Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/9aba445b-887b-3d9b-8c5d-05718f7f7e49.roa
File:                     9aba445b-887b-3d9b-8c5d-05718f7f7e49.roa (raw, json)
Hash identifier:          fKPEUGWF4T1BP8r39WkTz0ViAyVVd2cpUGVixCBRgtQ=
Subject key identifier:   65:79:FB:6B:A2:33:E5:9E:5D:B4:F7:74:D5:1A:53:BB:1F:9E:B6:4D
Certificate issuer:       /CN=e58dee25-2204-469c-b0eb-da831443b959
Certificate serial:       010D0C9F432858484EDACE356C9C35FF81571300
Authority key identifier: 52:75:10:E7:FD:E6:FD:17:78:27:4B:63:66:9D:69:2E:9F:B1:B6:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/9aba445b-887b-3d9b-8c5d-05718f7f7e49.roa
Signing time:             Tue 24 Dec 2024 02:00:38 +0000
ROA not before:           Tue 24 Dec 2024 02:00:38 +0000
ROA not after:            Mon 24 Mar 2025 01:00:38 +0000
asID:                     3257
IP address blocks:        198.251.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/e58dee25-2204-469c-b0eb-da831443b959.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/e58dee25-2204-469c-b0eb-da831443b959.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4e:da:ce:35:6c:9c:35:ff:81:57:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e58dee25-2204-469c-b0eb-da831443b959
        Validity
            Not Before: Dec 24 02:00:38 2024 GMT
            Not After : Mar 24 01:00:38 2025 GMT
        Subject: CN=9bb71261-bf01-432e-9a8e-17e70e59e7cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e3:bd:68:6d:d4:97:58:72:59:97:2c:a1:6d:
                    7a:20:8d:d2:7b:19:1e:fc:91:e9:2a:07:f1:47:8d:
                    3c:ac:aa:94:2c:48:5a:08:2d:91:d6:41:38:65:a4:
                    be:b2:c6:00:8f:4f:40:4c:45:1a:46:56:35:ce:8b:
                    08:17:e6:8f:cb:7c:2d:45:b9:0b:41:a8:1a:9e:ec:
                    14:7d:e3:6d:89:a3:c0:2f:57:03:c7:d1:ef:3e:b3:
                    de:e9:6f:9e:89:91:48:3f:29:ff:98:9c:38:6f:f9:
                    70:9a:68:a2:20:37:50:8b:8b:de:94:7a:71:b6:4c:
                    3e:2f:a3:49:34:3d:04:00:60:93:c3:7a:92:65:e4:
                    85:f8:29:b7:d1:5a:20:46:0f:99:d3:ae:21:68:24:
                    6d:9f:4d:08:96:2c:b2:f0:6b:80:5d:1c:f0:31:82:
                    7c:68:cf:77:76:fc:5f:79:9d:48:02:93:7c:ec:cc:
                    1d:37:20:b8:e7:b2:aa:ae:1e:09:8f:ed:79:7c:08:
                    ea:d5:49:c8:67:77:4e:7c:1d:af:c7:36:69:11:7e:
                    5b:ae:fa:83:d3:21:98:fb:e5:0c:41:ce:bc:d3:b7:
                    d7:c1:57:c7:fd:d7:dc:a6:e5:bb:26:10:86:47:e1:
                    7b:8c:ca:c2:25:36:02:a3:65:48:bd:25:92:9f:b4:
                    d4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:79:FB:6B:A2:33:E5:9E:5D:B4:F7:74:D5:1A:53:BB:1F:9E:B6:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/9aba445b-887b-3d9b-8c5d-05718f7f7e49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/e58dee25-2204-469c-b0eb-da831443b959.crl

            X509v3 Authority Key Identifier:
                keyid:52:75:10:E7:FD:E6:FD:17:78:27:4B:63:66:9D:69:2E:9F:B1:B6:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.251.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:74:bc:b5:c0:21:ec:ad:28:b8:90:5a:74:02:b4:42:5b:b2:
         c1:8c:04:0f:50:7a:fc:9b:1c:c1:0b:c4:a4:9c:a7:f3:38:94:
         92:f1:e9:26:67:52:7c:ab:f5:89:dc:96:f1:96:34:f5:33:81:
         31:87:f9:c3:b2:77:a0:3b:c9:71:cf:8b:c8:d9:8b:30:d6:16:
         1c:45:92:aa:3b:7b:00:6c:f0:ed:ce:f2:5a:7f:73:0b:0e:76:
         59:8f:bf:99:95:d5:92:c2:eb:70:52:63:30:9b:92:2b:50:80:
         40:96:47:8b:32:6e:87:3e:92:38:76:14:06:0e:70:a1:8c:da:
         83:32:96:c2:07:9a:da:ca:04:5c:65:c2:f6:59:d1:c2:58:9a:
         2a:09:ce:a0:f6:b5:04:8d:04:72:02:30:7a:a9:d3:99:ef:81:
         2a:db:36:32:bc:b5:4d:f5:7d:84:10:d6:83:df:a1:67:c0:7d:
         f8:96:0b:ea:35:03:cf:ad:29:6c:fa:ed:9f:31:fc:19:33:ea:
         64:47:01:b9:59:96:71:7e:fe:91:67:68:a7:e2:66:95:80:b3:
         6d:9b:5a:87:03:5b:d7:55:c6:38:f9:76:ad:d3:f1:44:3b:0f:
         f9:c7:0a:5b:3c:66:80:f4:63:62:c0:cb:05:2c:50:69:a4:11:
         3f:6d:67:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:06:19 2025 by rpki-client