Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/023707c3-191f-30ab-b34a-0b178c22c264.roa
File:                     023707c3-191f-30ab-b34a-0b178c22c264.roa (raw, json)
Hash identifier:          0+MMZKkML9ZmaNy6pB9Hp2ZI2NH687zLZoNh7iL31kg=
Subject key identifier:   4B:AF:38:09:A8:85:F7:19:85:7E:C1:DD:86:F8:61:02:48:DA:B1:89
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285848960B574A865246EAF3ABA640
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/023707c3-191f-30ab-b34a-0b178c22c264.roa
Signing time:             Sat 18 Jan 2025 14:00:52 +0000
ROA not before:           Sat 18 Jan 2025 14:00:52 +0000
ROA not after:            Fri 18 Apr 2025 13:00:52 +0000
asID:                     212384
IP address blocks:        139.177.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:96:0b:57:4a:86:52:46:ea:f3:ab:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jan 18 14:00:52 2025 GMT
            Not After : Apr 18 13:00:52 2025 GMT
        Subject: CN=3da9645f-93a7-45ed-863b-4860a1e8b18e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2e:1c:d6:e7:12:1d:4b:d1:ef:87:c2:aa:67:
                    5f:47:13:e9:03:d8:80:f2:71:2a:99:18:d8:24:f1:
                    ae:2c:20:cc:fa:93:40:01:0f:ea:39:c0:ea:3e:39:
                    b2:8f:5b:c8:b1:86:5d:37:a1:1a:b5:63:89:b5:89:
                    d8:52:93:4d:e2:b3:9a:fa:d9:b6:45:4b:e1:fe:64:
                    ea:d5:b6:f2:b3:2a:e7:91:f2:19:9c:d7:d9:17:dd:
                    43:30:d2:e2:10:87:09:d2:a6:41:56:94:11:35:b6:
                    56:cc:4c:41:a7:98:b1:08:ab:1d:f0:94:a4:a9:73:
                    20:4a:aa:14:b3:69:7f:b5:fe:88:3f:e1:91:03:4d:
                    8c:19:ac:0a:bf:fe:9f:7e:fb:58:e0:19:e2:25:47:
                    dc:61:e2:d5:9e:1d:bd:c4:9d:63:d9:6f:8d:f2:eb:
                    97:62:9c:e1:1c:32:e7:53:13:24:34:02:a2:df:f5:
                    2c:23:56:c1:48:c0:dd:95:57:67:82:1b:e6:f6:82:
                    5d:70:bc:97:8f:6b:c1:f2:38:f7:ab:bf:b4:3e:56:
                    4d:a2:2f:85:54:99:77:75:a2:44:04:79:00:56:5f:
                    f6:9e:67:b7:e9:69:f0:c1:ae:49:7d:a8:ac:0d:0f:
                    46:aa:8c:0e:81:d5:00:26:4f:bb:ad:5a:36:b9:17:
                    48:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AF:38:09:A8:85:F7:19:85:7E:C1:DD:86:F8:61:02:48:DA:B1:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/023707c3-191f-30ab-b34a-0b178c22c264.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:c8:57:93:7d:58:77:ef:57:07:65:cb:61:72:8f:95:ea:30:
         6c:6b:70:d5:c0:f5:ed:05:1f:ba:2d:08:6a:39:53:de:40:40:
         65:7a:04:0a:bb:46:42:56:87:5d:cc:41:e5:38:c0:31:a9:50:
         5e:b5:14:15:3c:07:14:f8:e9:b8:6d:15:12:54:e4:a1:92:a1:
         6c:8d:02:ce:80:75:af:25:3c:8d:ee:29:f4:20:f3:ec:44:0a:
         25:a8:ba:13:25:a5:2e:e7:df:c0:49:c7:20:6f:a9:95:5c:87:
         d0:47:44:e0:8c:ac:7b:a9:ae:35:6e:08:c6:4d:10:c6:17:7e:
         23:2f:2f:8e:9b:17:d0:da:f5:f0:d9:76:a1:f7:77:b2:2c:3b:
         4a:24:28:68:cc:d7:4e:c3:ac:6f:fe:fb:ae:98:05:8c:a5:13:
         37:c6:be:4b:98:c7:f6:fa:d9:71:eb:54:f9:fd:91:59:a3:c9:
         a6:44:ce:8f:3e:c3:8f:49:93:7e:4e:39:c1:d8:40:80:a8:70:
         0f:a1:df:ab:94:95:bb:32:e6:8d:06:52:5f:05:6d:e6:2f:01:
         fb:a3:f9:59:e6:d9:e7:8d:d9:93:00:f0:11:9d:82:af:e9:96:
         10:73:42:95:80:79:fb:9a:a6:70:e8:7a:a4:fe:67:2d:63:e7:
         2e:b1:51:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:25:13 2025 by rpki-client