Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/19c6bea6-2041-36d8-9fe1-550bd45832ce.roa
File:                     19c6bea6-2041-36d8-9fe1-550bd45832ce.roa (raw, json)
Hash identifier:          J5G+lDx+ws1zHrpQhFpXteAPebF2jGfkec4y2D4a/1k=
Subject key identifier:   06:42:AF:52:D2:04:65:8F:A2:0E:CA:E5:70:D8:F7:90:1C:C1:B4:B0
Certificate issuer:       /CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
Certificate serial:       010D0C9F432858487325B985A956F0A8B2B7D400
Authority key identifier: BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/19c6bea6-2041-36d8-9fe1-550bd45832ce.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     12076
IP address blocks:        170.110.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:b9:85:a9:56:f0:a8:b2:b7:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=7d64f04c-5602-4a52-9e25-af1d6876b89d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ea:d2:18:ec:48:4d:49:3a:1b:88:9a:bf:0e:
                    a7:ea:f4:f9:f8:7e:e6:a7:31:30:56:a4:4e:8e:2e:
                    d3:dd:8d:11:0f:ef:7d:e8:7c:9d:7e:05:42:24:b6:
                    56:43:66:53:61:c8:17:7b:9f:3c:9c:38:c4:75:66:
                    e3:4e:fd:8c:e1:07:26:5f:10:ce:9a:7f:95:67:9b:
                    7f:fa:b9:9f:96:e5:88:fd:11:0c:a3:a0:bb:94:63:
                    7d:95:ff:af:9a:d3:87:a9:50:1c:88:d8:e3:97:1c:
                    be:62:6e:61:de:bb:17:12:a5:a4:8d:95:de:4c:c9:
                    22:f6:af:a7:c8:c6:10:03:94:b1:c2:67:62:4e:ec:
                    b2:db:db:ef:c1:e3:40:42:b8:62:e4:03:f1:42:23:
                    b0:85:05:dc:48:a4:bb:a0:4f:d8:04:c9:c7:7a:a6:
                    cd:00:0f:72:1f:62:21:93:f8:ac:04:9a:ba:32:f0:
                    d8:04:98:db:b3:65:cb:c3:35:8b:e5:8a:a9:3c:d8:
                    b5:c5:70:6c:38:02:a7:f6:25:a1:c1:af:76:58:87:
                    86:2f:4b:f4:7d:cd:62:20:22:58:6b:be:8e:57:d6:
                    6c:fc:88:9d:c1:37:af:89:59:88:f2:20:48:3d:81:
                    ea:67:b4:3b:d2:67:0d:90:3e:8a:9d:7e:dd:03:25:
                    8f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:42:AF:52:D2:04:65:8F:A2:0E:CA:E5:70:D8:F7:90:1C:C1:B4:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/19c6bea6-2041-36d8-9fe1-550bd45832ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.110.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:e7:3d:c1:6c:8a:e4:9f:c4:31:fc:c3:a9:54:d1:11:b0:ba:
         dc:cc:b9:9a:ee:b6:e0:e1:84:e4:06:a1:ac:b6:56:dd:e6:d1:
         fe:e4:b8:98:9e:a6:7f:81:24:33:25:12:3c:b6:1f:02:0b:41:
         fc:84:2b:28:5d:a9:4a:46:c3:65:9d:68:97:b8:1e:02:63:e7:
         05:23:e1:a8:71:d0:5f:2c:bc:69:4a:ba:f0:07:52:df:71:c8:
         23:8e:f0:6f:2d:9f:0f:c8:37:3d:b0:32:56:e2:63:fb:e9:51:
         f0:5b:5a:59:d7:ac:4f:c5:ba:56:ed:60:dc:c1:7e:84:05:2b:
         74:e2:3c:0c:de:64:c5:9e:9b:ee:e5:ef:e6:c5:5c:5e:49:84:
         02:1f:de:5e:9c:93:dd:88:a1:00:67:74:72:61:f6:0f:29:b9:
         ac:fd:b4:55:34:4b:5c:7c:00:45:26:11:96:60:5a:2c:8b:41:
         bd:b7:64:3b:7e:01:79:57:fb:db:66:02:9f:fa:e4:96:43:0b:
         35:71:ea:91:99:31:02:32:cf:64:b8:7e:07:54:0f:67:f5:e3:
         6e:80:16:98:2d:03:fe:d9:7a:9c:95:fe:dc:30:09:7a:00:bb:
         b0:37:8d:6e:a2:4a:83:1d:9a:d6:d9:01:a3:d1:c0:cb:ba:f7:
         ea:35:a3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:27 2025 by rpki-client