Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/1473b1c5-0f99-36ee-83fc-c9517c2433ee.roa
File:                     1473b1c5-0f99-36ee-83fc-c9517c2433ee.roa (raw, json)
Hash identifier:          6ZgcDsbrjG+6pvrC8GDaPwwSgSpcDsBksTiFZpYxXaY=
Subject key identifier:   FB:50:A3:4C:20:26:12:73:83:BC:19:11:F1:CA:F4:B1:72:09:3F:9E
Certificate issuer:       /CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4
Certificate serial:       010D0C9F432858487CEB21E250F5B56BB956AC00
Authority key identifier: 4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/1473b1c5-0f99-36ee-83fc-c9517c2433ee.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        204.79.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:21:e2:50:f5:b5:6b:b9:56:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=8f37b3d6-000c-43b4-afcf-bd1a74147f3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e1:fd:4a:50:97:f8:10:82:a5:97:e7:94:e3:
                    ae:74:c9:37:dc:31:26:44:66:6b:61:a4:7c:41:0c:
                    bf:3d:73:31:38:ea:bb:e8:f3:90:9a:7d:9c:c2:90:
                    99:f5:90:f1:13:14:db:73:7e:77:04:5c:56:d6:3b:
                    54:20:5c:6a:3f:ae:a3:4a:ce:85:87:6b:f0:9a:90:
                    98:61:70:d4:18:87:06:b9:e9:71:7e:84:5a:0e:05:
                    5c:0f:46:f1:37:fe:af:61:f3:b5:3e:1c:95:ee:fc:
                    3a:bc:37:01:f6:c8:1f:a1:27:3b:0b:cf:35:45:d3:
                    46:d4:cc:f9:27:95:92:f0:7c:c0:96:fa:16:72:fd:
                    7e:37:b3:7d:98:e2:d3:3b:e8:95:ac:f6:58:7d:79:
                    16:55:e7:53:62:5c:36:df:e7:c0:3d:33:4b:1f:c6:
                    10:c2:2b:5e:31:cb:17:68:cc:77:84:c8:d6:76:40:
                    b6:f5:49:51:74:38:78:fa:69:19:ae:20:34:b4:9f:
                    13:41:e0:89:ce:f2:e5:24:aa:44:cf:9f:2c:59:07:
                    c0:00:74:ca:57:25:7e:8f:cc:3b:bf:bd:81:19:02:
                    69:f9:7f:f0:90:2c:99:7b:85:94:cd:74:89:e6:0f:
                    d6:ab:9a:14:4e:c3:48:1e:0c:ac:91:e9:3a:21:fb:
                    36:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:50:A3:4C:20:26:12:73:83:BC:19:11:F1:CA:F4:B1:72:09:3F:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/1473b1c5-0f99-36ee-83fc-c9517c2433ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl

            X509v3 Authority Key Identifier:
                keyid:4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.79.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:e9:b8:28:1a:c3:db:b2:bd:ab:f7:e1:53:65:13:5a:d8:b4:
         53:ab:1b:4f:17:f8:0c:fe:39:0a:a8:15:86:9b:0d:f1:2a:d7:
         0f:79:2e:db:27:be:22:52:c3:d2:b3:8a:81:b3:7b:ca:8e:d1:
         4b:78:5f:6d:3b:d7:a3:b2:f9:09:58:a8:00:31:80:94:18:41:
         30:92:07:e8:b8:84:32:4e:cc:4e:14:16:28:f0:07:ab:08:fb:
         76:35:27:bd:fa:bd:ed:76:92:12:a0:1e:34:52:d6:fe:dd:84:
         cd:8a:b1:7e:80:e5:44:f7:3b:d4:5a:73:f6:bc:81:18:b3:70:
         dc:0c:66:5d:51:37:0e:36:5e:9c:7b:65:58:1c:42:3d:a7:7a:
         04:80:43:bb:5e:07:69:b1:35:6a:3e:9a:ff:a4:a1:bf:27:a7:
         87:82:6b:d1:f9:78:71:0b:dd:b0:52:c5:1e:de:c3:1e:a5:99:
         f1:f8:01:92:4c:30:c1:27:aa:9d:02:63:28:e4:9d:8c:83:2d:
         50:3c:0f:4d:3a:f3:b8:2d:f3:42:1c:a0:ac:a2:0d:a0:6c:52:
         e6:90:58:11:f9:39:54:d6:b0:0a:31:c5:19:1e:08:11:4c:1d:
         01:75:8e:32:6e:99:c8:f4:2c:ce:59:52:5b:71:a3:65:55:e6:
         cb:18:a0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:17:45 2025 by rpki-client