Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/e4acaa6a-9b22-365e-a7d0-a8a4de2e75af.roa
File:                     e4acaa6a-9b22-365e-a7d0-a8a4de2e75af.roa (raw, json)
Hash identifier:          41HufJxJ7/kxSNZK2iwg4G3BbDzyDunTPs7juFWa7kI=
Subject key identifier:   10:5A:0C:0B:B5:3D:9E:83:4E:69:76:54:C7:50:52:BF:E9:45:22:DE
Certificate issuer:       /CN=81565da9-aab9-45ca-b99c-0684053daa09
Certificate serial:       010D0C9F43285848C150CDDF6FDC0EA6369F0640
Authority key identifier: D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/e4acaa6a-9b22-365e-a7d0-a8a4de2e75af.roa
Signing time:             Mon 03 Feb 2025 02:00:39 +0000
ROA not before:           Mon 03 Feb 2025 02:00:39 +0000
ROA not after:            Sun 04 May 2025 01:00:39 +0000
asID:                     8987
IP address blocks:        198.151.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c1:50:cd:df:6f:dc:0e:a6:36:9f:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81565da9-aab9-45ca-b99c-0684053daa09
        Validity
            Not Before: Feb  3 02:00:39 2025 GMT
            Not After : May  4 01:00:39 2025 GMT
        Subject: CN=3effdf16-6d16-4e16-9d0c-04d50aa326c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:82:e9:7b:23:36:2f:db:10:ba:c8:35:3b:d6:
                    7f:00:34:8a:f2:a0:a4:c9:bb:c8:61:ed:cd:e0:fc:
                    29:1d:f9:d4:e8:19:a2:79:56:54:e4:e9:d1:b1:19:
                    0a:22:1f:4d:76:be:93:f1:30:cd:43:2d:7d:04:2b:
                    e2:94:85:ba:43:08:27:1e:d6:be:86:cc:84:0a:b3:
                    9d:19:a9:ed:2c:8c:76:a0:97:85:4e:2f:95:e6:e4:
                    e4:1f:28:6d:34:09:0a:bb:b9:42:05:78:a2:f8:f4:
                    86:ef:15:a9:5e:1c:5b:47:65:27:bf:00:81:86:07:
                    ee:d1:36:52:3c:88:4e:b9:e0:b5:5d:65:91:2f:66:
                    2c:d6:c4:c5:bd:ae:cc:be:23:15:5f:bf:b2:4c:b3:
                    2d:05:31:cc:a8:2b:b1:67:ab:b9:44:f2:e4:38:72:
                    8a:cd:a6:37:f0:9f:1c:b1:da:21:b5:da:00:5a:ae:
                    73:82:66:19:3d:b6:35:41:2f:d2:b0:ef:08:29:a1:
                    1b:11:2f:d7:83:a3:59:7e:ad:d3:18:3a:c3:a1:6b:
                    bf:21:3a:f6:77:a7:bd:01:91:74:3a:17:19:a0:b0:
                    86:55:b9:ec:ea:bd:7f:d0:f4:10:26:d4:3b:e8:54:
                    c5:90:d9:54:3b:98:44:90:80:89:6b:51:b8:92:db:
                    48:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:5A:0C:0B:B5:3D:9E:83:4E:69:76:54:C7:50:52:BF:E9:45:22:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/e4acaa6a-9b22-365e-a7d0-a8a4de2e75af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl

            X509v3 Authority Key Identifier:
                keyid:D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.151.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:84:28:f4:fd:db:28:38:e4:5f:27:5f:10:83:8d:b8:15:b1:
         0a:33:91:39:0e:26:24:e4:e2:0f:a2:1f:b5:ef:6a:5a:9f:ae:
         5c:b5:53:fb:40:5c:27:f5:ef:65:a2:14:b7:63:ca:ae:76:d0:
         3b:f8:f4:b9:f7:2a:c8:10:dc:fc:84:f7:eb:0f:9a:75:a8:aa:
         85:e2:7c:b3:13:f6:54:fa:fa:57:d4:1b:8f:f2:6a:30:18:b6:
         8e:a0:36:7b:1e:38:97:96:3b:af:7c:5b:1f:63:85:8d:d2:92:
         16:da:3d:f4:6f:ce:45:d1:f5:f1:d9:bb:33:77:c5:37:28:65:
         f1:6e:97:e8:53:b3:d3:7c:8c:3f:23:6e:1c:22:1c:a6:06:7a:
         20:89:20:fe:3a:e7:63:a4:50:c7:c1:a5:23:76:01:67:7b:cf:
         99:a3:2a:bc:b7:71:a6:df:58:b0:9a:83:5d:a2:15:31:d3:c9:
         ee:11:14:bd:02:69:ba:c4:a9:e4:2e:e3:9c:fe:33:3e:f3:b2:
         41:a7:68:15:9e:1f:ec:32:aa:f8:34:a3:7a:4f:9b:96:8e:18:
         b8:a6:0b:85:0f:9a:9d:b6:97:6a:0a:0c:34:0d:92:bc:fb:f6:
         47:c8:6e:7e:1a:5b:2d:4d:46:08:af:54:c5:e8:e6:d6:4c:68:
         e8:3c:3d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 06:22:52 2025 by rpki-client