Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6e8499d4-7126-459b-b6cc-4ca2f542f30c/d14908ec-d831-3c35-9615-8f4b0cf619dc.roa
File:                     d14908ec-d831-3c35-9615-8f4b0cf619dc.roa (raw, json)
Hash identifier:          hzX4aUQEluPH5vsSfVGJK8Lsh+QLJws+NxMSBA39EZw=
Subject key identifier:   31:55:F0:9A:B9:B4:4C:30:45:13:6F:C4:77:88:8E:B0:B1:4C:46:2C
Certificate issuer:       /CN=6e8499d4-7126-459b-b6cc-4ca2f542f30c
Certificate serial:       010D0C9F432858487B85B82FC3314B3F9B88BB00
Authority key identifier: 69:E1:F8:2C:A6:89:01:F7:41:DA:56:B7:E7:A0:3F:23:60:F0:DA:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6e8499d4-7126-459b-b6cc-4ca2f542f30c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6e8499d4-7126-459b-b6cc-4ca2f542f30c/d14908ec-d831-3c35-9615-8f4b0cf619dc.roa
Signing time:             Thu 09 Jan 2025 02:00:40 +0000
ROA not before:           Thu 09 Jan 2025 02:00:40 +0000
ROA not after:            Wed 09 Apr 2025 01:00:40 +0000
asID:                     3635
IP address blocks:        192.149.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6e8499d4-7126-459b-b6cc-4ca2f542f30c/6e8499d4-7126-459b-b6cc-4ca2f542f30c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6e8499d4-7126-459b-b6cc-4ca2f542f30c/6e8499d4-7126-459b-b6cc-4ca2f542f30c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6e8499d4-7126-459b-b6cc-4ca2f542f30c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7b:85:b8:2f:c3:31:4b:3f:9b:88:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e8499d4-7126-459b-b6cc-4ca2f542f30c
        Validity
            Not Before: Jan  9 02:00:40 2025 GMT
            Not After : Apr  9 01:00:40 2025 GMT
        Subject: CN=d20fcf35-c014-4179-938d-52fa4e983865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8b:a8:2f:76:ff:03:41:aa:be:d3:63:3d:62:
                    48:c1:14:53:98:35:cc:96:b0:22:97:51:bd:70:32:
                    4f:f4:d9:ca:d0:f3:f6:3c:cb:f3:08:23:9a:53:64:
                    7a:73:89:7d:ec:b6:ac:c4:77:38:d3:ca:9d:d2:7e:
                    06:31:01:16:e4:5b:69:76:51:a2:e1:f5:f3:87:ef:
                    36:2c:3e:2e:d0:d2:7a:9a:b3:1c:a1:1d:ec:44:95:
                    4a:0b:31:a7:1f:4c:c7:0a:f0:67:86:63:72:2c:d4:
                    d7:09:3b:94:69:00:57:87:cd:bb:fb:31:b4:69:a5:
                    49:cf:ca:a3:cd:80:94:c4:51:aa:70:df:2c:9c:b1:
                    59:1a:e0:a3:f5:84:56:79:ae:21:ef:54:5f:ef:d9:
                    85:f2:00:b1:7d:ab:89:15:7d:d7:7d:e6:b8:9e:f3:
                    a4:8e:c3:fa:92:ec:5b:e8:54:b6:1e:ce:ef:c6:56:
                    39:a2:36:6e:ff:ea:e0:80:0a:b5:9c:59:f9:2a:df:
                    6c:74:9f:ec:60:5d:cd:53:e7:eb:49:c5:ed:3c:34:
                    78:fe:78:2c:57:61:6b:8b:e7:5a:44:3b:00:0d:9a:
                    a5:7a:83:cc:25:63:51:51:a7:e5:6e:4c:bd:22:f7:
                    1a:30:0f:a4:23:b1:6b:f2:ba:b7:bc:37:5a:6d:1c:
                    b4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:55:F0:9A:B9:B4:4C:30:45:13:6F:C4:77:88:8E:B0:B1:4C:46:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6e8499d4-7126-459b-b6cc-4ca2f542f30c/d14908ec-d831-3c35-9615-8f4b0cf619dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6e8499d4-7126-459b-b6cc-4ca2f542f30c/6e8499d4-7126-459b-b6cc-4ca2f542f30c.crl

            X509v3 Authority Key Identifier:
                keyid:69:E1:F8:2C:A6:89:01:F7:41:DA:56:B7:E7:A0:3F:23:60:F0:DA:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6e8499d4-7126-459b-b6cc-4ca2f542f30c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.149.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:9b:2c:5b:86:30:d1:ee:6d:a1:79:62:0c:1b:16:25:5d:03:
         eb:a5:6b:7a:81:82:71:48:e9:db:ba:3d:07:34:fc:92:04:59:
         ad:82:48:c1:86:be:1f:b0:fc:82:a1:f0:92:ea:6b:1e:3c:23:
         7b:08:c2:22:ac:69:77:58:d6:0d:2a:b1:36:88:b5:6a:ab:c4:
         e3:39:23:25:4a:56:5e:df:96:0f:63:33:04:7d:8f:d3:ca:ee:
         ed:78:48:97:a9:73:17:3d:ff:32:3e:ba:16:7b:5a:9c:c0:87:
         40:88:ec:12:ac:7f:4b:c5:2a:78:52:18:2d:73:33:8e:32:50:
         3d:d6:9b:8e:d4:45:e8:be:1b:03:8e:82:b2:f1:3c:8e:29:8a:
         a7:dc:a5:36:c7:60:85:e6:fb:21:25:f8:20:91:f6:ab:e2:f3:
         3b:05:2b:10:5a:8a:3e:b4:62:af:76:e9:54:18:f2:39:2f:b9:
         46:dc:34:a8:81:b4:e4:0b:e8:88:e6:94:d2:56:cf:4f:94:90:
         68:23:43:f6:08:af:9b:74:fc:ca:4f:60:67:17:ea:bf:84:f5:
         b3:ad:f8:f9:5a:c1:9f:b8:66:a2:b8:d2:3f:d9:8b:d8:97:5b:
         84:04:ed:f1:88:2c:3e:33:bf:8c:db:eb:83:7d:ed:ab:6a:7e:
         99:33:3a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:10 2025 by rpki-client