Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/0b9c6ff5-d158-396b-adb7-de82805ec20c.roa
File:                     0b9c6ff5-d158-396b-adb7-de82805ec20c.roa (raw, json)
Hash identifier:          NeQjl22med0ZFF4b/rIXsw/6jNKaEcU1oTInITY6AZA=
Subject key identifier:   08:BD:A3:E8:E2:26:4C:1A:0B:AB:D3:4C:BE:BF:3C:15:15:C7:6D:F8
Certificate issuer:       /CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
Certificate serial:       010D0C9F432858487325AADA8335C836E4227380
Authority key identifier: E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/0b9c6ff5-d158-396b-adb7-de82805ec20c.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     393653
IP address blocks:        104.128.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:aa:da:83:35:c8:36:e4:22:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=80dd1d0c-f7ff-4a61-ad87-860c33051c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ad:f2:77:b6:d2:d5:d0:c9:a6:a1:b7:10:42:
                    b3:61:69:42:2f:b1:c6:5d:7f:59:b7:b1:df:f0:69:
                    40:94:84:2b:4e:8c:54:63:5c:ac:60:6c:b8:a1:ef:
                    2f:5e:8c:f1:9b:a9:15:68:86:05:b9:3e:1b:15:3b:
                    0f:b6:b2:8d:96:a0:76:4b:37:f7:65:f7:92:d5:6c:
                    71:94:a5:d9:db:b8:83:c7:7b:eb:e6:34:85:50:ed:
                    9d:5c:f7:f8:d4:7f:5f:8c:d6:74:b8:1e:77:72:70:
                    a2:0d:79:2e:71:ef:78:bd:8f:cf:05:1d:e8:50:a0:
                    e9:aa:6f:03:72:f3:f7:4c:da:72:02:aa:72:69:73:
                    eb:78:62:36:ee:a7:30:a2:93:d6:f3:bb:db:0e:42:
                    20:e9:eb:17:b3:7d:a8:b2:12:6e:01:86:e1:3e:b8:
                    cc:47:eb:c1:55:4f:7b:c3:fc:83:df:01:34:e0:99:
                    8d:e7:9f:4c:f1:90:23:87:93:0c:68:21:56:18:a0:
                    9b:aa:5b:1b:8c:ff:2f:34:57:1e:70:d8:4e:05:1b:
                    ba:47:81:44:8d:d8:80:ac:ea:de:fc:e7:75:13:e6:
                    43:86:41:64:d4:fc:7a:f1:7e:c4:54:4f:1b:c4:26:
                    9d:64:36:c8:c1:f9:b9:e9:83:1b:be:8e:45:ca:0b:
                    eb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:BD:A3:E8:E2:26:4C:1A:0B:AB:D3:4C:BE:BF:3C:15:15:C7:6D:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/0b9c6ff5-d158-396b-adb7-de82805ec20c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl

            X509v3 Authority Key Identifier:
                keyid:E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.128.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:5f:20:ac:4e:27:46:ee:2f:47:46:46:bc:58:48:a9:4e:5a:
         b5:d7:18:73:30:2d:8b:8b:3d:29:ac:56:4d:b3:15:7e:96:da:
         86:1b:c9:38:28:a3:16:90:d7:34:d6:c5:e5:f2:f2:e9:78:61:
         69:67:cd:cf:03:84:2d:ae:1a:03:01:ee:46:00:dc:c4:99:47:
         c4:ed:49:35:fb:05:b1:a0:99:e6:8b:ae:38:62:8c:d6:ec:56:
         6c:c3:b2:24:cf:7e:3b:51:1f:69:21:0b:f1:1d:99:a4:7c:bf:
         c7:33:4f:a1:8c:f3:1b:29:dd:6c:25:4f:1a:8a:c5:3e:28:af:
         63:73:45:98:82:5f:51:ad:94:ab:47:b3:be:8f:dd:eb:13:64:
         a0:48:24:ca:ea:17:2f:85:92:cf:3d:d8:e1:c4:94:ae:fd:8a:
         bd:60:21:b0:d8:a0:34:12:de:19:fd:26:43:63:6b:f0:8e:e8:
         d5:ae:b2:18:98:04:3f:0d:ed:8a:ed:7b:28:d6:25:63:8a:06:
         83:d4:b7:ba:5d:51:3a:53:e6:b1:d8:18:fb:44:76:3d:59:a8:
         ee:e7:d3:dc:05:01:d4:af:33:0d:48:94:06:98:47:ef:2e:99:
         82:fb:f0:9a:7c:e7:16:02:1e:76:33:2f:f5:d2:1c:ea:26:d5:
         0c:e7:72:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:50 2025 by rpki-client