Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/700382b5-459d-3865-8421-d8b9455ca16d.roa
File:                     700382b5-459d-3865-8421-d8b9455ca16d.roa (raw, json)
Hash identifier:          U3y4JvlzZIKy58agdlymCfU/BWdBDTCunxhOK0wgdUk=
Subject key identifier:   9B:CA:A1:C5:40:DD:12:BA:C7:C4:DA:2D:CC:96:AA:C2:EC:7D:14:D8
Certificate issuer:       /CN=900d3223-79ad-4ee2-af23-163d305bdd0a
Certificate serial:       010D0C9F4328584819CFBF7BEF1477AEEBC3CD80
Authority key identifier: 7D:D6:33:9D:D2:D7:AE:48:75:4D:EE:25:DD:4E:7E:D5:65:C5:3A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/700382b5-459d-3865-8421-d8b9455ca16d.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     16509
IP address blocks:        208.64.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/900d3223-79ad-4ee2-af23-163d305bdd0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/900d3223-79ad-4ee2-af23-163d305bdd0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:bf:7b:ef:14:77:ae:eb:c3:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900d3223-79ad-4ee2-af23-163d305bdd0a
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=d0509c9d-1a25-4664-895a-d0784b5ba0d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e3:83:d4:7f:d5:85:db:5a:77:32:37:21:c1:
                    bb:c1:5f:25:3b:70:c2:37:ad:ba:18:50:f7:e6:96:
                    c7:0b:10:f2:f4:3d:92:b2:d5:35:ec:1c:91:c8:71:
                    b0:a9:cb:85:78:35:d1:b7:f8:e1:e2:da:3a:50:f7:
                    c3:64:b6:75:30:5b:8c:c7:c9:b2:22:22:d3:72:c2:
                    f5:79:4f:e1:c5:ed:1e:42:63:82:db:3e:c0:21:bf:
                    ff:4f:9a:a9:ce:f9:70:80:80:7c:e3:81:72:f3:63:
                    73:07:fd:8a:fa:5a:fb:39:e9:e5:95:3b:67:2d:74:
                    20:af:85:d1:bc:68:89:35:bc:07:70:be:11:cb:d5:
                    75:2b:2f:c6:12:75:85:ad:0b:56:b5:83:a9:d0:0d:
                    30:3f:65:a6:2f:26:56:07:92:be:24:87:dc:52:16:
                    92:e9:12:e7:6f:ec:81:a5:53:a4:3a:d4:22:34:13:
                    04:bf:0e:83:d8:01:a6:4a:37:e8:a7:b2:c4:a7:77:
                    59:93:85:89:84:f6:6d:68:83:b7:8b:f7:83:ea:84:
                    1b:05:8a:8f:6a:a3:4b:5e:30:42:84:8e:fd:4b:78:
                    23:aa:21:b2:46:72:f3:30:1c:2f:ce:af:6e:b9:3b:
                    47:3b:c8:82:c1:e6:aa:bd:89:57:1f:95:62:cb:a0:
                    d8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CA:A1:C5:40:DD:12:BA:C7:C4:DA:2D:CC:96:AA:C2:EC:7D:14:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/700382b5-459d-3865-8421-d8b9455ca16d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/900d3223-79ad-4ee2-af23-163d305bdd0a.crl

            X509v3 Authority Key Identifier:
                keyid:7D:D6:33:9D:D2:D7:AE:48:75:4D:EE:25:DD:4E:7E:D5:65:C5:3A:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.64.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:66:05:b2:bc:fe:4c:79:d1:1a:6a:1c:15:cb:21:1e:14:ba:
         7a:82:9b:9d:71:cf:46:52:4c:95:ee:62:06:27:b4:f1:a7:7a:
         6b:64:37:4d:1d:a9:72:1f:28:ab:09:c0:6b:e4:45:01:8a:70:
         20:78:77:93:ff:43:e9:42:d2:3f:f8:c3:f5:de:f3:d6:e3:02:
         66:f4:39:84:34:6e:a2:7b:b1:7a:bb:6e:a7:38:3e:ff:89:4f:
         dd:b9:9d:e2:03:42:56:c5:57:25:ba:b6:1c:81:67:4f:ed:d3:
         c6:3e:06:8d:03:8d:28:5b:cd:b4:8a:de:92:c7:84:90:47:1c:
         32:80:03:9b:d7:2f:6d:7b:d7:34:87:24:7c:34:fd:3b:c3:67:
         18:7f:1b:93:a0:c2:76:8e:8c:1a:b8:29:74:53:af:bc:ec:3f:
         f7:0a:85:9c:b5:ca:d8:7e:be:85:18:78:dd:7a:9b:e8:5d:33:
         a6:10:04:ce:89:bb:e2:79:5e:6b:e0:22:91:c8:f1:39:e6:b9:
         3f:84:0e:e8:e5:9e:f0:28:ba:e3:1c:d5:4b:bd:c9:bd:d9:b3:
         3d:5b:dd:3b:77:17:00:a2:1c:3a:af:dc:6f:37:a2:ac:a6:1d:
         c4:26:2d:d1:30:c3:9d:c3:35:f0:e4:4e:cb:b6:93:39:bd:1d:
         3f:eb:10:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:03 2025 by rpki-client