Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/2b96b8f2-fb65-3027-b304-2d8c21da5226.roa
File:                     2b96b8f2-fb65-3027-b304-2d8c21da5226.roa (raw, json)
Hash identifier:          iUJ1q4xUIdTEMDpgwgGDsNegqdxeoayKLkSKyNoN3i8=
Subject key identifier:   F7:EE:13:77:9F:1A:FB:D9:7D:88:C6:C2:97:FF:B3:C0:73:3D:FF:29
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F43285848B35B6E8E0F5F37ED55C9B700
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/2b96b8f2-fb65-3027-b304-2d8c21da5226.roa
Signing time:             Wed 29 Jan 2025 02:00:39 +0000
ROA not before:           Wed 29 Jan 2025 02:00:39 +0000
ROA not after:            Tue 29 Apr 2025 01:00:39 +0000
asID:                     19886
IP address blocks:        171.162.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b3:5b:6e:8e:0f:5f:37:ed:55:c9:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Jan 29 02:00:39 2025 GMT
            Not After : Apr 29 01:00:39 2025 GMT
        Subject: CN=42d0ab37-f710-450d-ae30-01a0faa1d060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:79:b1:6b:da:3d:ce:aa:c6:af:37:af:71:76:
                    b3:d8:41:c4:0b:8d:c7:9b:85:5c:40:1e:a4:c0:6d:
                    e3:8e:42:a5:ea:66:ae:f1:6f:a9:df:02:2f:3f:83:
                    2b:99:e0:c2:67:fc:16:51:68:b1:81:68:ff:02:e6:
                    09:35:b1:6d:7b:3f:d3:af:85:d1:d2:b1:55:2f:ce:
                    ea:ba:8e:8c:16:d2:32:54:c8:a5:9b:c5:7c:bb:cb:
                    d3:01:c4:92:95:bc:d3:1e:82:c5:cf:6a:32:62:f0:
                    83:70:2d:a0:c4:77:fc:51:4a:d5:6b:1a:82:76:db:
                    7f:5d:66:95:81:cf:14:12:87:ef:6b:87:11:97:c4:
                    b8:83:62:06:31:1d:dd:f3:e0:49:3e:e0:f9:7e:81:
                    86:21:cc:20:32:ed:f9:03:c6:21:f7:59:db:db:62:
                    aa:87:8d:08:f4:fc:d8:c6:5f:d4:01:85:b5:ec:4a:
                    eb:27:09:38:4e:0e:c4:42:59:d2:60:53:4a:92:4a:
                    9d:3f:07:12:6e:e5:5c:be:90:b8:d4:fe:92:20:ec:
                    60:d9:da:ba:68:26:63:0e:9b:f1:f2:df:a5:0d:cb:
                    96:bf:26:53:95:8e:f7:af:97:f4:e0:64:6d:fd:19:
                    ab:e7:9c:0a:1e:f9:62:d1:6f:1a:49:71:e9:a5:e0:
                    0f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EE:13:77:9F:1A:FB:D9:7D:88:C6:C2:97:FF:B3:C0:73:3D:FF:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/2b96b8f2-fb65-3027-b304-2d8c21da5226.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:47:ac:19:fb:5d:da:c0:80:1f:30:17:0f:47:69:13:f4:6e:
         49:69:42:40:eb:91:49:ce:45:ac:17:06:de:75:b5:ca:c8:2e:
         cb:3c:74:33:17:20:eb:0c:44:72:8f:a9:fe:2e:4d:48:97:13:
         3a:8c:a0:fa:89:44:35:7a:36:0f:1b:90:97:fb:92:5d:45:13:
         96:fc:33:b6:dc:9c:0a:12:2a:7b:e0:18:9a:01:56:37:fe:f0:
         fa:19:28:b3:95:d4:65:1d:a5:97:91:22:ca:41:73:43:78:a3:
         e9:7b:fd:f8:87:95:25:7b:a4:9d:2c:d4:93:d8:91:05:f7:50:
         db:20:7f:e7:0b:3a:97:21:be:33:62:33:88:57:ea:49:b8:f5:
         8e:40:ec:e0:c9:4c:97:01:30:c3:a2:55:34:55:47:71:72:79:
         89:c5:3f:b1:19:37:4b:fd:98:01:f7:0d:7a:6d:60:51:d2:c2:
         53:aa:f5:8d:a6:9c:04:f5:f4:b0:cc:87:d0:4f:60:85:14:51:
         59:56:09:64:3b:b9:86:2f:be:fd:73:61:ce:b5:d5:46:e4:0b:
         19:9f:62:79:99:32:d0:bd:50:c6:03:09:a4:93:32:ae:a5:0c:
         d5:6a:50:a9:dc:7f:6c:ca:a4:34:1e:91:75:0d:8a:11:96:83:
         c7:64:db:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:28 2025 by rpki-client