Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/a3452e96-aa7e-39b8-91c7-6e11ab0e9c93.roa
File:                     a3452e96-aa7e-39b8-91c7-6e11ab0e9c93.roa (raw, json)
Hash identifier:          P2PSIZN5OfBke2GqtPiuQyt3+dj1tjNM2b1IYY65EOs=
Subject key identifier:   DF:C4:37:86:5A:CF:6B:FB:DC:E0:08:B0:96:B6:1F:45:D7:D8:3F:42
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F4328584858A05EBEDAEA01BD62E28700
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/a3452e96-aa7e-39b8-91c7-6e11ab0e9c93.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     53983
IP address blocks:        199.180.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:5e:be:da:ea:01:bd:62:e2:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=b2530cde-da22-4271-afee-be4c4c8aa162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4c:e8:36:fa:cd:fd:14:87:07:a9:1c:91:7d:
                    b8:ba:c2:6d:d2:2c:86:74:22:4c:f1:bb:dc:23:62:
                    6c:80:d4:e8:e7:ec:62:b7:ec:86:bb:f9:af:24:b9:
                    8d:84:64:3d:c8:bd:2b:41:a1:f4:46:88:1c:5c:a0:
                    5c:3f:e1:28:cb:9d:0c:eb:26:49:bd:79:ea:10:a5:
                    c0:66:16:8b:ed:d9:2e:ef:17:87:4e:72:8a:52:0d:
                    e7:5b:80:af:b4:8a:1d:b5:9e:72:78:d6:e1:2b:f1:
                    1e:e5:ac:84:a4:85:c6:2c:a8:c6:e5:aa:96:9e:3a:
                    3c:d8:f4:5d:b7:c6:cc:8d:64:1e:9c:dc:6d:95:c6:
                    db:58:cd:09:30:e9:2a:59:77:a1:86:29:63:19:ed:
                    53:aa:a8:da:2c:c7:2b:a2:eb:f5:4f:3b:d2:2b:51:
                    96:0a:45:71:10:41:47:9c:0a:f8:b1:ca:c4:05:ae:
                    06:6c:8f:02:59:cc:e5:53:c8:f7:b8:ca:6e:1c:47:
                    14:a6:e2:57:32:6b:d1:8a:d6:bc:98:d9:45:25:eb:
                    fb:8b:d3:0e:0b:e8:65:51:ac:4a:11:40:8d:68:19:
                    71:74:8b:c6:0d:1c:26:21:b9:38:01:f0:03:7e:be:
                    a9:9b:ed:52:3c:e9:e3:b3:b3:a5:15:d2:11:f7:29:
                    6b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C4:37:86:5A:CF:6B:FB:DC:E0:08:B0:96:B6:1F:45:D7:D8:3F:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/a3452e96-aa7e-39b8-91c7-6e11ab0e9c93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.180.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:fe:78:16:e4:14:e9:4b:18:ed:7c:51:b5:5f:23:73:5f:27:
         15:eb:f1:f0:70:b8:5f:54:17:08:62:f5:6d:8b:d3:9f:56:98:
         43:78:d8:9e:46:a6:30:f7:09:e4:da:53:71:60:1c:a8:a3:8c:
         64:07:d8:94:93:11:32:17:25:98:07:c1:7a:f2:91:f3:38:9c:
         3e:e5:9b:69:bf:21:a4:de:be:e8:20:4d:53:7f:0a:04:b1:10:
         f3:a8:14:24:14:5d:cf:8f:26:e2:fd:f2:2c:62:4f:28:fc:91:
         ea:8a:ee:97:69:0d:78:64:20:14:fd:b7:15:c9:72:63:36:eb:
         01:95:87:35:48:0f:e2:22:8b:74:27:b2:20:82:9e:b0:eb:d2:
         50:7d:e2:a3:2d:a5:b2:9b:4b:d4:25:9c:3d:e5:8b:b4:27:c1:
         48:f2:77:2a:65:99:f4:c0:d3:b2:47:7e:08:8d:4a:88:1a:9d:
         57:eb:99:71:75:d9:ee:14:d2:14:02:91:5e:08:9c:50:de:f8:
         d5:4f:11:ea:2e:c6:e8:e8:a5:9a:ec:4c:9d:fa:2b:bb:05:8c:
         5f:06:33:4c:65:14:1d:ba:a4:6d:be:0c:f2:18:36:1e:00:ed:
         9e:0b:38:ea:92:23:a6:c4:29:3d:b2:02:5d:19:0f:38:a2:1f:
         40:ae:28:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:27:11 2025 by rpki-client