Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c/2a125135-c767-3cdb-a5c1-2d3d83205056.roa
File:                     2a125135-c767-3cdb-a5c1-2d3d83205056.roa (raw, json)
Hash identifier:          cNfP1f3NayxdR+BV9AGDbqdHkTvdoSDDzX+1wiHQreU=
Subject key identifier:   CF:D4:A9:79:8A:ED:92:F3:21:D4:F7:E6:B6:8F:33:BF:23:DB:F4:FC
Certificate issuer:       /CN=7cac21fa-fb8a-4352-9772-6995e344f72c
Certificate serial:       010D0C9F43285848E16BEE2D1E593DCC57DC70C0
Authority key identifier: 4E:53:DA:A7:BE:CE:C4:F0:65:FF:69:82:59:35:CF:9B:00:4C:A2:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c/2a125135-c767-3cdb-a5c1-2d3d83205056.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     20055
IP address blocks:        205.196.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c/7cac21fa-fb8a-4352-9772-6995e344f72c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c/7cac21fa-fb8a-4352-9772-6995e344f72c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:ee:2d:1e:59:3d:cc:57:dc:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cac21fa-fb8a-4352-9772-6995e344f72c
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=97815e3e-46ef-49db-8dd7-f2cc853d304e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e2:22:d8:ee:99:ad:1f:8f:89:c8:cd:d2:f5:
                    84:6a:24:c6:fd:e6:7f:61:53:39:cf:3f:33:ac:ca:
                    1b:0c:64:0f:02:2d:cb:43:e5:bd:22:e2:f4:d4:9f:
                    2c:4a:4c:e1:68:27:f4:2a:cc:7c:60:20:49:0c:19:
                    34:90:58:18:f2:05:1b:08:ee:c8:db:e2:b0:6f:01:
                    dd:f0:b9:80:22:eb:33:f0:19:b8:fc:3d:be:2a:36:
                    e0:c7:a2:f9:76:05:73:9a:03:36:04:82:13:b5:ed:
                    88:ab:c1:20:5e:e0:f7:6b:34:ae:3e:c1:f6:39:d7:
                    f1:54:bd:11:15:8e:5f:c7:54:0e:c5:a6:20:70:b6:
                    b0:14:20:21:2c:b4:8a:4e:74:11:2b:ef:42:35:9b:
                    76:79:2e:30:3b:09:99:1c:e2:2c:4f:8e:68:2b:56:
                    55:a8:53:8a:75:26:dc:96:9c:09:b3:e5:f2:c6:9a:
                    41:cd:31:6e:96:c8:32:11:db:ac:74:29:a4:73:cc:
                    39:c3:fb:fe:50:a5:59:c4:1d:9b:80:e3:fc:85:02:
                    18:c9:7d:1d:8e:d1:76:ab:b0:68:5a:a3:b2:1c:40:
                    31:a4:4e:53:e5:e5:4e:5b:a1:e4:63:cd:0d:30:32:
                    34:82:ea:85:d5:6b:cc:0e:ac:fe:0b:39:16:31:0f:
                    0f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D4:A9:79:8A:ED:92:F3:21:D4:F7:E6:B6:8F:33:BF:23:DB:F4:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c/2a125135-c767-3cdb-a5c1-2d3d83205056.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c/7cac21fa-fb8a-4352-9772-6995e344f72c.crl

            X509v3 Authority Key Identifier:
                keyid:4E:53:DA:A7:BE:CE:C4:F0:65:FF:69:82:59:35:CF:9B:00:4C:A2:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.196.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:df:78:36:b5:fc:c4:2a:40:26:5b:0a:02:5c:bc:ac:df:16:
         d8:3d:fc:eb:54:bf:1f:03:4a:de:fb:f7:b3:4c:d2:fe:9a:66:
         ec:fa:41:ed:a0:64:6b:10:3a:ab:24:28:fe:a3:2f:b5:4f:f8:
         82:17:01:d0:f0:a7:79:1a:94:03:27:61:c3:8b:50:c4:d5:52:
         9f:ac:37:22:43:13:18:e6:02:18:23:8e:d7:33:49:c4:f3:2c:
         e2:1c:f0:a7:6e:0b:7c:b6:50:34:9f:e5:ea:7e:99:4e:46:24:
         fd:98:6a:a4:ab:71:09:a6:e8:72:0c:71:cd:77:ba:7b:1b:7c:
         b3:53:31:a7:86:27:1f:83:2a:74:c2:30:a1:02:7c:b9:55:85:
         3f:dd:b8:b1:3e:92:1f:18:98:ca:24:19:13:9b:6d:82:7b:12:
         74:4a:a2:50:1d:9c:d9:d3:fd:51:27:6d:0c:2f:d0:81:8c:58:
         2f:0e:77:ba:0f:c4:39:94:2d:bf:4d:24:e8:ab:f0:74:a6:f3:
         bf:df:3f:bf:96:3e:34:c9:0a:af:76:7d:da:5b:0b:9b:b6:b0:
         fb:a0:8a:9a:67:77:52:46:46:db:b9:23:b4:1c:cf:c9:65:45:
         2c:43:21:d9:a8:5a:ea:81:33:d2:a6:2b:ac:5f:76:ed:71:eb:
         35:e0:b5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:56:39 2025 by rpki-client