Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/fad19471-683c-347b-9de4-dd147bc35286.roa
File:                     fad19471-683c-347b-9de4-dd147bc35286.roa (raw, json)
Hash identifier:          X1RGB7xcPyQ0xs4nRl08WEn9AnEA4TKMmlv5OJBxEAY=
Subject key identifier:   34:99:B4:35:BB:0A:00:B4:10:36:EC:8B:50:29:EE:78:79:B6:82:55
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F43285848BBBB73B40EEEC448B761A380
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/fad19471-683c-347b-9de4-dd147bc35286.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     394437
IP address blocks:        72.20.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:73:b4:0e:ee:c4:48:b7:61:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=b5f5152a-3ffa-4bc4-9aa0-bbcea85816b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:78:96:1e:01:c2:10:ec:64:16:b5:fc:3b:c4:
                    6f:c2:c0:5e:b8:c1:59:60:31:bd:6a:d9:22:00:7b:
                    47:de:05:bf:bb:de:ce:91:6e:73:b9:57:ff:c1:a3:
                    6d:32:9d:e2:ef:89:9e:6d:02:52:79:67:e9:60:d5:
                    5d:31:f3:2f:dc:a2:2d:b6:2f:9d:5f:55:43:b3:25:
                    53:5e:26:86:5c:15:b2:26:51:b2:e7:cb:0a:62:6a:
                    49:54:f3:a9:b6:12:65:f5:dc:06:bd:ac:5c:6e:37:
                    b3:6e:9d:92:d7:23:d6:1c:d4:3e:35:ef:fe:ed:d0:
                    ca:c7:58:ac:4b:ef:d7:e1:b5:1c:36:de:f2:13:47:
                    b2:16:0c:1c:f0:03:88:77:5b:34:a7:b2:9e:50:14:
                    8d:cc:71:8b:a1:94:e1:74:a9:4d:2d:55:e2:4f:1d:
                    ff:2b:a3:f1:47:b1:97:b1:95:5e:6a:15:38:d1:16:
                    b4:d7:7f:85:e9:f0:15:f2:b1:57:42:85:1c:b5:12:
                    8c:50:1b:aa:0a:1d:6d:35:8c:aa:49:7a:bc:98:1a:
                    d4:24:98:8f:f7:2a:7f:81:bb:86:83:b6:7c:04:54:
                    c1:fe:ae:4e:75:4c:95:07:07:ca:65:89:ea:22:e1:
                    46:6f:c7:01:7d:ff:25:c0:82:35:59:3d:e4:ee:e5:
                    58:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:99:B4:35:BB:0A:00:B4:10:36:EC:8B:50:29:EE:78:79:B6:82:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/fad19471-683c-347b-9de4-dd147bc35286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.20.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:68:6d:4c:21:ab:0f:d5:93:74:e1:23:2e:04:37:eb:96:a0:
         be:38:90:90:3b:62:65:c9:66:41:65:21:bb:af:0f:dd:fd:b1:
         1c:4e:63:4c:3c:cb:97:4f:d9:f4:9a:bd:6e:27:f9:a4:09:72:
         22:3a:ad:e8:44:1a:f3:a3:4a:0b:fa:98:1f:22:98:41:fd:6c:
         25:ab:ec:46:68:d3:09:83:a8:76:e4:ba:50:b2:96:f1:20:27:
         36:69:c2:fb:67:5d:d2:f5:a5:21:e9:57:a4:55:42:42:1e:43:
         e6:3d:6f:7b:12:1e:7c:2a:e7:de:2f:1d:a0:03:66:17:32:a0:
         17:b2:98:87:5c:c0:bc:05:93:2e:18:3a:08:1b:b6:b9:a9:e2:
         67:05:87:d3:85:94:87:c4:ca:0b:5a:c4:97:5b:4a:30:2a:9f:
         46:ec:dc:d7:fc:29:74:9d:2d:fa:1a:da:d4:22:81:f7:b6:60:
         01:37:35:71:e7:90:80:22:91:7b:7a:a2:87:9b:fc:a0:ac:78:
         3d:93:eb:a7:32:c9:6e:f1:63:af:67:f5:28:63:22:2f:fe:31:
         70:d4:4d:00:df:63:05:3c:92:2d:6e:54:91:e9:a4:55:76:0e:
         90:11:0e:38:9d:17:80:3c:f9:70:af:f3:90:01:47:44:52:6b:
         ab:22:65:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:10:30 2025 by rpki-client