Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/a38f05a4-2dcb-3e26-a39b-894283327aea.roa
File:                     a38f05a4-2dcb-3e26-a39b-894283327aea.roa (raw, json)
Hash identifier:          qGaC87F/y9w8vHohwc6vqRWopRgEiP4f8/r7pKK/qug=
Subject key identifier:   55:E4:B2:B9:72:93:FE:3E:B7:5A:5A:35:58:9C:53:53:FF:71:8E:68
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F43285848159FE277E595EB7C4BD50700
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/a38f05a4-2dcb-3e26-a39b-894283327aea.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     16904
IP address blocks:        63.142.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:e2:77:e5:95:eb:7c:4b:d5:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=f10d41f2-4548-4e55-b1bd-9fa850eab343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6b:01:bc:82:db:6d:0d:26:52:b2:ac:27:a3:
                    91:21:da:dd:87:b2:54:f0:ec:7f:2b:d5:95:30:7b:
                    97:2f:0b:e2:da:4d:7a:6a:f5:8a:22:c1:d2:22:07:
                    6f:1b:2e:84:b7:0d:4a:78:f6:cc:02:62:1d:66:9a:
                    52:11:41:86:97:aa:82:bb:c2:9c:06:bb:cc:3c:e4:
                    32:45:4a:21:b1:ca:99:cc:b5:f7:97:1c:8f:c9:86:
                    4f:40:21:75:40:c1:82:26:c6:0e:82:8f:e5:f9:f8:
                    46:8f:41:4f:81:97:5a:6f:2f:6f:3c:90:3d:2d:7a:
                    10:35:46:27:b4:53:8a:06:c6:30:0a:ca:e8:46:09:
                    f5:84:49:a7:8f:1c:f2:69:95:c5:15:af:7b:c6:bd:
                    0b:5d:b9:b3:a6:4d:4f:b0:90:24:94:ad:1b:f4:e9:
                    8b:24:8f:a0:13:a4:72:ae:1b:3e:bb:0e:9a:4d:cd:
                    f4:13:5c:04:9a:28:08:dd:a1:1c:58:c8:26:9e:47:
                    14:8b:a6:02:55:bb:1f:9b:04:e6:b9:1e:25:bc:72:
                    cf:aa:79:e1:a8:96:19:4f:97:5d:61:44:49:b3:3b:
                    10:f0:64:ed:2b:d0:ba:26:0b:14:28:c3:23:ce:21:
                    29:91:f0:42:16:dd:ae:16:fa:4b:c8:7f:cb:65:3b:
                    88:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E4:B2:B9:72:93:FE:3E:B7:5A:5A:35:58:9C:53:53:FF:71:8E:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/a38f05a4-2dcb-3e26-a39b-894283327aea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.142.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:f7:ec:4b:d2:c9:d2:d4:38:53:4d:57:09:c9:73:65:8c:fa:
         fd:c4:ff:59:d8:3f:27:c6:7c:cb:d4:01:67:46:09:4c:d8:f8:
         c8:ac:2a:a1:86:38:2c:01:89:67:72:f2:bc:d5:ee:aa:47:c8:
         44:28:52:c4:30:3a:f5:a0:d2:f9:a5:de:2d:65:b0:94:66:1c:
         7a:f5:05:b3:bb:f7:2f:81:6c:67:5b:c4:7f:a9:fd:71:c5:d6:
         70:61:ca:36:54:b5:b3:cd:cd:17:07:51:51:c2:e6:98:66:cb:
         67:01:52:ee:0f:66:7d:9a:fe:c7:fc:68:45:14:84:d5:03:6a:
         04:24:09:47:93:89:64:48:de:4f:cb:51:dd:ba:7a:57:01:de:
         57:3b:51:96:cc:e6:aa:32:27:82:ef:85:61:c8:5c:3e:ed:45:
         ee:ad:26:dd:8d:bc:e4:20:5d:df:19:88:db:85:8a:02:72:b6:
         4d:24:01:b4:89:58:38:2d:b2:c5:9d:33:93:e1:d1:41:e7:b9:
         57:80:57:99:04:2e:3b:44:ee:24:1f:78:fa:97:4d:90:61:d6:
         6f:6e:40:ea:40:fb:90:37:1b:c8:d2:cf:e9:17:51:fa:0c:97:
         29:24:66:f1:cd:9a:f8:0b:aa:db:97:42:f4:9e:08:45:6c:31:
         8e:96:35:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:34 2025 by rpki-client