Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/5513a9a6-1b3a-3b30-ba52-c43d2282f3d5.roa
File:                     5513a9a6-1b3a-3b30-ba52-c43d2282f3d5.roa (raw, json)
Hash identifier:          rw5sly5U3vPR98EyINh3XQrXXysZsZ/cXxyokSIPOXI=
Subject key identifier:   A9:80:E0:7E:D8:96:A4:ED:E8:F1:6C:52:FA:FA:B1:DC:FE:20:9E:34
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F432858484515881835D1208FE052B580
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/5513a9a6-1b3a-3b30-ba52-c43d2282f3d5.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     61317
IP address blocks:        216.177.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:88:18:35:d1:20:8f:e0:52:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=439f4593-96ea-4f86-89da-b6b83f17f450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:72:4f:93:d9:7c:4a:ad:75:79:7f:97:be:ce:
                    03:1d:93:bb:6a:75:06:25:d7:ec:53:ba:6a:8e:51:
                    5f:9f:11:bb:07:6f:f9:97:9a:2b:dd:03:58:54:72:
                    23:77:d3:82:fb:0c:08:09:d8:b5:9a:44:bc:80:e0:
                    79:3a:7e:2b:ef:24:f0:de:fc:ff:13:02:d1:18:97:
                    2d:89:c3:b1:55:64:3d:3a:7f:ef:0c:de:06:81:a0:
                    1d:87:33:61:b1:74:2d:c5:11:a0:d5:aa:58:6d:0c:
                    ae:66:b7:ed:a3:eb:c0:6a:ab:10:a8:b9:8a:67:10:
                    57:67:37:bc:96:05:e6:98:7b:fe:94:51:33:7c:a0:
                    84:e2:87:d2:1c:29:21:76:6b:a1:22:ef:c3:3f:bd:
                    cc:84:a1:e8:cf:46:7d:41:0c:47:f9:9d:4a:fb:8e:
                    37:aa:c7:b2:0d:e5:02:d9:17:1a:7a:a3:d8:13:69:
                    8d:ee:30:ff:ef:59:b1:37:3a:66:fc:49:de:9a:fa:
                    aa:e6:07:ff:4e:37:69:c0:18:cb:f6:fa:1b:02:fb:
                    ed:02:76:92:d2:68:46:4a:5c:93:6d:06:45:79:3b:
                    df:41:f6:8b:cd:db:3e:31:33:31:5a:44:44:71:30:
                    05:6d:3a:ab:02:84:57:60:73:89:ce:c2:6f:ac:09:
                    04:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:80:E0:7E:D8:96:A4:ED:E8:F1:6C:52:FA:FA:B1:DC:FE:20:9E:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/5513a9a6-1b3a-3b30-ba52-c43d2282f3d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.177.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:94:00:f1:0f:f8:22:10:ec:7f:23:d2:f8:c9:cc:15:ff:a2:
         bb:a7:5a:0c:17:3f:86:12:ee:6c:be:2a:4a:a3:0c:fa:78:ce:
         61:61:c9:8d:db:e2:a5:cf:a7:39:14:09:e6:0e:ca:58:0a:8b:
         ea:a9:ca:8b:ca:fb:d4:ba:31:e6:a2:fc:5d:1c:6f:ca:0b:9f:
         08:74:b9:1d:2a:1d:3b:12:a8:6a:3e:58:85:ad:2f:e4:1a:7e:
         df:4f:63:ed:a9:1c:2b:95:41:30:bc:b1:68:c3:f1:b1:2d:2e:
         e4:ce:26:85:a8:03:6d:e1:8b:75:b2:17:0f:3e:ef:b7:71:06:
         1c:9d:8d:f1:99:8a:be:d3:63:22:31:15:72:e7:65:7f:09:f4:
         b4:30:53:a2:c5:68:df:b2:76:9c:6b:00:03:a8:87:82:cb:fc:
         8f:81:e1:c3:99:c9:f0:ae:01:ae:18:81:e7:f5:2b:ac:af:2a:
         de:5b:e7:a7:28:cb:7f:04:bb:59:18:47:3b:59:ab:e3:cc:33:
         fb:41:86:a8:85:c6:69:87:80:f0:1a:ea:42:cf:03:48:85:32:
         a9:09:e4:aa:84:fc:a6:0d:cb:9a:bf:c3:ec:32:43:b9:7e:e6:
         97:1f:9c:61:c2:62:a7:c8:24:7a:fd:7d:d2:75:88:80:22:39:
         54:46:1a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:35:22 2025 by rpki-client