Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/4bdc7401-6d0e-314a-aae3-b523f7944319.roa
File:                     4bdc7401-6d0e-314a-aae3-b523f7944319.roa (raw, json)
Hash identifier:          KRzB8LEnP2vwMUzcvwko4nfsrBMPXZazCAbdjLfoFvw=
Subject key identifier:   58:BC:AF:7F:27:03:1E:DD:15:33:A5:4F:E6:D4:54:C0:32:31:F7:88
Certificate issuer:       /CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Certificate serial:       010D0C9F4328584886B075E6FAC4DB965918A9C0
Authority key identifier: B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/4bdc7401-6d0e-314a-aae3-b523f7944319.roa
Signing time:             Mon 13 Jan 2025 02:00:40 +0000
ROA not before:           Mon 13 Jan 2025 02:00:40 +0000
ROA not after:            Sun 13 Apr 2025 01:00:40 +0000
asID:                     8987
IP address blocks:        192.157.36.0/23 maxlen: 24
                          2602:f7db::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:86:b0:75:e6:fa:c4:db:96:59:18:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
        Validity
            Not Before: Jan 13 02:00:40 2025 GMT
            Not After : Apr 13 01:00:40 2025 GMT
        Subject: CN=e7ee0df9-8371-4716-b857-55441814ea75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b6:f2:b9:c9:4e:74:a0:c8:61:78:14:68:82:
                    d5:63:38:f1:9c:79:e8:b7:d8:27:5b:28:cf:0f:42:
                    40:56:0b:47:f7:b7:04:d7:14:2b:3d:49:e4:ce:ad:
                    5b:9c:75:9a:5d:0c:59:a4:7e:ef:c2:92:28:b9:28:
                    1a:f5:bd:b1:9f:ee:b1:cc:e2:5c:bb:79:58:d7:00:
                    ea:11:59:6c:c2:7a:c8:ce:c4:38:ef:b7:f1:a5:51:
                    76:2c:71:8f:45:d3:8b:90:42:57:1f:e8:a6:60:a2:
                    6b:a1:a6:15:f4:cb:1a:dd:d0:44:5f:23:0a:43:36:
                    72:87:a0:e0:8f:a7:4c:6d:c2:af:62:45:57:e8:74:
                    72:19:fa:47:b5:0b:04:45:9c:7b:b7:f5:01:57:3e:
                    7c:a7:78:85:5a:22:da:5d:39:1d:49:f7:8e:96:1a:
                    be:a4:90:8a:cb:83:3e:8a:c3:61:b2:5a:ad:14:17:
                    01:8a:de:fb:38:e2:63:e4:09:1e:4a:64:c2:be:a6:
                    00:7a:0c:0a:ca:c2:ff:57:7e:a1:39:11:23:d1:30:
                    ee:0c:90:07:99:6d:67:11:0e:e2:2e:fb:b4:bd:07:
                    9a:95:cf:b8:6d:b9:12:35:b9:78:6c:22:3a:0f:d2:
                    b7:31:2d:86:58:75:50:a9:fb:44:a4:c6:53:48:96:
                    74:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BC:AF:7F:27:03:1E:DD:15:33:A5:4F:E6:D4:54:C0:32:31:F7:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/4bdc7401-6d0e-314a-aae3-b523f7944319.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl

            X509v3 Authority Key Identifier:
                keyid:B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.36.0/23
                IPv6:
                  2602:f7db::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:a6:f0:d9:34:69:0c:77:f2:68:33:9d:11:93:1f:fd:45:c2:
         b1:0a:32:5f:ac:ad:7f:15:19:54:4e:23:27:2e:ba:29:4a:ef:
         89:8b:11:12:cf:35:83:ee:d0:a5:e8:4f:94:0b:ad:e9:81:73:
         0d:d9:48:9c:04:9c:0d:4c:6a:ba:a5:ef:e9:a2:3f:e5:30:e9:
         b9:b5:d7:50:c9:34:59:90:ed:3b:1f:64:0a:fe:61:e6:69:10:
         36:a6:57:4d:78:68:e0:e2:e6:86:4b:c2:20:37:49:d5:de:f3:
         d3:98:45:c2:73:90:62:8b:01:1b:da:75:b7:16:07:3a:18:be:
         7c:33:ad:63:24:29:dd:e9:69:3f:91:24:97:fc:52:72:89:82:
         1b:86:8c:a2:e6:ed:19:40:97:a5:9e:3f:a6:32:51:56:87:67:
         c2:69:11:7a:58:ef:0d:da:96:1a:14:6a:05:4d:52:38:7f:b4:
         08:97:c2:81:45:df:63:ef:e5:66:fa:89:ef:8a:ce:de:b6:34:
         ae:a1:b0:90:52:84:5c:74:bf:b2:05:ce:58:1f:3e:f5:e2:d0:
         63:eb:a8:f6:a8:41:d1:81:9b:23:6f:ef:8d:b3:67:57:c4:17:
         5f:f2:95:b8:a0:f6:16:67:31:7e:24:ee:ec:c4:cc:dd:6f:9b:
         ce:f4:a5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 04:44:50 2025 by rpki-client