Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0aa9be59-93ef-3255-90a7-f3ffff264f51.roa
File:                     0aa9be59-93ef-3255-90a7-f3ffff264f51.roa (raw, json)
Hash identifier:          k/fZAtvE39L/XbHx/vofuSCZlOT0tmut0eOeSJA9oSA=
Subject key identifier:   70:74:E9:98:36:20:49:D7:6A:59:94:70:F5:A5:5C:76:69:D0:2A:31
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F43285848B35B6DE82C16F40ED5E52400
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0aa9be59-93ef-3255-90a7-f3ffff264f51.roa
Signing time:             Wed 29 Jan 2025 02:00:39 +0000
ROA not before:           Wed 29 Jan 2025 02:00:39 +0000
ROA not after:            Tue 29 Apr 2025 01:00:39 +0000
asID:                     19886
IP address blocks:        171.162.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b3:5b:6d:e8:2c:16:f4:0e:d5:e5:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Jan 29 02:00:39 2025 GMT
            Not After : Apr 29 01:00:39 2025 GMT
        Subject: CN=f30496a0-3697-4bf5-85ac-29c6392abedc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a6:70:bb:49:8b:6d:52:ba:77:4c:ab:f2:26:
                    8e:ce:18:85:c9:14:71:58:87:ae:81:95:ff:a0:53:
                    43:bc:13:d1:0f:0e:2a:d7:2e:46:74:48:1d:a5:4c:
                    f5:66:a7:37:bd:7d:b4:c9:81:4a:e8:08:21:99:fe:
                    66:00:b9:e0:a6:32:04:e9:42:7d:16:bc:ba:53:9a:
                    c5:5b:7f:4d:95:97:b6:bd:a6:a7:91:85:f3:ce:46:
                    9d:f5:78:04:e6:51:7a:9a:3c:c0:cd:4a:ef:04:39:
                    88:45:a3:2d:d8:1f:19:d1:41:6e:27:2c:94:89:34:
                    10:c7:2f:29:e1:a7:be:fc:a2:03:52:21:80:67:d3:
                    ac:94:ed:4d:3d:2e:af:cc:f9:70:97:60:4a:02:dd:
                    98:ae:26:7b:11:a0:53:3e:84:15:33:1a:78:40:7d:
                    6e:8f:7f:13:89:93:33:42:ef:21:61:9d:af:7b:6b:
                    6d:a0:31:6f:ed:d9:04:08:e5:1c:8f:50:a3:1c:c6:
                    c3:9b:06:e9:8f:f2:34:8f:cd:54:8a:25:99:cf:fc:
                    73:31:59:c5:f8:81:dc:1e:99:93:48:d0:99:99:67:
                    2f:2c:4f:36:49:ec:44:39:80:fe:bf:0e:66:ed:a3:
                    a6:12:b8:8f:26:88:e8:d4:8f:98:a1:c1:c3:2a:06:
                    ef:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:74:E9:98:36:20:49:D7:6A:59:94:70:F5:A5:5C:76:69:D0:2A:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0aa9be59-93ef-3255-90a7-f3ffff264f51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:62:dc:d0:73:56:c7:55:47:ee:26:09:fb:ec:a3:b1:bd:33:
         72:80:0c:7c:21:a3:40:2b:ff:df:d6:f6:0d:9e:6a:cb:4e:84:
         8c:5b:0d:d6:9f:b0:5a:2a:13:32:5f:dd:ab:91:bb:cd:15:76:
         05:6a:de:f6:37:f0:7e:2e:85:cc:45:ab:e0:90:4d:78:5e:d5:
         1a:ce:0a:bc:40:02:43:87:8a:a6:59:de:7c:02:c1:e2:cc:6f:
         06:7a:74:cf:04:5a:f2:dd:a6:64:39:7a:8d:9b:6f:b1:99:88:
         15:94:18:e2:ac:89:25:30:39:3f:98:e4:29:aa:d7:40:4a:58:
         bd:f9:8d:4d:35:11:7b:a6:c1:6a:86:2a:68:5d:62:ad:b8:c2:
         ca:53:2f:3f:61:a0:6b:15:37:48:27:ce:08:72:fb:04:ea:e6:
         58:2d:04:ba:30:3f:f5:dd:a5:57:3a:8b:df:86:39:71:bd:55:
         22:4d:e5:b4:1d:3c:0f:a7:e2:fe:cc:1d:08:a0:fa:17:04:84:
         6b:63:85:70:58:af:93:81:8d:85:94:69:34:85:3c:92:f8:e1:
         8b:40:db:b8:ef:b1:c6:7e:bf:a5:e0:eb:89:c2:3f:71:5e:fc:
         ab:9d:78:17:4d:0b:9d:1f:d8:ed:9a:ec:16:91:62:96:95:0e:
         b4:15:ad:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:05 2025 by rpki-client