Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/b55c9de2-b662-38ee-becd-93a50aa797af.roa
File:                     b55c9de2-b662-38ee-becd-93a50aa797af.roa (raw, json)
Hash identifier:          SBqGjFJNzCd/qcAIB+8urBXRn2UBD7U2aHFSO2PWWUw=
Subject key identifier:   6E:DF:18:B9:BA:CE:A8:D0:DE:BC:CA:43:B0:AB:9D:4B:A4:51:B9:30
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858483B5005AD87AC34B9E2B9C900
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/b55c9de2-b662-38ee-becd-93a50aa797af.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     15290
IP address blocks:        209.112.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:05:ad:87:ac:34:b9:e2:b9:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=dd0210cc-3e30-43cb-8fad-e9b560b217f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3a:6d:c0:01:e8:e8:bb:29:1e:8c:eb:fb:f2:
                    cc:63:d7:fa:16:7d:58:4c:4f:98:51:0d:64:55:08:
                    d2:59:39:20:20:55:c0:e6:e4:f9:04:1f:62:0f:c8:
                    f4:71:84:f5:ee:7f:fa:8f:f7:8f:d9:f6:46:cf:59:
                    1a:b8:8a:d9:db:db:91:d1:d8:f0:15:9f:fb:ad:81:
                    11:23:95:6d:68:cf:f4:32:5c:c6:de:7c:35:56:20:
                    5d:aa:40:e8:b0:b7:b0:8c:c8:33:2f:5d:d8:d0:a1:
                    1d:52:96:aa:22:bd:c1:3b:71:f9:b3:f8:a8:6a:14:
                    91:15:89:8f:46:b4:c7:ae:2b:10:9e:66:77:ea:6a:
                    72:b2:33:0e:3a:b3:98:6e:89:6e:fc:c4:34:36:44:
                    98:90:aa:73:3e:93:1b:37:93:90:da:bc:cd:55:6a:
                    fc:15:ac:bc:df:31:3e:82:86:44:54:ad:df:c8:ba:
                    de:9a:d4:4e:e8:1f:16:79:5b:23:5c:48:34:4b:6c:
                    53:49:c9:6c:44:fe:57:45:09:ad:5b:e6:d7:de:4f:
                    bc:94:5c:35:cf:86:94:e4:26:53:af:d9:87:63:40:
                    a4:e0:8d:f0:8c:20:99:df:cc:63:bd:06:ea:f0:5c:
                    fc:cc:44:d6:04:a3:74:f9:b5:a8:4c:c3:4d:9c:01:
                    be:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DF:18:B9:BA:CE:A8:D0:DE:BC:CA:43:B0:AB:9D:4B:A4:51:B9:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/b55c9de2-b662-38ee-becd-93a50aa797af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:06:43:45:b7:ee:f1:8c:48:69:19:8f:d5:0c:85:c9:8d:88:
         a1:2b:76:95:81:e9:84:0a:c5:ff:a1:80:26:90:32:b0:af:a2:
         7c:b9:bd:46:91:93:03:75:9d:bc:5e:ee:95:d8:c8:ec:a6:ee:
         58:3e:65:67:4b:be:da:81:20:be:22:ed:a5:28:eb:66:5e:63:
         59:a5:35:8a:02:a0:9d:5a:c2:90:2b:43:10:b6:13:b1:f8:39:
         bd:e8:58:8a:64:a7:c7:6e:b7:46:32:2b:b5:be:d3:88:f3:e8:
         36:57:37:7b:ae:70:6c:63:cd:b9:1a:05:ca:8b:a4:88:ed:8a:
         97:60:b4:30:4b:3c:a6:4d:b6:f0:0c:f3:1f:ab:11:cc:f6:13:
         c9:62:72:e6:7e:0e:60:b3:50:84:87:e7:f5:97:e5:f3:5d:23:
         96:15:d8:69:56:f4:fb:d9:f2:f4:72:d2:55:57:7e:49:8e:dc:
         ec:b4:be:6d:bd:da:55:2b:b8:3c:4a:5b:0b:bc:08:4f:c4:f2:
         a5:3d:88:fb:fd:6a:b9:81:4f:94:02:18:77:9f:c4:6c:8a:10:
         56:ff:d4:50:65:07:ee:04:80:e5:ac:0a:97:54:74:ac:14:b2:
         4b:54:ab:5d:c5:4e:b5:66:31:c5:db:ad:9f:2d:95:b2:e9:90:
         c9:31:3d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:48 2025 by rpki-client