Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/1ac032a5-8cd7-3e77-be6f-9efbd4869ad3.roa
File:                     1ac032a5-8cd7-3e77-be6f-9efbd4869ad3.roa (raw, json)
Hash identifier:          hMT6g50mnQ21NaOspVbW++a3NttFMqyUxUgsQHvf+ZE=
Subject key identifier:   F4:42:9A:C5:00:7C:88:26:F6:2B:60:5F:7B:66:A9:00:AD:98:21:AC
Certificate issuer:       /CN=e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff
Certificate serial:       010D0C9F4328584897708FD5D773BFFDAF3F5900
Authority key identifier: 28:93:96:BA:2B:B0:3C:B9:26:0A:C9:E3:9B:7C:8E:CC:B4:88:31:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/1ac032a5-8cd7-3e77-be6f-9efbd4869ad3.roa
Signing time:             Sun 19 Jan 2025 02:00:39 +0000
ROA not before:           Sun 19 Jan 2025 02:00:39 +0000
ROA not after:            Sat 19 Apr 2025 01:00:39 +0000
asID:                     7896
IP address blocks:        216.128.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:97:70:8f:d5:d7:73:bf:fd:af:3f:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff
        Validity
            Not Before: Jan 19 02:00:39 2025 GMT
            Not After : Apr 19 01:00:39 2025 GMT
        Subject: CN=12c50108-97ea-41af-b691-87a76ff86b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:87:9b:7f:94:58:ad:c2:a0:4e:37:f1:98:6a:
                    6b:cf:1d:78:20:b8:69:f2:5b:40:3b:7f:de:04:30:
                    e7:8a:72:19:93:c0:ff:58:dd:b7:c7:b4:9b:ca:1e:
                    b2:ef:35:ff:6d:75:95:33:b2:66:ce:a9:c6:ef:e3:
                    18:44:59:85:89:25:ce:38:e5:63:99:e0:d5:86:93:
                    17:43:f4:d5:f9:81:51:08:02:25:b5:9d:35:63:75:
                    20:95:2f:f9:c7:fb:a7:f4:d8:02:8a:83:8f:10:7b:
                    71:31:39:72:88:1b:b1:50:42:78:61:c9:7f:34:b1:
                    a3:d9:93:be:32:b3:a6:b0:6a:dd:01:d9:50:46:5d:
                    59:58:13:e4:cf:b2:3d:41:c7:c6:a6:37:9e:51:53:
                    73:b8:9c:cb:84:06:ce:0b:8d:36:4e:c7:96:98:b6:
                    e0:9d:78:66:aa:6e:8f:a7:3b:30:9e:e1:4b:fc:cd:
                    96:dc:34:b4:fe:76:c3:7c:2a:f8:39:c0:ce:eb:b4:
                    e4:23:e8:ae:16:3e:20:c9:26:68:e5:27:c9:eb:d3:
                    90:2f:f0:29:07:4c:f3:bd:ae:58:36:52:eb:56:05:
                    ea:94:fe:82:70:f1:28:e4:06:30:d2:96:6f:8a:ff:
                    a5:a9:14:3d:39:63:f4:7d:dc:12:6d:dd:c8:2b:18:
                    a1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:42:9A:C5:00:7C:88:26:F6:2B:60:5F:7B:66:A9:00:AD:98:21:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/1ac032a5-8cd7-3e77-be6f-9efbd4869ad3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.crl

            X509v3 Authority Key Identifier:
                keyid:28:93:96:BA:2B:B0:3C:B9:26:0A:C9:E3:9B:7C:8E:CC:B4:88:31:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.128.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:2f:cb:1b:8a:c7:8e:a7:df:cf:61:8f:73:cb:d9:5c:b5:04:
         8f:ee:3f:72:cc:5b:5e:08:29:e6:47:9e:34:e4:c8:32:f4:c7:
         ec:d5:5d:6d:e2:43:58:93:41:ac:e0:a8:30:94:cd:a2:ea:96:
         da:45:53:1c:5b:36:f0:e7:43:c6:80:eb:80:94:37:26:73:cc:
         24:9d:70:c3:d1:17:06:28:53:f8:1c:cf:2c:d0:ea:fc:77:22:
         65:47:f5:da:da:d9:e1:f9:d3:75:07:3f:be:ed:3c:05:fb:36:
         42:cc:bd:61:f8:15:b6:c5:85:7e:6b:3f:c3:bd:29:fc:3b:57:
         ca:bf:4a:f0:4f:b5:37:c2:59:13:a0:27:2b:39:97:d5:4d:a3:
         94:a7:0d:29:75:00:82:c5:02:7e:5a:26:2f:2d:0c:03:d1:ad:
         14:28:4b:79:1c:aa:89:71:64:b8:d1:97:fd:48:4b:33:2b:f5:
         dd:89:39:48:fe:2a:b5:f8:b4:82:66:29:55:84:26:71:0e:ed:
         c6:c3:ba:5e:ae:3f:f0:aa:4d:75:4c:42:d6:ae:ec:00:be:6f:
         98:27:69:66:dd:1e:6b:a6:4b:72:b0:8e:bc:55:bb:84:2d:85:
         66:04:b7:6e:7f:5e:ce:23:92:62:20:f2:e1:02:63:3b:d3:fd:
         63:80:26:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:47:44 2025 by rpki-client