Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/720e376b-6ca9-3955-a3c9-7c5e4ff81edd.roa
File:                     720e376b-6ca9-3955-a3c9-7c5e4ff81edd.roa (raw, json)
Hash identifier:          WcznYIBlNg9rynF/B4Cjrw66qQIeY92ytvd98gdhlxM=
Subject key identifier:   FB:04:F2:8F:4E:5A:46:AF:17:59:F0:96:32:0C:3E:2A:BC:AB:E9:F1
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848ADC609AE51F736C47E49C900
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/720e376b-6ca9-3955-a3c9-7c5e4ff81edd.roa
Signing time:             Mon 27 Jan 2025 02:00:39 +0000
ROA not before:           Mon 27 Jan 2025 02:00:39 +0000
ROA not after:            Sun 27 Apr 2025 01:00:39 +0000
asID:                     19905
IP address blocks:        208.181.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:c6:09:ae:51:f7:36:c4:7e:49:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jan 27 02:00:39 2025 GMT
            Not After : Apr 27 01:00:39 2025 GMT
        Subject: CN=d0ae6da5-52dc-4b65-b065-03b792faf840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e4:11:cb:cf:4a:14:c1:14:57:15:8c:24:ca:
                    24:2a:8e:95:53:71:bb:79:ca:9f:a8:14:9f:b2:33:
                    53:1f:af:6d:41:3a:b6:4c:df:6c:e9:da:54:38:73:
                    a9:8a:f9:22:3d:42:02:ca:03:6f:7b:b9:bf:f3:4d:
                    db:7e:3c:12:2b:1e:bc:c0:4f:44:73:9c:4f:99:47:
                    ca:bf:04:0a:18:1c:36:c8:76:5b:3c:3b:e5:95:3e:
                    52:ab:7b:0c:ae:bb:d8:f0:d5:b9:47:b9:e9:94:f9:
                    c2:13:a4:7c:25:23:3b:42:54:d1:06:3a:c5:8b:0a:
                    5b:59:5a:c7:e4:43:b2:a7:71:a4:a6:9f:b3:60:f9:
                    62:5d:a0:ac:4b:5a:8f:7d:da:d6:ce:c2:e6:10:df:
                    2b:8d:26:26:61:75:e2:73:19:e1:79:c2:f2:f1:1b:
                    df:07:05:42:b3:8e:4d:1b:9b:a4:92:93:84:23:c6:
                    2e:93:af:12:c2:2d:33:f3:4e:57:4a:e7:dd:ee:6d:
                    cb:7a:47:04:fd:d4:98:3d:fe:d5:20:48:20:7b:a7:
                    1d:5b:f5:75:67:1b:0f:bd:82:dc:ec:c0:d3:e7:f2:
                    9f:c7:65:cc:a8:71:99:04:92:ec:c8:98:56:8b:4f:
                    3b:d1:91:87:54:e9:9b:b4:67:da:03:13:5f:d3:5b:
                    2a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:04:F2:8F:4E:5A:46:AF:17:59:F0:96:32:0C:3E:2A:BC:AB:E9:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/720e376b-6ca9-3955-a3c9-7c5e4ff81edd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.181.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:1b:30:52:05:60:ae:e8:92:24:e0:d4:ca:73:a9:6c:47:01:
         af:35:f4:85:fb:74:a3:4f:b2:6b:21:fb:20:c2:90:a1:df:5a:
         ee:65:72:b4:15:82:76:da:15:55:cb:32:f9:33:47:1a:f9:e1:
         78:ee:da:97:81:51:19:c0:fe:59:39:18:44:2b:6a:8d:2e:7f:
         ed:5c:da:3c:40:b0:0f:76:30:1c:17:d5:6e:2e:d4:a1:cb:d1:
         89:21:f2:70:d2:23:62:a2:32:6f:43:41:a7:00:a4:1d:47:7b:
         00:a7:04:83:45:e6:70:ed:04:7f:94:23:89:4e:8c:7f:cb:86:
         5c:60:79:d4:26:e5:4d:7b:77:a7:ee:7d:c0:43:ab:f7:15:91:
         a6:1e:69:00:fa:0e:1b:f6:29:c0:b2:8b:66:f9:13:87:cb:0b:
         9b:10:97:78:c5:9b:0c:1c:b1:a3:d0:fa:da:a9:ed:f0:af:23:
         44:56:b5:e8:95:35:a4:e3:3a:e4:98:a3:c4:d2:af:27:44:fa:
         dd:b4:1a:51:5b:bb:ee:e3:10:ae:c3:a5:fc:8d:a3:07:44:c3:
         44:71:0b:5c:5d:ad:42:aa:68:5a:01:a1:90:6c:73:28:4c:ed:
         37:05:0d:89:87:ef:9c:d9:00:77:e8:6c:34:a1:41:73:8b:9e:
         bc:2b:44:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:38:02 2025 by rpki-client