Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/fdfe3f12-0830-3239-8ff4-4615da8e7d07.roa
File:                     fdfe3f12-0830-3239-8ff4-4615da8e7d07.roa (raw, json)
Hash identifier:          6SSFIOwavXSgbfODMkUs0hJYL4uGtboo5mdK61AD31k=
Subject key identifier:   A0:3A:7B:49:FD:A4:BC:1B:AB:39:D2:49:CF:FA:FC:4D:D7:DE:57:7F
Certificate issuer:       /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial:       010D0C9F43285848BE862CE98D47864E6F7CD180
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/fdfe3f12-0830-3239-8ff4-4615da8e7d07.roa
Signing time:             Sun 02 Feb 2025 02:00:39 +0000
ROA not before:           Sun 02 Feb 2025 02:00:39 +0000
ROA not after:            Sat 03 May 2025 01:00:39 +0000
asID:                     20249
IP address blocks:        169.196.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:86:2c:e9:8d:47:86:4e:6f:7c:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
        Validity
            Not Before: Feb  2 02:00:39 2025 GMT
            Not After : May  3 01:00:39 2025 GMT
        Subject: CN=329b78a9-95d5-4b40-9a78-46502dbc6e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c4:41:f4:85:0f:ff:f4:33:68:ce:25:c8:05:
                    3d:d4:18:fc:77:8f:79:5e:e6:00:2e:29:44:f0:4e:
                    a6:75:bd:87:93:c4:92:04:bd:f7:0d:99:1f:e3:20:
                    db:c7:c8:f3:c6:51:5f:21:ee:10:09:5e:8c:52:f9:
                    af:c9:18:99:14:89:1c:cb:bf:c3:78:e4:c5:be:40:
                    34:57:42:a6:3c:b5:c3:ec:88:57:95:84:f9:0a:34:
                    dc:07:e0:09:60:d1:dd:70:86:a6:aa:46:03:3d:0e:
                    b2:9a:31:15:00:9d:1e:78:68:02:b7:eb:7c:3a:84:
                    88:d2:a3:38:76:78:97:55:46:b6:7e:72:47:5d:6f:
                    54:ab:69:09:32:b6:42:bb:6c:df:ca:33:f3:eb:e6:
                    19:71:43:b6:1b:c1:67:41:3d:73:51:ca:d5:0f:7c:
                    1c:0a:7c:62:60:5a:73:ad:d3:40:46:55:ae:fa:30:
                    c4:47:e2:7a:b9:98:e2:c4:4c:98:ac:d3:95:51:c7:
                    b4:f9:e9:9f:64:c6:05:a7:2c:a7:f2:87:5e:5c:80:
                    21:e9:0e:24:3e:6c:1f:3b:2d:28:38:7f:73:e8:4d:
                    92:48:da:f1:94:3e:ef:88:d1:ef:b9:41:25:1d:75:
                    a8:1e:49:d0:38:5a:c9:9b:3a:38:60:56:50:ed:90:
                    95:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:3A:7B:49:FD:A4:BC:1B:AB:39:D2:49:CF:FA:FC:4D:D7:DE:57:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/fdfe3f12-0830-3239-8ff4-4615da8e7d07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl

            X509v3 Authority Key Identifier:
                keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.196.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:47:64:46:92:a8:6c:74:74:53:cf:4e:0a:4e:72:22:44:0f:
         c7:35:b7:78:40:c2:ed:59:38:5c:30:bb:4b:06:a7:b5:d9:30:
         b0:a0:a0:34:2d:d9:a6:75:d8:8c:2a:e5:e5:e6:ff:22:bc:0c:
         71:3b:10:17:d3:f5:ae:b6:91:83:b2:ca:1e:6f:14:2c:a4:17:
         71:cd:27:07:a1:ac:50:8d:3a:a1:62:5e:9e:5b:23:ac:83:5c:
         0e:e7:0b:6b:39:be:93:8f:f5:3a:c7:3f:82:e2:4b:7a:1e:55:
         d0:9e:e5:24:5c:91:25:67:c8:40:b5:a1:19:f8:df:43:e1:5f:
         de:6c:85:1a:f4:ff:c4:79:c1:fb:62:78:48:6c:55:49:a0:fe:
         ec:b4:32:58:34:6a:01:7b:28:c4:06:30:52:e9:57:44:ea:fe:
         ac:a1:c6:23:be:20:ea:0d:ce:eb:6b:9a:09:97:f8:f2:95:3c:
         f6:f1:d0:20:a2:4b:7d:52:a5:22:39:78:cf:3a:2b:fb:4f:82:
         13:d8:4d:8b:a9:69:84:ab:f2:33:41:8d:54:b7:be:a5:1d:b9:
         36:5b:aa:b1:6c:f4:49:b5:99:03:a4:72:05:53:da:53:0c:76:
         19:05:6d:73:af:08:21:92:b4:a0:c8:b8:3e:81:e8:23:22:82:
         27:57:6c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:04:32 2025 by rpki-client