Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/5fbc700e-9fc9-314d-b424-083af6f592c8.roa
File:                     5fbc700e-9fc9-314d-b424-083af6f592c8.roa (raw, json)
Hash identifier:          QY0TBVDZcxQKUSh4+tviKxG6EeLuw5fM6LOnZPm+f2I=
Subject key identifier:   D8:79:62:B6:C3:5C:F0:ED:2A:A2:58:77:FB:6F:78:6E:B2:2B:DC:5A
Certificate issuer:       /CN=a1f49b6f-a170-485e-8c07-d518b906c6ae
Certificate serial:       010D0C9F432858484D758DF0024EFB2DB78D5F00
Authority key identifier: 5F:D6:DB:12:03:6D:54:0E:FB:5F:55:5F:C1:4A:FC:20:D9:54:A6:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/5fbc700e-9fc9-314d-b424-083af6f592c8.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     25637
IP address blocks:        69.165.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:8d:f0:02:4e:fb:2d:b7:8d:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1f49b6f-a170-485e-8c07-d518b906c6ae
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=a9d79e32-7276-406a-a589-92b2bd774721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:49:f6:93:af:df:c3:d0:a6:ed:22:4d:db:8b:
                    87:ca:2a:0c:65:41:ae:19:95:81:09:e8:22:42:7c:
                    a2:60:64:f5:7d:c0:f0:9e:ab:ae:4f:16:db:35:24:
                    77:4a:3d:37:ac:51:75:70:98:9b:76:16:c6:5a:b5:
                    e0:0f:a0:1b:da:da:31:37:46:8a:95:35:2d:6e:e4:
                    7e:c8:f3:6a:ba:2f:03:68:67:33:9a:c1:25:f0:ca:
                    7d:4e:5d:eb:01:ca:d9:4c:52:bc:8b:e9:6a:04:ee:
                    07:26:b3:12:4d:dd:7e:02:fa:cc:51:2f:5d:cc:63:
                    68:e3:49:34:77:a9:39:12:d2:11:7a:c1:ee:69:33:
                    9d:3b:99:4e:9f:f3:e6:f3:f5:2a:dd:5c:c8:4a:f3:
                    6a:de:28:38:66:ce:9f:ee:c6:49:d9:81:27:16:eb:
                    d2:6b:74:e2:2e:87:1b:4f:06:19:38:e4:a6:47:bf:
                    57:69:c4:df:f4:73:19:12:9a:6a:bc:a7:1f:8c:fd:
                    c0:f5:0b:fd:84:03:c0:c1:e6:66:92:48:f1:76:b4:
                    48:67:57:1c:3d:fb:25:03:f7:65:52:24:b9:80:f3:
                    99:d7:08:62:46:8e:2e:1b:c6:ff:4c:00:31:8a:c4:
                    86:62:91:0d:60:50:38:8d:48:52:fe:80:54:10:fe:
                    ae:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:79:62:B6:C3:5C:F0:ED:2A:A2:58:77:FB:6F:78:6E:B2:2B:DC:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/5fbc700e-9fc9-314d-b424-083af6f592c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.crl

            X509v3 Authority Key Identifier:
                keyid:5F:D6:DB:12:03:6D:54:0E:FB:5F:55:5F:C1:4A:FC:20:D9:54:A6:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.165.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:08:6f:a6:c8:0e:a6:19:78:a7:39:2a:03:9a:4e:a4:da:38:
         d7:d5:6e:81:1e:b7:7d:cd:6c:b3:9c:e2:de:2f:0a:f7:98:4c:
         bb:fe:ca:79:49:ad:b4:64:62:ae:1c:f5:ba:36:03:d0:07:7b:
         f4:65:50:e7:22:b1:5f:f4:19:35:b6:41:66:14:65:e4:d3:51:
         06:8f:5d:36:fc:13:91:8e:ab:3e:50:54:8a:a3:ed:18:8d:e3:
         89:4d:25:f7:7a:7a:ab:5a:75:53:02:df:97:0c:fd:fb:9c:56:
         27:e8:40:71:93:ee:ea:00:dc:7b:09:b9:47:49:40:ef:c8:fa:
         34:7d:5b:36:19:6e:b4:36:14:31:3b:c7:3b:aa:d9:20:17:08:
         23:d6:4b:08:21:56:9e:14:4f:63:81:9e:8c:a9:6a:78:ce:69:
         b3:77:ed:0c:d7:b3:36:52:96:af:f7:0e:c1:0d:dd:53:29:10:
         ec:3e:db:4f:de:d2:24:42:86:a7:2a:a9:6e:2a:9b:51:e1:c5:
         07:10:5b:d3:09:6f:22:be:c3:f1:fb:b8:ac:b1:e5:39:a9:4d:
         ac:82:6c:97:d7:56:2c:4c:90:68:50:7d:d0:26:18:bc:de:18:
         98:55:6a:c9:8d:5b:f4:24:bb:e0:88:41:8f:7b:b1:7e:90:c1:
         cd:5c:af:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:03 2025 by rpki-client