Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/e2bc6971-b9ad-3d82-a9d3-06f1bd29c205.roa
File:                     e2bc6971-b9ad-3d82-a9d3-06f1bd29c205.roa (raw, json)
Hash identifier:          wDHbP9bKxPHekRLeYa8MADh5OMKNHv+etWwPk6ulgTI=
Subject key identifier:   A8:EC:FA:9C:18:80:20:57:67:8D:FD:2F:04:01:2C:AB:DA:66:C6:9C
Certificate issuer:       /CN=53ff129b-845f-449d-8e32-2b24ecbefea4
Certificate serial:       010D0C9F4328584819CFDABCBF238136C7F896A0
Authority key identifier: 0C:1D:ED:25:A1:15:F2:35:C9:47:C5:6B:9D:08:A9:BE:08:E8:35:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/e2bc6971-b9ad-3d82-a9d3-06f1bd29c205.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     16509
IP address blocks:        199.65.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:da:bc:bf:23:81:36:c7:f8:96:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53ff129b-845f-449d-8e32-2b24ecbefea4
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=f5f7214c-7da0-4088-837c-5042a2e94117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f4:f5:b4:bd:6e:57:e2:66:19:e6:5a:fe:24:
                    0c:1a:96:19:04:cd:7a:4b:09:d1:17:1a:4b:30:e9:
                    55:46:e7:30:96:2f:01:28:fd:88:73:c5:51:25:f1:
                    eb:a5:06:ec:d6:32:df:5f:7c:4c:ab:97:c0:8d:77:
                    cc:82:3f:29:f6:9e:21:4f:29:59:fa:cd:d5:c6:6c:
                    8b:49:32:c3:f3:db:6d:c1:82:7d:a8:ee:d0:01:e9:
                    18:67:15:56:9f:27:45:01:f5:fb:54:1a:a6:c5:6f:
                    a2:d8:ea:d3:d8:e9:e0:dd:97:60:22:0b:a9:3f:5e:
                    79:fd:fb:30:88:c1:c0:8e:b8:38:6f:58:e2:a4:c6:
                    09:05:0e:ac:cd:c9:df:68:ad:e3:c2:f8:d6:c0:85:
                    6e:4a:03:cd:d3:8a:6c:94:79:fa:06:54:54:30:91:
                    25:f1:9c:58:70:8d:c6:f8:53:48:be:f9:e8:5e:ea:
                    21:34:0b:fe:13:eb:11:b3:57:a9:25:5a:2e:0f:6b:
                    76:ca:85:3c:74:21:83:f2:12:ef:c9:6b:26:aa:9e:
                    f9:35:46:23:46:6c:91:e2:b2:d5:43:c3:73:a2:54:
                    82:c2:f8:24:43:a8:48:84:84:bc:13:4d:e6:8e:a5:
                    f8:72:c8:c7:94:59:85:3c:1e:a6:1b:a7:33:c1:b0:
                    2d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EC:FA:9C:18:80:20:57:67:8D:FD:2F:04:01:2C:AB:DA:66:C6:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/e2bc6971-b9ad-3d82-a9d3-06f1bd29c205.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:1D:ED:25:A1:15:F2:35:C9:47:C5:6B:9D:08:A9:BE:08:E8:35:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.65.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:a4:9d:02:de:af:b2:64:d7:8a:5f:fc:de:0c:06:04:f2:3b:
         56:5a:00:4e:89:0e:7e:0d:3a:6e:71:d4:45:ea:84:59:fa:b0:
         9f:e0:0b:dc:04:e8:22:54:dd:c2:2c:eb:6f:58:ca:64:08:6b:
         81:64:16:c5:b9:4c:cd:bf:7f:c3:b6:90:8f:f0:d2:5f:4b:a7:
         63:7f:a8:1d:e6:5d:a3:70:f5:e0:60:49:e9:e7:b5:95:89:65:
         56:87:94:03:23:9b:c7:55:02:48:81:8a:bd:86:72:d6:e8:9f:
         4b:78:8a:b9:51:c7:57:1a:42:d5:8c:ff:6d:fc:3a:75:db:cd:
         8f:d8:64:94:6d:be:49:e9:67:98:c6:b2:f0:7c:ac:59:23:32:
         7f:67:85:90:0b:eb:32:87:11:ec:5a:4e:14:d9:ef:18:51:74:
         b9:3f:55:72:5c:5f:22:4e:ed:e8:9a:5f:7b:b6:31:0e:b0:cc:
         45:dc:53:a2:30:34:ce:43:cd:04:29:87:d0:77:09:31:eb:ff:
         26:fb:4e:86:ab:16:96:f1:b8:d6:23:bd:5f:1f:a3:88:fa:e6:
         7d:27:59:00:c4:00:92:4c:22:8f:0f:54:3d:18:89:5c:c6:ca:
         24:fc:59:e2:27:69:33:cd:0d:98:fb:42:46:79:14:4c:5b:28:
         de:41:96:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:47 2025 by rpki-client