Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/9496dad9-5a4c-3b46-839f-95eb043c55d7.roa
File:                     9496dad9-5a4c-3b46-839f-95eb043c55d7.roa (raw, json)
Hash identifier:          n4WLn05dcu05uTn0MOEC4q2kLfQhBr2XezSfbhziCd8=
Subject key identifier:   19:DB:D3:23:EA:25:13:4F:D2:F7:16:8F:80:3C:04:24:C6:51:C9:B6
Certificate issuer:       /CN=512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2
Certificate serial:       010D0C9F43285848B78B84C9198CA31C96D56A00
Authority key identifier: 08:DE:39:A7:0E:01:3D:8D:65:B0:9E:22:68:F7:61:28:97:EE:3E:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/9496dad9-5a4c-3b46-839f-95eb043c55d7.roa
Signing time:             Thu 30 Jan 2025 14:00:51 +0000
ROA not before:           Thu 30 Jan 2025 14:00:51 +0000
ROA not after:            Wed 30 Apr 2025 13:00:51 +0000
asID:                     19108
IP address blocks:        205.236.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:8b:84:c9:19:8c:a3:1c:96:d5:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2
        Validity
            Not Before: Jan 30 14:00:51 2025 GMT
            Not After : Apr 30 13:00:51 2025 GMT
        Subject: CN=a0ee5202-ab28-4914-8832-001562f16414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:76:cf:1e:c1:d5:ec:58:7a:3c:53:16:ed:d8:
                    0a:1d:47:da:a5:4d:26:f0:ed:ca:5b:1e:0d:72:f7:
                    40:10:e1:60:18:8c:bb:1a:48:f5:b5:46:36:da:bb:
                    f1:69:a6:83:83:c6:89:e9:f3:a5:e2:c7:10:38:b7:
                    cb:ff:17:84:52:21:df:9b:c6:20:26:b7:46:4a:61:
                    77:30:dc:f5:ab:a8:3e:c9:91:0f:ee:c2:50:24:af:
                    47:23:66:06:da:54:6d:14:3a:88:b8:68:1b:dd:8e:
                    46:78:38:e6:c0:25:56:c5:aa:49:a5:90:61:f5:ae:
                    97:e7:9c:a4:5f:09:e0:e3:dd:14:92:ba:32:35:1a:
                    46:b6:83:e0:eb:7e:1d:2b:45:60:a6:d0:bd:18:0f:
                    34:c6:7b:00:94:58:ee:64:8e:6b:86:79:f6:24:dd:
                    cb:1b:26:49:2d:2a:a5:c7:6a:2f:ba:10:cb:b9:79:
                    0c:7b:43:26:83:cc:58:25:85:b7:de:bb:8a:bb:82:
                    5c:09:77:f6:16:1c:66:5e:d2:e4:7a:d3:22:55:d4:
                    83:29:e1:b1:f3:ae:82:14:a3:8f:c9:a1:48:51:93:
                    47:c3:aa:69:5b:6e:0e:66:f6:00:23:20:e0:25:81:
                    49:2c:63:70:1c:fd:91:8f:49:a8:69:73:9d:7c:31:
                    e3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DB:D3:23:EA:25:13:4F:D2:F7:16:8F:80:3C:04:24:C6:51:C9:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/9496dad9-5a4c-3b46-839f-95eb043c55d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.crl

            X509v3 Authority Key Identifier:
                keyid:08:DE:39:A7:0E:01:3D:8D:65:B0:9E:22:68:F7:61:28:97:EE:3E:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.236.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:ef:c1:e4:8d:0f:17:15:24:d7:8c:c8:98:40:68:ed:f1:f0:
         0d:ff:af:7f:0d:0c:e7:c3:ea:1d:fe:b0:7c:a3:42:9f:55:09:
         c3:c6:97:48:16:e2:29:d3:a3:ed:1b:a5:b9:ec:1a:8f:8e:87:
         8f:ee:74:9d:13:94:cd:b3:0b:40:53:35:8c:78:35:33:1d:c4:
         b9:c7:cd:7f:c6:80:01:04:cd:e6:ba:d8:b9:79:4a:fc:e1:5e:
         1e:f5:a9:30:34:89:52:db:a9:1f:13:74:3a:fd:5d:fa:de:ba:
         3a:2c:cb:71:70:a4:37:45:a5:e9:94:3e:04:81:e9:38:9b:17:
         9e:97:84:98:01:21:b1:d6:a0:16:44:69:92:ef:2e:80:c2:2a:
         c4:cc:9d:a7:a9:52:8e:7e:96:8c:0b:6a:f9:cb:8c:82:f0:0a:
         a2:32:c7:18:29:cc:db:0f:cb:63:d0:d0:31:0d:81:97:7c:f2:
         27:fe:8b:bc:16:85:3f:b8:5d:cf:85:59:85:76:0c:6d:b3:68:
         69:73:1a:46:8d:1e:3e:92:4b:0a:ba:52:cf:bd:3c:56:71:d4:
         6a:7b:eb:1c:14:71:5b:6c:7c:15:ef:ea:1f:23:e5:a8:18:4c:
         f0:99:fe:11:b3:fa:92:29:fb:52:d5:54:5a:a7:4a:2f:82:00:
         47:57:1b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:08:24 2025 by rpki-client