Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9459405e-891d-328c-86dd-9338e9eb4edb.roa
File:                     9459405e-891d-328c-86dd-9338e9eb4edb.roa (raw, json)
Hash identifier:          WXE6Lvrdaw2IRLx1RGgw+6jrGeuDpG81gdJuBAjwHkM=
Subject key identifier:   B9:EC:75:01:86:AE:F8:85:E8:26:9E:4F:67:60:BE:F9:A2:5E:96:B9
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F43285848FD56C0CA1A25442A2FD74EC0
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9459405e-891d-328c-86dd-9338e9eb4edb.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     53508
IP address blocks:        24.244.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:c0:ca:1a:25:44:2a:2f:d7:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=e868e90b-1e46-4ba3-9e52-3f784fc7dd64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:36:d7:b3:b3:1f:00:ea:68:07:03:b4:35:1a:
                    fa:66:58:72:e8:84:3b:e0:7e:7f:96:40:43:a7:c5:
                    aa:08:99:5b:a0:c4:af:57:3b:6d:bb:c8:3e:a5:58:
                    af:39:da:1d:e7:9e:67:e5:16:cf:1f:c9:84:6f:4c:
                    2e:2b:52:5a:84:56:cd:d8:65:65:78:03:22:54:5c:
                    ce:59:16:f9:d3:c9:87:55:12:86:c5:a2:5c:3d:b4:
                    8c:1e:57:42:eb:3d:16:ac:34:44:34:5b:c8:8c:ba:
                    3b:22:49:4e:35:61:ae:14:47:2f:c9:be:64:f2:ed:
                    85:45:06:8f:85:31:76:75:65:54:0f:f2:00:6d:8c:
                    fd:8f:37:59:0d:c2:cd:81:98:44:f7:88:fc:0c:55:
                    9c:b5:2c:3d:87:d9:70:6a:ce:99:07:f4:ce:c0:de:
                    10:90:80:38:91:a8:5e:d0:15:4f:8c:5c:ec:4a:42:
                    35:42:ce:f6:47:2c:ab:04:b8:c7:f5:b8:82:a9:b0:
                    38:9f:8d:f0:0b:1d:4b:e8:9b:3c:9f:ea:19:b9:f1:
                    c3:22:28:7d:d2:39:f1:54:b8:3d:ef:0a:91:e9:ae:
                    03:1d:70:07:21:1c:d6:0d:2c:8f:2e:cc:d9:6f:d6:
                    5a:e9:a2:78:f4:9f:bf:d0:19:69:55:99:33:93:e7:
                    e4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:EC:75:01:86:AE:F8:85:E8:26:9E:4F:67:60:BE:F9:A2:5E:96:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9459405e-891d-328c-86dd-9338e9eb4edb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.244.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:f3:57:44:c1:2a:47:39:6d:4b:fc:bc:2e:bd:f7:db:fe:49:
         e8:24:b5:2c:a5:f9:66:55:d5:ee:10:8f:b5:0d:a5:77:72:99:
         a1:ee:6b:08:12:24:8e:97:65:40:90:c2:24:d5:81:2d:f7:b0:
         60:a2:ec:85:16:4d:79:6f:39:b7:39:37:d3:81:ef:e1:3d:65:
         96:8a:71:65:db:a5:24:61:d0:96:95:97:d4:9f:95:ce:84:25:
         b3:b5:1b:8d:16:39:c4:cf:d2:e6:d8:89:2c:3d:db:ed:c2:ad:
         f0:5b:52:1b:f4:d3:8c:42:e9:e9:03:11:d7:3c:b3:65:d8:2f:
         2c:02:73:fb:4e:32:2e:45:4c:42:52:7e:3c:70:8f:5b:22:d8:
         12:2d:7a:c5:5d:bf:8d:d2:91:00:bf:9f:34:89:22:ff:d8:ef:
         01:79:4f:ec:0d:6d:25:2d:d5:bc:67:68:0d:76:6e:6d:1b:d4:
         ef:c7:8c:bf:f7:9b:50:6c:57:13:c1:e0:1f:c6:65:59:a4:5b:
         02:72:8b:56:a8:78:c3:6c:f8:0a:47:61:76:64:46:cf:c6:99:
         7a:d6:7f:22:1a:0a:ec:14:be:4b:27:a5:e8:04:6f:87:97:27:
         52:45:a6:2a:14:85:59:58:69:93:c0:bf:49:af:c7:82:ff:3b:
         d2:28:74:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:40:24 2025 by rpki-client