Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/ef7e153d-45df-351a-8da1-da52a2a74e64.roa
File:                     ef7e153d-45df-351a-8da1-da52a2a74e64.roa (raw, json)
Hash identifier:          SBQnDt4BBOFrthPJn/esLD+/P95Pp4tE6Lc4PiPoXrc=
Subject key identifier:   33:F6:80:4E:B0:AE:74:47:6C:CE:56:FF:08:EA:28:0A:57:34:90:E1
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858483B5000964EC13C31B4AC65F0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/ef7e153d-45df-351a-8da1-da52a2a74e64.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     22863
IP address blocks:        159.18.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:00:96:4e:c1:3c:31:b4:ac:65:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=450320b4-d506-43af-8e55-100391eed271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4e:2e:12:9d:55:33:e5:ad:bd:94:20:d0:2c:
                    a7:73:b8:35:be:b7:ff:86:f9:38:58:e1:17:fb:ef:
                    f9:0d:8c:6f:e9:4e:18:17:81:fa:44:dc:26:85:65:
                    ac:14:f9:80:e3:ee:ff:c9:f7:f2:f1:b3:38:af:a6:
                    5b:23:c3:82:5b:b7:f4:79:ab:51:d1:af:6e:fb:51:
                    af:b3:70:75:33:94:0f:1f:e2:a4:38:25:e8:09:be:
                    aa:d8:44:83:26:64:c7:43:11:b0:dd:f8:a7:da:e7:
                    8f:71:3f:ef:45:01:ed:8b:b0:b0:30:b8:0f:59:5a:
                    36:2f:5a:20:88:2d:b4:48:9b:60:39:f9:21:4f:f9:
                    b1:2a:e4:33:aa:aa:ee:6a:bc:37:d2:8b:c7:f4:33:
                    9c:4a:7d:68:70:40:d6:2f:1e:83:4c:cd:46:bc:fe:
                    89:d2:69:e5:c3:9b:47:e3:4f:f4:98:5c:73:f5:0f:
                    65:78:ab:ae:56:b5:9f:73:36:5e:6f:b4:2c:d1:92:
                    5f:b4:47:34:07:c5:6c:2e:24:15:19:7e:62:18:88:
                    ab:c2:f7:fe:4d:70:ee:f1:99:3b:e8:e7:42:51:a6:
                    67:84:92:7c:22:bc:33:5b:7f:ad:30:be:55:59:dd:
                    ab:5a:28:fb:8a:99:e4:41:83:01:ef:b4:7f:2a:bd:
                    84:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F6:80:4E:B0:AE:74:47:6C:CE:56:FF:08:EA:28:0A:57:34:90:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/ef7e153d-45df-351a-8da1-da52a2a74e64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:69:85:7f:da:9a:38:af:1c:40:45:ef:87:b7:ba:8c:2e:4f:
         a3:3e:b2:10:b8:68:c8:34:90:67:ac:44:83:d4:a6:64:b5:8e:
         e9:e7:d1:58:bf:97:cd:8f:0c:47:11:e5:0c:ec:5d:8e:ef:7f:
         4e:d4:6c:90:0d:b9:60:fe:7b:6d:ba:bc:55:03:62:ae:cf:8c:
         38:1b:2e:ea:6d:09:6f:d4:51:32:62:f3:eb:97:12:eb:4d:09:
         44:a5:76:fe:db:06:54:9a:a3:fd:a5:cb:15:a9:80:e3:aa:0a:
         96:13:71:04:9e:fb:ea:d1:d4:8c:b7:0c:0b:98:8d:b7:ed:97:
         dc:73:f7:ef:09:64:b6:7e:36:57:f4:bc:72:17:04:33:23:dd:
         88:8c:a7:a0:f8:17:c1:52:e0:d0:80:67:a2:a7:c4:36:6b:e5:
         ba:3d:7b:bd:42:55:85:27:b4:c3:c1:2f:47:6a:af:0a:d9:90:
         58:7c:a9:eb:21:3f:82:fe:a7:44:e8:dd:9d:e0:88:61:6f:c0:
         7f:72:b0:1d:12:d4:de:6f:3a:a6:2e:29:be:42:ad:98:fd:96:
         2a:03:41:4b:84:7c:24:1e:75:82:f7:f2:a1:bf:7e:e5:75:eb:
         05:ea:d1:f2:a8:cf:6e:c2:86:e3:78:5e:19:76:fa:ba:d8:78:
         47:c5:bd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:17 2025 by rpki-client