Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/ac5b5310-a143-3561-bfdb-2c3c06f1423c.roa
File:                     ac5b5310-a143-3561-bfdb-2c3c06f1423c.roa (raw, json)
Hash identifier:          atMwuYm8ISl8/4f4+yFfqPL3Kn5iPqKFpYrUrTgdYmI=
Subject key identifier:   D7:DD:BC:54:C0:CE:04:F2:DA:EB:6D:06:64:8A:74:E2:6A:2F:06:D6
Certificate issuer:       /CN=8309265c-1311-43ce-adf7-732012b108fd
Certificate serial:       010D0C9F432858481C9A8053B1F45E6AC2E62600
Authority key identifier: 65:2E:14:B7:F5:C4:AD:CA:C2:6E:F6:9F:9F:60:EA:FA:23:26:CC:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/ac5b5310-a143-3561-bfdb-2c3c06f1423c.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     397720
IP address blocks:        136.175.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/8309265c-1311-43ce-adf7-732012b108fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/8309265c-1311-43ce-adf7-732012b108fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:80:53:b1:f4:5e:6a:c2:e6:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8309265c-1311-43ce-adf7-732012b108fd
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=fcd30449-697d-4572-a0f6-1a2ee264d461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:74:13:96:7d:07:cf:65:cb:da:ba:f0:c6:9e:
                    22:b8:f9:c3:c0:c4:3c:f8:06:a6:9a:51:e6:a1:17:
                    ea:7a:40:32:61:bb:fa:9c:88:37:5c:a9:17:9b:5e:
                    82:6a:cb:b5:f2:40:59:0a:12:a2:38:68:ed:1b:28:
                    ab:cc:fd:47:63:d3:1b:df:0a:7a:02:01:d2:45:b7:
                    d7:d0:8a:7f:f8:1f:7a:ec:90:e0:5b:a4:4e:b7:96:
                    06:11:c3:5e:90:71:2f:18:75:be:82:e6:2c:3b:13:
                    55:0f:2c:fc:14:79:83:9b:5e:37:fd:3e:6b:77:84:
                    d6:86:62:cb:5a:11:1a:de:10:58:7b:a1:58:0a:e3:
                    77:02:9a:66:e0:00:8c:54:b2:c7:af:43:5e:8f:52:
                    24:74:77:fe:94:60:10:0c:e3:a0:f1:95:21:52:e0:
                    7a:5e:e7:7f:48:fc:a3:94:3d:56:b9:0f:0e:6a:85:
                    0b:1a:f7:84:f6:38:5a:97:17:f4:d2:37:93:a6:f0:
                    01:30:18:92:d0:ea:5c:37:b7:1b:db:a0:31:db:cb:
                    54:c4:fe:80:49:92:c5:d9:ac:1a:bb:a8:2d:5b:b5:
                    6d:fe:09:97:3d:22:90:29:f9:c7:4b:d2:89:0f:6e:
                    8e:5d:cf:7b:78:6b:bd:7f:e9:64:d5:27:93:4f:8a:
                    bd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:DD:BC:54:C0:CE:04:F2:DA:EB:6D:06:64:8A:74:E2:6A:2F:06:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/ac5b5310-a143-3561-bfdb-2c3c06f1423c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/8309265c-1311-43ce-adf7-732012b108fd.crl

            X509v3 Authority Key Identifier:
                keyid:65:2E:14:B7:F5:C4:AD:CA:C2:6E:F6:9F:9F:60:EA:FA:23:26:CC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:c4:30:66:50:e3:49:21:70:3b:35:82:08:27:e2:94:24:02:
         b5:42:2c:16:c7:27:7e:34:72:9f:16:b0:51:d5:62:53:6e:43:
         45:40:a6:76:bc:4e:6f:90:0c:a9:5d:5b:fe:e0:1c:a0:b2:ec:
         aa:af:3c:02:24:2b:74:5b:57:7a:f2:ea:ef:d8:df:26:d0:96:
         b9:82:af:74:a4:db:11:d2:46:43:49:21:0e:f1:c1:0b:51:20:
         a8:04:8a:43:b0:aa:9d:f2:7c:bf:9b:91:a1:8f:93:ab:22:fb:
         db:a7:4e:0f:d6:05:a5:a8:e4:42:e5:98:19:1b:6d:7a:9d:d0:
         77:31:fd:cb:94:4c:3a:b3:a2:c3:86:ec:01:6d:56:fb:78:c2:
         30:02:80:12:41:a5:8f:dd:17:e2:87:c8:2e:1b:48:5b:8f:f7:
         45:62:71:00:cd:88:94:dd:95:26:9c:a2:a6:1d:0b:f7:20:84:
         ef:96:23:f9:3a:61:7d:55:56:66:0f:8f:3e:13:1d:4d:f6:fa:
         10:4b:62:0c:83:21:a3:2b:91:d5:af:1a:21:aa:df:71:20:6b:
         8b:26:15:e9:c2:84:99:e1:15:25:d6:01:cf:cd:ad:05:5e:57:
         ff:5b:2f:7c:a7:fc:47:84:c4:68:af:89:fb:bc:80:16:b9:49:
         fa:96:17:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:02 2025 by rpki-client