Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/e118b462-93ab-3146-891f-cfd3ad717961.roa
File:                     e118b462-93ab-3146-891f-cfd3ad717961.roa (raw, json)
Hash identifier:          4kl363qh1wLJWal4b5n6Oiu9Jq3voGUcYm2ZAw/yTvM=
Subject key identifier:   C9:E5:07:63:0F:00:F3:E6:57:A9:10:12:66:E8:69:9C:A1:EB:D3:E4
Certificate issuer:       /CN=1c3c552c-5e23-4989-8af0-9450094442e8
Certificate serial:       010D0C9F43285848C6E62D57BA9549A006112180
Authority key identifier: 1A:93:B0:E0:60:7D:5D:45:A7:A5:FE:02:0C:FB:19:86:20:FE:CC:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/e118b462-93ab-3146-891f-cfd3ad717961.roa
Signing time:             Wed 05 Feb 2025 02:00:39 +0000
ROA not before:           Wed 05 Feb 2025 02:00:39 +0000
ROA not after:            Tue 06 May 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        142.225.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/1c3c552c-5e23-4989-8af0-9450094442e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/1c3c552c-5e23-4989-8af0-9450094442e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c6:e6:2d:57:ba:95:49:a0:06:11:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c3c552c-5e23-4989-8af0-9450094442e8
        Validity
            Not Before: Feb  5 02:00:39 2025 GMT
            Not After : May  6 01:00:39 2025 GMT
        Subject: CN=9d2fd024-d0c1-42bd-a721-cf0c16da477d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c2:e7:d0:b8:d2:97:66:af:35:65:88:89:04:
                    47:01:00:f7:9d:8f:72:7c:eb:a0:40:40:50:7d:1a:
                    65:79:3c:01:5d:38:e8:47:49:51:f1:ad:71:24:1a:
                    b1:82:c0:7b:14:6d:81:a2:72:87:e4:2e:05:70:e4:
                    ee:9b:30:51:3f:60:00:c1:1c:f1:19:e4:76:0f:24:
                    17:5f:af:a1:95:55:43:bf:14:e4:0e:b4:7a:93:3b:
                    e4:33:be:6b:80:9d:4e:b5:99:49:21:6f:56:17:6c:
                    b4:ec:14:a3:61:46:be:2c:a5:e5:ee:f7:92:1f:8c:
                    ce:a6:02:c7:a4:6a:f3:5d:75:8c:25:73:61:58:8d:
                    16:ee:c9:a8:f8:f6:77:9f:1b:82:80:06:a4:f0:9b:
                    50:08:40:aa:f7:6f:14:5e:90:66:2f:d4:82:62:cd:
                    f9:95:cd:68:64:bf:5e:9c:8b:d9:56:4c:06:b5:2b:
                    55:03:64:dd:f2:8f:a8:b3:3d:3c:15:84:b8:8d:b3:
                    eb:fa:79:68:d0:d0:1a:b0:04:ef:d0:91:ac:dc:ab:
                    1d:99:31:45:4f:0a:9c:e5:ae:e3:8f:25:f9:77:90:
                    13:02:21:62:88:23:7b:34:0d:a4:40:fa:a9:f8:d4:
                    b6:b1:da:f3:47:4f:3d:c8:52:a3:e1:c9:d5:aa:88:
                    64:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E5:07:63:0F:00:F3:E6:57:A9:10:12:66:E8:69:9C:A1:EB:D3:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/e118b462-93ab-3146-891f-cfd3ad717961.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/1c3c552c-5e23-4989-8af0-9450094442e8.crl

            X509v3 Authority Key Identifier:
                keyid:1A:93:B0:E0:60:7D:5D:45:A7:A5:FE:02:0C:FB:19:86:20:FE:CC:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.225.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:d0:81:2b:7b:90:41:c8:47:a2:98:7a:fd:b0:9d:1f:7d:e7:
         02:8c:52:f9:5c:8f:89:cb:c7:92:cc:dc:ee:95:d1:e0:fd:7f:
         93:7e:00:c7:4a:98:ad:5c:80:ea:f1:e5:da:2a:25:b9:3a:e1:
         70:90:01:4a:ac:09:e7:de:96:55:c6:fe:51:98:9b:96:be:91:
         ea:03:ad:93:bf:08:8a:cd:fd:be:59:96:db:23:9a:ff:83:72:
         42:4e:a5:93:86:28:e1:26:b0:24:5c:1d:07:54:76:21:c1:c7:
         ac:1d:0a:ce:41:ac:bd:28:fe:25:45:39:e3:1f:41:a5:fc:f1:
         29:3e:90:41:1a:fa:cf:44:07:82:73:bb:8f:62:5b:54:c9:e5:
         bd:c2:83:b2:37:2b:d8:52:20:cd:bc:dd:4b:82:dd:44:59:18:
         a6:61:5e:ba:dd:eb:c8:01:96:0d:e3:40:a8:17:7b:85:1e:25:
         bf:89:3a:a7:7d:5c:57:98:e7:03:dd:5e:5c:74:a1:68:c0:dc:
         e2:c5:ac:a3:44:31:21:68:c1:b4:ce:4d:b2:ee:24:32:2d:af:
         90:b5:9b:78:cd:18:8d:00:30:38:7b:ac:6d:54:fb:00:b7:27:
         fd:7b:25:3a:c5:6b:5c:f5:94:d6:65:13:b0:bd:b1:b6:d0:50:
         68:2a:07:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:10:54 2025 by rpki-client