Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/24bc549e-105e-3823-8b17-818c260913fa.roa
File:                     24bc549e-105e-3823-8b17-818c260913fa.roa (raw, json)
Hash identifier:          x1McSx+S1iCSAhSF5NnBbUxy85BknYBQJzJlaujqurU=
Subject key identifier:   A8:8E:BB:3C:E0:D7:60:7D:98:5F:C5:C0:27:74:A9:6B:F5:04:FD:2B
Certificate issuer:       /CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
Certificate serial:       010D0C9F432858486EF5BE8D0FE3944E6E7E0D80
Authority key identifier: FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/24bc549e-105e-3823-8b17-818c260913fa.roa
Signing time:             Sat 04 Jan 2025 14:00:51 +0000
ROA not before:           Sat 04 Jan 2025 14:00:51 +0000
ROA not after:            Fri 04 Apr 2025 13:00:51 +0000
asID:                     26863
IP address blocks:        64.40.9.0/24 maxlen: 24
                          168.100.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6e:f5:be:8d:0f:e3:94:4e:6e:7e:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
        Validity
            Not Before: Jan  4 14:00:51 2025 GMT
            Not After : Apr  4 13:00:51 2025 GMT
        Subject: CN=b0188d2f-e152-4497-bde6-c671b42b052d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0e:fe:f1:6b:91:d3:d6:4b:5c:06:d4:04:bc:
                    f2:03:25:32:fd:e7:18:ab:6d:7a:3b:fe:c1:1d:9d:
                    db:cd:96:00:9a:12:4b:c5:1a:5c:12:b7:eb:bb:e0:
                    f9:a6:a1:66:6c:10:e5:6a:9e:8a:41:9c:ec:f3:13:
                    d0:aa:d6:6a:a2:e3:07:21:64:af:8a:d0:da:f6:d7:
                    bd:70:d7:6a:4a:14:8d:1a:e6:34:3d:87:86:34:fc:
                    f5:9d:bd:b0:f6:e2:37:ba:97:9b:87:9c:87:25:44:
                    eb:af:69:ce:00:62:d7:26:3a:38:15:02:72:30:d6:
                    5a:df:7c:1f:e0:4f:ee:09:f7:01:cd:0e:35:d7:4e:
                    ca:4f:70:6b:0c:04:35:06:c8:76:d1:10:80:51:04:
                    bc:51:90:7b:33:11:62:e7:fc:dc:2c:4e:6d:e3:38:
                    54:35:fd:9c:34:8d:cd:e1:72:97:67:35:6a:ab:b8:
                    5f:d0:9e:1e:a4:f6:69:1e:7b:e0:7c:83:af:59:b5:
                    55:49:2d:e4:be:fd:b4:47:78:1a:6e:3a:eb:98:a3:
                    ef:1e:9c:0c:d3:67:22:89:d6:d2:61:ad:ee:7f:b6:
                    3c:36:8c:49:a3:88:4b:bf:1d:0b:8c:8c:40:1c:f8:
                    93:74:53:fe:55:fa:57:8a:10:dc:50:72:71:71:3e:
                    c5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:8E:BB:3C:E0:D7:60:7D:98:5F:C5:C0:27:74:A9:6B:F5:04:FD:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/24bc549e-105e-3823-8b17-818c260913fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl

            X509v3 Authority Key Identifier:
                keyid:FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.9.0/24
                  168.100.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:10:f1:50:e2:36:e4:c5:90:7c:53:87:a9:e4:54:17:31:68:
         b6:78:07:67:af:d5:e3:76:b9:a2:5f:79:eb:54:99:90:07:03:
         26:b6:15:77:2c:6e:2b:3a:a1:81:7a:16:a7:80:00:68:fa:33:
         45:37:e1:2d:1c:df:02:30:a4:be:7b:0e:1e:a9:8d:74:d7:e2:
         1d:c9:c8:66:bc:10:13:61:77:9a:77:dd:73:d8:d4:9a:3b:e8:
         cd:eb:bc:04:0d:8b:66:29:83:12:14:9c:55:a8:61:0a:fa:c1:
         06:b7:3c:46:8d:1f:1d:b9:7d:f3:a3:96:53:04:7d:1f:e9:e0:
         ac:ac:37:d8:dc:c2:d6:b6:e5:0b:d3:53:38:e9:b4:44:33:20:
         6f:dc:9c:fa:e8:e0:1a:97:5a:80:6b:22:71:84:08:5d:1b:d0:
         e7:34:d5:5d:27:8e:ba:84:ca:78:e3:0d:e6:d6:df:b9:f5:3d:
         ec:cc:1c:c0:c9:42:fa:29:3d:4b:97:4d:c2:6a:34:67:60:33:
         d7:07:19:c9:dc:e9:38:e7:54:0b:81:8c:8d:fc:49:85:bd:8d:
         93:17:67:94:6e:61:d9:83:3c:62:7c:bc:fd:10:7b:c3:fb:55:
         e0:a5:aa:80:69:92:2b:eb:05:da:af:61:b4:02:38:88:7f:f5:
         12:55:e1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:21 2025 by rpki-client