Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/33ce7489-db54-39db-9c9f-ef4714e907bb.roa
File:                     33ce7489-db54-39db-9c9f-ef4714e907bb.roa (raw, json)
Hash identifier:          zzgWUvwa5lwK8lxCCtHXLR4miFkbyj5d3LwX0PdURRQ=
Subject key identifier:   E6:20:0D:F1:B1:63:72:51:0C:6B:55:12:0A:FD:88:1C:EB:DC:73:BE
Certificate issuer:       /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial:       010D0C9F4328584875F05A6927034411FA126800
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/33ce7489-db54-39db-9c9f-ef4714e907bb.roa
Signing time:             Tue 07 Jan 2025 02:00:39 +0000
ROA not before:           Tue 07 Jan 2025 02:00:39 +0000
ROA not after:            Mon 07 Apr 2025 01:00:39 +0000
asID:                     4540
IP address blocks:        69.51.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:75:f0:5a:69:27:03:44:11:fa:12:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
        Validity
            Not Before: Jan  7 02:00:39 2025 GMT
            Not After : Apr  7 01:00:39 2025 GMT
        Subject: CN=b5604074-7961-42ae-afbb-59599feccc6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a9:70:81:64:61:bb:04:99:ca:70:9d:18:87:
                    86:e5:d6:0d:d4:28:ac:2f:42:cd:d5:8f:54:90:d9:
                    9b:96:4b:72:53:c9:4e:5f:d7:18:99:d8:e3:ed:22:
                    d5:38:15:08:b2:cf:6d:19:f7:73:42:07:ce:37:a6:
                    99:8c:d7:18:a5:3c:3e:67:ed:0a:9f:ce:c8:36:21:
                    b3:5f:0b:ae:20:00:ee:fa:bb:48:eb:d1:80:01:41:
                    d9:e3:54:ad:39:4d:3f:7f:b1:69:86:97:50:b8:17:
                    54:45:7c:89:5c:00:50:60:a6:7b:c4:fa:05:86:15:
                    f2:29:6b:d1:59:97:b7:58:28:1c:00:67:25:10:e0:
                    5d:9d:f6:2d:16:c0:52:74:4d:7f:91:ff:b4:e5:f7:
                    52:01:b9:bf:c9:37:ee:ec:73:c8:77:26:4e:9c:c6:
                    12:9f:7b:a4:8d:bd:69:86:51:5e:a0:e4:78:96:1b:
                    55:fd:cf:c3:5d:d1:69:64:a2:cf:9a:f0:ed:7f:99:
                    2b:bd:5f:bd:a1:26:43:e9:eb:9d:00:71:63:2b:89:
                    70:57:6c:6b:2d:18:0c:d2:c0:0c:6e:a0:27:0f:83:
                    9e:80:ed:92:96:9c:c0:fc:0b:c7:6f:2c:30:01:8b:
                    bc:2a:3e:c7:36:fa:57:cd:54:67:e2:20:95:cb:0c:
                    ba:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:20:0D:F1:B1:63:72:51:0C:6B:55:12:0A:FD:88:1C:EB:DC:73:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/33ce7489-db54-39db-9c9f-ef4714e907bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl

            X509v3 Authority Key Identifier:
                keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.51.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:d0:32:b9:a9:55:08:a2:81:cd:41:e1:5b:66:b3:8c:91:11:
         ad:b7:0e:f9:5f:0f:f8:3d:60:2e:41:b8:87:f1:10:8b:08:ff:
         5a:8d:e1:cf:56:40:66:77:9c:c7:71:ff:4e:63:2a:d2:ec:3e:
         fd:8f:3b:f3:fb:4f:cf:b8:c1:d9:3a:df:25:28:f3:ea:c8:58:
         7c:bd:d3:04:6f:0e:8a:4f:99:bb:49:cf:db:f4:6e:a1:0e:ad:
         8e:96:91:ca:98:7e:5c:ff:5c:02:44:cc:0b:b5:de:e0:9d:a7:
         58:13:95:4f:3b:21:bd:eb:b1:15:20:1d:7d:a5:6e:25:4a:8a:
         62:1a:36:8a:be:4c:a6:bf:83:80:f7:89:0a:0f:df:58:38:99:
         05:e6:76:42:5d:3b:f5:97:ba:65:ce:09:fb:b0:52:16:f6:5e:
         8d:aa:15:c4:48:20:f2:4f:bf:68:46:6c:c0:16:c3:0c:c6:1c:
         3e:01:9a:b5:6c:2f:65:af:60:ee:0f:d5:31:88:32:47:ff:4a:
         5e:62:aa:25:d5:e2:aa:64:6d:30:bd:eb:d5:15:30:a3:c1:9d:
         d3:5d:13:fb:e2:d6:fb:07:12:85:28:9b:1d:df:6d:51:57:e6:
         3d:63:e0:f1:e0:8d:16:cd:77:3e:22:ff:11:95:fa:da:c0:a1:
         c3:8f:0b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:24 2025 by rpki-client