Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/09023f97-e944-3d62-a33e-406827f9d76d.roa
File:                     09023f97-e944-3d62-a33e-406827f9d76d.roa (raw, json)
Hash identifier:          XH+V6UzY2LUQ9d57ChQvUm1fYumhnz3fJpaCFJXeMuA=
Subject key identifier:   7A:E2:12:80:7C:C3:D1:48:BF:64:DE:EE:88:EB:32:5D:1F:30:3F:C0
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F43285848159FD99DECE54D3E45C8DE80
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/09023f97-e944-3d62-a33e-406827f9d76d.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     16904
IP address blocks:        199.96.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:d9:9d:ec:e5:4d:3e:45:c8:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=e2a66462-edbc-47c5-aebe-372f5ca9757d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ab:63:24:fc:7d:3c:75:69:56:27:5f:bb:8e:
                    d2:20:bc:d8:d0:65:04:83:42:5c:40:62:17:38:a9:
                    bf:3c:f7:98:62:d3:85:8d:cf:7d:fc:43:98:42:1a:
                    58:3e:34:36:1e:3c:fc:58:53:60:c6:f0:52:46:c4:
                    1c:f4:c6:39:55:ae:f9:63:6f:a9:78:8c:0e:27:69:
                    93:a9:95:0a:70:f7:0f:83:ba:53:eb:a6:d1:42:6b:
                    7a:9b:f2:59:13:dd:2f:6c:e7:76:ae:c3:d6:13:12:
                    ba:d2:f2:22:3d:8f:b7:33:82:76:12:11:5d:32:01:
                    32:9a:05:bf:d1:de:c4:40:33:ff:a9:3e:8d:79:75:
                    de:73:76:c2:b0:b9:8d:bf:85:6a:30:0d:94:ae:80:
                    87:a4:29:9b:0c:42:76:4b:23:9f:b6:c2:1a:5a:cf:
                    fc:6b:b8:02:af:fb:07:dc:a1:2c:25:e0:41:94:dd:
                    ec:df:0a:dc:ed:f5:c1:7e:01:83:a5:24:a6:56:d1:
                    c5:37:0e:77:8e:eb:ed:1e:e7:db:0c:ef:f8:42:2f:
                    4b:3b:20:b8:0f:90:c3:2d:5e:c3:f5:79:a1:9a:1d:
                    f9:8c:6d:92:0a:b1:eb:f2:42:07:2b:89:8b:e2:83:
                    00:2e:87:05:18:ee:3f:ca:ad:b5:08:d8:3e:f0:15:
                    59:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E2:12:80:7C:C3:D1:48:BF:64:DE:EE:88:EB:32:5D:1F:30:3F:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/09023f97-e944-3d62-a33e-406827f9d76d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.96.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:fc:40:66:e6:c6:d6:74:a5:d8:77:f1:4b:49:1b:e2:56:03:
         99:29:e1:8b:4f:6f:df:48:2f:d9:5d:88:e4:c6:db:d6:34:fc:
         01:f7:b2:71:e9:b5:ea:b8:6f:1d:57:a8:66:83:15:0e:90:37:
         cf:b8:c7:70:cf:02:f7:66:93:04:1a:bf:93:d6:c9:28:4e:6b:
         18:95:c3:c1:15:63:0f:c0:6a:58:0c:58:2c:5b:31:c6:e2:42:
         69:cf:7c:b0:a6:2a:89:77:b2:2d:c1:d7:11:2e:ae:4a:2d:b4:
         84:3d:4c:e1:a3:c7:bf:f6:41:2a:e4:f3:2f:85:5e:fc:52:f4:
         05:eb:f4:58:52:23:ef:f9:76:40:77:0d:a2:f7:2c:96:cc:44:
         1f:37:2f:89:21:c9:51:e3:8f:5b:b0:4b:26:31:fe:78:19:18:
         dd:85:8d:9c:2f:80:fd:54:a8:d8:12:e5:29:df:23:54:21:64:
         9b:64:8f:af:8b:a9:61:ea:80:17:8a:dc:33:14:7c:c3:d9:ad:
         2d:05:0e:99:f5:05:24:ff:8c:6a:94:21:26:ed:84:7f:aa:7a:
         fc:25:e3:02:63:c0:ba:f2:a7:59:42:c8:bf:d4:91:0b:ef:59:
         c3:98:58:08:4e:2b:12:bf:f4:7c:40:4c:6d:e5:24:a5:ba:6f:
         ca:7b:c6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:28 2025 by rpki-client