Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/b47f4a91-d1d5-37c8-b661-b064d98eb393.roa
File:                     b47f4a91-d1d5-37c8-b661-b064d98eb393.roa (raw, json)
Hash identifier:          f1PPd5ya0J9bSUrRFnJ1EJsB33aeBP1B2Ys1TF8IHWo=
Subject key identifier:   BE:B2:C5:DC:46:FC:7A:3F:B3:40:B8:C2:D0:1D:C3:F5:9C:07:7F:4D
Certificate issuer:       /CN=429c38be-db51-4d91-a361-94ba3bfd9e9a
Certificate serial:       010D0C9F43285848F926972D35898DF2A7966540
Authority key identifier: 3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/b47f4a91-d1d5-37c8-b661-b064d98eb393.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        135.84.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:97:2d:35:89:8d:f2:a7:96:65:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429c38be-db51-4d91-a361-94ba3bfd9e9a
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=c9ba4ad2-eeb7-4304-9ba0-9ad9732596da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d5:9f:6a:39:16:aa:6d:e6:62:a7:d5:51:f7:
                    3f:02:ec:a6:02:bd:6f:e1:36:84:1c:c9:f2:0d:3f:
                    9c:6b:7f:ef:b4:fe:4b:cc:9e:3e:69:87:19:af:21:
                    55:15:06:30:86:44:a6:c1:9a:e0:48:4c:89:18:da:
                    07:99:0c:8b:fa:be:a4:12:90:65:7f:bc:e0:f1:53:
                    32:17:9e:89:38:3c:c1:cd:a0:42:b8:95:99:29:20:
                    1b:7e:0c:c1:02:6b:a1:6f:db:73:f4:68:24:68:67:
                    6c:f0:9f:ab:71:c5:2d:92:17:2a:a6:6f:88:d3:8a:
                    ec:3a:3c:f8:25:53:f7:91:a9:e4:cd:93:a2:c6:17:
                    06:19:60:44:22:d1:c7:60:86:9e:08:ed:12:52:ea:
                    0b:a3:ad:58:ba:4c:b7:89:6a:65:20:40:83:2b:97:
                    80:34:17:05:34:ce:40:91:bc:66:59:e9:e3:67:93:
                    b3:3d:b5:93:ec:e7:1b:58:a6:51:36:44:44:60:01:
                    65:77:78:58:3c:c2:71:c3:22:f1:23:39:c8:36:ec:
                    b9:b6:d8:fc:52:ed:5c:83:da:c7:05:2e:12:00:08:
                    69:0b:40:3e:f8:2a:cd:5a:ca:c2:c1:1c:9c:91:79:
                    11:3e:39:e3:36:36:88:9b:a6:cc:35:b1:6f:20:c2:
                    0e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B2:C5:DC:46:FC:7A:3F:B3:40:B8:C2:D0:1D:C3:F5:9C:07:7F:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/b47f4a91-d1d5-37c8-b661-b064d98eb393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.crl

            X509v3 Authority Key Identifier:
                keyid:3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:39:4b:6d:a5:db:4d:c9:65:1b:a1:ae:fa:1d:f9:4d:f4:ff:
         24:82:82:c3:a2:0b:8f:e7:8e:73:43:ce:0e:2e:b4:81:0b:3a:
         07:2f:bd:e5:a8:1b:25:bb:d1:60:32:73:4e:bb:ad:98:19:9a:
         b8:09:a8:5d:0d:2e:d3:5c:d6:c8:f4:b3:87:e8:6a:d8:f2:85:
         6b:4f:03:95:c6:88:fa:28:67:d6:dd:63:9d:05:8c:0f:14:61:
         f9:28:1f:7f:91:17:a4:81:62:1a:df:3a:2c:53:99:8b:7f:54:
         1e:de:db:16:31:7f:94:04:53:8c:97:6d:22:1d:23:3f:0b:bf:
         a0:96:9d:1c:4d:4e:3a:26:41:10:fe:a2:52:35:69:05:82:d9:
         4d:1d:cb:00:93:a8:2c:59:00:45:23:86:8c:0c:07:4f:c5:e3:
         65:b2:76:84:44:1a:6b:4b:e1:e7:d0:9c:c8:a0:65:d3:f5:2d:
         90:34:a5:31:cb:02:fb:2e:95:14:0a:a4:8e:fb:17:e5:d7:ce:
         27:79:40:ed:1d:5b:18:12:5d:2a:17:cc:2b:94:41:5f:23:b1:
         47:20:e9:1d:81:d7:f9:10:68:64:b3:84:9c:75:e1:b4:af:ef:
         79:2b:74:37:c8:20:91:71:cf:11:57:1c:8b:24:2f:2b:35:a1:
         90:94:b7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:05:19 2025 by rpki-client