Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/4e7c3637-3521-3ddc-8a98-75cd45b98bf5.roa
File:                     4e7c3637-3521-3ddc-8a98-75cd45b98bf5.roa (raw, json)
Hash identifier:          e5D4EzE3Pp1tcu6cD/M95mkX+02r5Hpvc6MRLxohlcY=
Subject key identifier:   EC:58:B0:E7:30:5B:F7:B2:CC:CA:60:52:96:78:91:64:2E:37:A9:BE
Certificate issuer:       /CN=57823265-9949-4030-be09-5aebdf77ae5c
Certificate serial:       010D0C9F43285848A1360B7A591D90FE82245B80
Authority key identifier: 1C:6D:47:DA:B4:8D:E7:E4:D7:89:61:7B:B7:05:BD:DB:14:10:64:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/4e7c3637-3521-3ddc-8a98-75cd45b98bf5.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        209.182.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/57823265-9949-4030-be09-5aebdf77ae5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/57823265-9949-4030-be09-5aebdf77ae5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:0b:7a:59:1d:90:fe:82:24:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57823265-9949-4030-be09-5aebdf77ae5c
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=3cbc65cd-226f-4b5c-9fe6-d5a5d4a0db69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a8:74:37:aa:d4:fc:f6:5b:ef:dd:0a:96:f9:
                    6a:f7:52:df:3a:31:97:bf:17:a0:ab:9f:96:2d:e8:
                    31:91:22:aa:49:29:fe:3b:e6:0e:79:69:c8:1e:53:
                    b5:0b:e7:59:d9:e5:06:d1:c7:4a:0c:1b:97:b9:c3:
                    5a:a9:c7:93:49:aa:e9:5f:71:47:e7:71:f2:6b:da:
                    9c:f9:94:76:a7:ca:8a:bb:bc:2d:66:04:9d:bf:4b:
                    14:26:c3:06:ae:a6:59:0e:35:dc:c2:5f:f8:d4:ab:
                    c8:75:15:3d:8d:41:f0:6f:06:06:1d:8e:b8:de:16:
                    5f:ad:fc:9f:4c:5c:e7:18:a7:f8:d7:d2:62:7a:8b:
                    6a:56:3a:3a:05:8e:dc:3c:e8:49:6a:5f:11:83:77:
                    0c:e4:b0:65:ee:94:32:d5:f2:f2:f8:a8:79:9d:fb:
                    cc:c9:22:1b:e6:81:9f:95:19:6e:22:ee:5e:b3:f0:
                    db:c3:7d:80:05:b6:cf:48:40:1e:ad:67:65:00:46:
                    d4:26:e7:88:d4:9a:a3:0f:91:d0:4d:68:00:ca:b8:
                    06:39:d0:04:b4:aa:27:f9:3a:40:37:c8:8f:0a:25:
                    7c:c0:bd:45:71:5f:5c:ef:e3:56:e0:72:51:b9:21:
                    d8:2a:e2:fa:22:69:ce:f7:fe:af:8d:f2:e3:a0:7d:
                    58:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:58:B0:E7:30:5B:F7:B2:CC:CA:60:52:96:78:91:64:2E:37:A9:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/4e7c3637-3521-3ddc-8a98-75cd45b98bf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/57823265-9949-4030-be09-5aebdf77ae5c.crl

            X509v3 Authority Key Identifier:
                keyid:1C:6D:47:DA:B4:8D:E7:E4:D7:89:61:7B:B7:05:BD:DB:14:10:64:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.182.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:0f:bd:53:4f:5b:62:00:df:37:92:4b:3b:0e:95:6b:41:02:
         11:27:35:e4:cc:88:b0:a0:f5:48:52:45:5b:d6:c3:9c:0a:ed:
         f9:08:99:2e:42:66:8f:26:66:b6:22:a6:ac:42:37:b5:13:87:
         88:b5:ff:6d:33:cc:f1:cb:ef:78:cc:85:ea:5a:99:f0:36:66:
         2f:9b:27:48:31:9d:a8:d2:3f:33:c1:2f:ed:c5:1f:c7:13:f8:
         a2:99:81:40:65:05:72:79:0f:b1:ac:41:1e:87:3e:d1:7d:25:
         a9:6c:3b:ad:b0:d8:1b:34:dc:e3:62:5a:63:84:3d:39:7d:98:
         63:c5:f3:44:46:51:7c:59:b2:90:5a:b9:3e:66:e6:68:b0:32:
         fd:cb:34:5a:24:a6:0a:00:f2:61:17:31:8e:49:42:7f:6d:11:
         f9:d1:f3:a8:2a:62:4e:95:b7:71:1c:86:86:58:3e:dc:6c:84:
         50:4f:0c:95:c0:47:63:7c:aa:db:98:10:1d:4b:37:65:b1:51:
         14:da:6e:d2:64:3f:39:cf:d4:d3:1b:8d:08:b1:f8:e5:6f:c3:
         23:6f:21:e0:3b:06:1b:89:77:33:6d:47:e9:28:2d:42:c0:b3:
         05:88:81:9a:da:5c:59:ff:67:21:8a:82:df:e5:3c:f3:26:31:
         eb:af:17:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:07 2025 by rpki-client