Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/2e2c0e80-b8a1-3375-a16f-4c3ae64a0562.roa
File:                     2e2c0e80-b8a1-3375-a16f-4c3ae64a0562.roa (raw, json)
Hash identifier:          WF6yhezx47KAKbMU0N+6Tc6BR1WAdsrUbRmN7d/LSho=
Subject key identifier:   2E:42:8B:73:49:19:E8:DE:2C:67:6D:0E:45:FC:EE:29:99:B1:96:F8
Certificate issuer:       /CN=89b0877f-f7ac-4c13-9a10-b02358ee00bc
Certificate serial:       010D0C9F4328584805BDCF1B0AD1CF3E8199BC00
Authority key identifier: E2:AA:97:31:DC:C3:BF:B9:C5:A9:C4:57:60:05:6D:4E:BC:1B:BC:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/2e2c0e80-b8a1-3375-a16f-4c3ae64a0562.roa
Signing time:             Wed 27 Nov 2024 21:28:22 +0000
ROA not before:           Wed 27 Nov 2024 21:28:22 +0000
ROA not after:            Tue 25 Feb 2025 21:28:22 +0000
asID:                     8987
IP address blocks:        173.252.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/89b0877f-f7ac-4c13-9a10-b02358ee00bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/89b0877f-f7ac-4c13-9a10-b02358ee00bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:05:bd:cf:1b:0a:d1:cf:3e:81:99:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89b0877f-f7ac-4c13-9a10-b02358ee00bc
        Validity
            Not Before: Nov 27 21:28:22 2024 GMT
            Not After : Feb 25 21:28:22 2025 GMT
        Subject: CN=a79817f0-ec4f-4955-a1bb-d7ab37c58b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:df:c5:c1:04:50:5e:47:64:a0:5b:c1:5c:50:
                    6f:3c:39:b6:6c:1e:48:9d:0f:09:3d:be:24:c8:a7:
                    33:33:fb:ea:9f:3f:aa:1b:c5:67:ea:ec:0d:d9:e2:
                    f4:21:0e:49:45:0e:88:66:3f:b2:ed:08:a2:ad:ad:
                    3a:72:e8:4c:a5:73:8e:8b:fe:d1:db:65:07:f9:e6:
                    f1:28:e0:88:b4:a9:61:c7:67:19:c4:4c:bf:8e:ba:
                    b1:0e:0d:f4:53:a3:bc:4b:d8:e9:eb:e9:a8:36:a0:
                    68:58:be:c7:45:59:af:25:1d:a2:37:24:01:f9:95:
                    06:13:88:e6:55:c2:32:05:b7:1e:4e:29:41:80:5f:
                    66:bc:48:34:c0:1b:13:58:e2:77:df:f9:b0:83:ec:
                    59:47:04:b3:b8:df:32:0c:a3:62:30:85:af:be:95:
                    35:e0:f0:14:cd:9b:55:d4:ac:77:15:b3:71:7e:73:
                    cd:36:0d:8b:bd:b2:e1:23:20:f0:c0:34:f3:c8:d8:
                    52:71:06:e2:b6:a9:cf:e5:20:df:45:80:07:88:24:
                    c2:23:cd:c8:ff:a1:34:08:9e:07:55:50:14:6f:86:
                    50:c9:8b:d7:dd:ba:06:da:0b:8b:07:02:67:f7:41:
                    5d:26:c4:97:20:c8:07:8c:76:e8:ce:37:be:fe:b3:
                    0d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:42:8B:73:49:19:E8:DE:2C:67:6D:0E:45:FC:EE:29:99:B1:96:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/2e2c0e80-b8a1-3375-a16f-4c3ae64a0562.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/89b0877f-f7ac-4c13-9a10-b02358ee00bc.crl

            X509v3 Authority Key Identifier:
                keyid:E2:AA:97:31:DC:C3:BF:B9:C5:A9:C4:57:60:05:6D:4E:BC:1B:BC:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.252.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:27:b4:69:47:e3:da:11:da:c9:eb:68:70:a8:20:bf:11:45:
         b7:99:dc:d0:26:72:d0:cc:69:86:fc:16:7f:6d:8f:c4:8b:51:
         07:c2:2d:ed:dc:84:05:96:a5:36:30:0e:1a:ba:2d:85:dc:48:
         5c:4d:3b:c4:5f:c6:f4:50:c0:3a:ae:e3:f5:3b:18:19:38:7d:
         8e:dc:d9:86:a5:15:dd:13:fe:2e:a4:29:d5:29:e4:41:90:cc:
         54:ae:df:5c:ca:93:91:de:ae:c1:e2:cc:db:b8:56:5a:64:2c:
         6c:92:a9:3e:46:2a:3b:e4:cf:42:94:e8:c5:8a:da:c1:08:bc:
         51:f5:73:15:fd:28:9e:70:72:60:b7:c9:26:c3:21:cf:06:36:
         3a:5f:8f:f9:7e:1d:cd:9a:6e:d2:81:28:fa:62:2a:c3:36:97:
         64:9a:3f:20:98:60:56:c2:33:44:ae:0a:e7:80:f1:3e:ca:09:
         a3:b9:6f:90:f6:8c:a4:61:1b:d7:80:cb:fc:0a:63:a3:ab:8f:
         1d:64:77:2c:0b:e4:2b:e4:e9:8a:0b:a1:ac:c2:9c:e4:a3:43:
         75:bd:f4:a9:36:37:c1:f0:a9:3b:00:ea:21:1d:4b:e0:ac:40:
         35:c0:d6:af:dc:8f:b5:df:42:62:d7:51:18:53:d2:d6:31:e7:
         bc:c7:45:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 16:02:51 2025 by rpki-client