:
                    2f:e1:a7:94:3e:3c:b5:2f:bf:b9:77:25:d4:89:75:
                    5c:b4:51:b8:1a:92:ec:0b:8a:9a:42:8d:f2:b9:d4:
                    3e:e7:9c:7a:54:95:27:c7:fb:bd:cd:53:81:d2:d4:
                    bc:95:a0:09:85:15:c4:98:85:e7:1e:3c:98:c6:96:
                    f5:99:17:bb:e5:3c:db:c6:09:09:68:4f:80:96:9f:
                    e9:db:58:fa:84:69:06:a9:fd:78:d0:ec:7c:17:b3:
                    28:e5:ee:46:69:ef:d1:46:c4:17:aa:e6:84:88:52:
                    76:34:d9:45:81:61:58:38:d3:e9:47:44:e8:ec:80:
                    2a:c8:3e:21:20:88:ca:79:c9:f8:3d:55:3b:3c:1c:
                    ba:62:c9:18:4a:a8:3e:fc:ed:9d:e0:7f:d9:3f:96:
                    fd:3a:f6:35:5e:a2:7d:97:e6:f5:57:37:f7:e7:53:
                    66:64:d5:3c:56:8e:d1:5c:a6:f9:4e:8d:2e:40:61:
                    3c:fd:b7:8b:40:7c:22:c7:f4:2d:3c:88:b0:13:7e:
                    e8:78:ce:f6:f1:58:b6:e3:22:b3:ee:d1:e4:ac:c3:
                    5d:44:10:1f:94:1d:87:ee:a7:06:d2:49:81:27:fc:
                    2f:13:f5:95:d7:19:91:42:ca:3d:6a:a8:5e:64:4b:
                    fb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:42:95:88:F6:6F:EB:D1:56:53:6E:E9:4F:F3:3F:DB:85:F8:43:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/7d4d6ea5-f2f1-352f-a26a-d47427d40f5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:ce:b1:b6:1c:cd:f4:60:1c:15:ae:eb:f2:bb:20:49:b6:7d:
         7d:a1:f4:55:23:df:f3:3d:29:cb:8a:6c:ad:2a:f1:d7:7d:5b:
         c1:f9:2e:20:52:3b:14:aa:14:d3:aa:5e:21:9e:50:11:70:4a:
         e1:5a:11:23:4f:9a:40:53:de:e2:ac:c9:e3:a1:7e:5a:8d:e8:
         59:dd:d8:95:32:5e:6e:0f:fb:5d:97:50:88:8e:88:d9:15:58:
         ff:90:3b:13:5b:22:3d:ad:72:ec:4d:15:36:6c:47:a4:ac:10:
         a7:37:87:31:c6:54:06:b1:8c:d3:31:7d:e1:b7:90:f2:bb:9a:
         2b:c1:c9:70:ff:cd:2c:03:07:18:1c:7e:87:ef:0a:47:2d:65:
         b5:04:9c:2d:c7:90:bc:34:32:2c:94:c8:1c:c7:70:d2:77:8a:
         be:7c:1f:c7:df:be:5d:e8:83:a0:9c:4a:5c:55:0d:da:da:41:
         ce:39:8c:e7:1a:59:04:0b:62:06:9c:75:db:14:b9:32:e4:c7:
         05:9a:59:82:7f:38:12:67:3d:e5:14:d4:ce:c7:7c:3c:d0:70:
         45:ee:a5:6d:5d:7e:84:8a:4c:80:1f:47:c4:ee:f5:46:38:9c:
         a2:1c:af:5d:74:45:71:e5:e1:03:80:a4:de:cf:57:03:1c:8c:
         fd:a3:60:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:21 2025 by rpki-client