Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/63e05084-56c5-3f82-8f5c-d14ab7ac57a8.roa
File:                     63e05084-56c5-3f82-8f5c-d14ab7ac57a8.roa (raw, json)
Hash identifier:          hZgCqprw4X5EXwT6iLxGlnWRp9O3yFxbkKzzrVA4ioo=
Subject key identifier:   DE:55:AB:5E:79:A2:7E:51:70:20:29:B9:9E:A1:1D:50:B7:38:FA:A3
Certificate issuer:       /CN=37d6a0ba-c124-4540-b5ef-6ab20943af24
Certificate serial:       010D0C9F432858485E35B8BCADD6E1724171DAB4
Authority key identifier: 3F:C6:68:B4:FB:02:1A:DC:55:78:B5:D4:5F:11:F2:04:AC:FD:D4:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/63e05084-56c5-3f82-8f5c-d14ab7ac57a8.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     14618
IP address blocks:        162.212.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/37d6a0ba-c124-4540-b5ef-6ab20943af24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/37d6a0ba-c124-4540-b5ef-6ab20943af24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:b8:bc:ad:d6:e1:72:41:71:da:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d6a0ba-c124-4540-b5ef-6ab20943af24
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=95477153-50e4-4115-ae12-065144be8f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:64:58:a1:b7:5f:bc:58:c1:fb:c9:ce:16:62:
                    85:01:65:d5:44:9a:26:16:7d:f3:29:a2:93:0d:ee:
                    54:ae:f6:32:88:b7:ea:a9:34:ce:d6:3a:23:0b:06:
                    d1:bb:93:7d:4e:ef:84:0f:dd:48:ea:c4:f5:1e:2e:
                    83:eb:e5:80:67:54:73:da:31:c3:92:63:46:cb:49:
                    44:10:cb:65:8f:d7:e3:21:ef:bc:07:8d:f0:2a:e6:
                    eb:e1:27:e2:23:7c:33:7e:d5:3b:55:0f:3e:6c:4b:
                    ee:9c:99:cf:40:63:3b:8d:68:21:45:9e:d8:21:fb:
                    52:24:cb:a0:de:b9:dd:10:7b:92:b0:a8:e4:0a:ae:
                    32:7e:1c:54:93:77:20:23:2a:c3:3c:dd:09:97:d3:
                    b8:f3:1d:29:29:18:7f:61:76:25:c2:46:35:0b:fa:
                    60:8c:70:0b:88:f5:28:05:f4:6a:e1:d0:b5:9c:38:
                    58:3a:43:3b:56:ea:25:0a:df:c3:6b:ac:31:fe:a7:
                    85:01:f5:1c:55:cd:d5:4b:38:ed:eb:8f:3b:41:b5:
                    de:cf:0c:20:6f:0c:e0:60:b0:15:18:30:85:46:1b:
                    69:d6:f5:58:d4:01:89:ff:f4:c4:ea:a9:8e:c4:63:
                    2f:65:24:c0:71:8d:52:68:cc:3b:00:58:0c:e3:6b:
                    f2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:55:AB:5E:79:A2:7E:51:70:20:29:B9:9E:A1:1D:50:B7:38:FA:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/63e05084-56c5-3f82-8f5c-d14ab7ac57a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/37d6a0ba-c124-4540-b5ef-6ab20943af24.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C6:68:B4:FB:02:1A:DC:55:78:B5:D4:5F:11:F2:04:AC:FD:D4:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.212.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:79:bd:10:5f:30:37:e9:aa:32:35:b0:73:07:61:05:69:d6:
         3d:1d:3a:bd:5f:76:0c:b6:1c:b8:0f:9b:2c:6b:fb:09:49:56:
         64:2d:5c:04:59:d4:66:8f:45:99:25:8e:d8:cf:e6:f2:5c:d4:
         3e:31:ed:1b:6f:01:14:18:81:eb:1c:19:ec:78:11:c7:81:c2:
         93:61:a5:b9:35:f9:ac:a7:cb:d9:e0:df:1e:67:2d:e5:98:12:
         b0:0d:fa:50:93:c4:1c:eb:b2:a9:c0:25:54:03:61:d5:fe:18:
         b1:b4:4c:7a:be:88:f0:41:97:f9:58:b4:a3:b3:b4:e2:17:f4:
         22:54:82:09:e8:4f:a5:9b:d0:88:25:bf:be:fe:0f:28:ea:78:
         05:cc:0e:c8:93:4c:9a:86:d4:61:c2:c5:70:b0:94:99:f1:ff:
         40:de:84:a4:24:7a:91:52:c4:5d:4b:8e:d3:d7:9d:2a:18:3f:
         00:b1:bd:43:28:2c:33:0c:85:a9:50:77:bd:b8:32:11:a7:0a:
         2e:7a:57:61:dc:81:62:18:c1:48:68:82:9a:8e:d6:36:8e:21:
         13:d2:1a:15:50:c6:7b:a2:84:09:e7:03:aa:f4:7c:9b:ec:69:
         98:f6:ef:3c:7d:c7:e9:03:a9:07:ae:85:19:10:d2:41:0b:eb:
         23:bc:a9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:15 2025 by rpki-client