Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed/2e76c261-fdad-3290-a47c-70e64b04cc41.roa
File:                     2e76c261-fdad-3290-a47c-70e64b04cc41.roa (raw, json)
Hash identifier:          UPvRO2XAdEUChGUIQwUSUCEwblOd7tgu5JO5+UMvuIY=
Subject key identifier:   D7:00:88:09:5E:D1:00:1E:9A:DB:EC:FD:BF:09:E5:D8:E7:B4:CD:28
Certificate issuer:       /CN=d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed
Certificate serial:       010D0C9F432858489340A1AE9FCB060F18835500
Authority key identifier: 2F:F7:BD:CB:F6:81:8B:78:85:D8:33:81:75:70:E4:2D:F3:A5:F6:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed/2e76c261-fdad-3290-a47c-70e64b04cc41.roa
Signing time:             Fri 17 Jan 2025 14:00:53 +0000
ROA not before:           Fri 17 Jan 2025 14:00:53 +0000
ROA not after:            Thu 17 Apr 2025 13:00:53 +0000
asID:                     396982
IP address blocks:        199.250.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:93:40:a1:ae:9f:cb:06:0f:18:83:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed
        Validity
            Not Before: Jan 17 14:00:53 2025 GMT
            Not After : Apr 17 13:00:53 2025 GMT
        Subject: CN=06c7e1ba-53e3-4dc1-9fae-6e5da0e9cb01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ee:d2:e1:d8:ad:0a:12:3d:e7:c6:38:10:30:
                    08:6c:49:bc:dc:b7:cd:2d:ff:13:28:1e:82:98:b3:
                    c2:20:2b:7a:21:36:e5:77:96:70:4b:b6:33:11:4f:
                    6f:fd:6f:1b:4f:a9:73:e4:a5:68:0a:b9:18:7c:3c:
                    ce:08:70:d0:4b:21:15:13:27:c7:44:63:98:b1:86:
                    67:5e:cc:22:2f:2d:c5:bf:75:cf:5a:d1:8f:42:a4:
                    7c:7b:6f:92:4c:65:80:81:99:28:22:da:1d:fa:33:
                    d9:45:c1:13:18:a2:1c:7e:31:94:ad:c6:27:8f:7c:
                    3c:58:7e:45:5f:1c:7a:ba:85:b9:d8:ed:66:90:18:
                    6d:20:27:74:2c:a2:23:0e:3f:d8:c5:ed:24:0e:38:
                    5d:6b:8b:0c:c0:eb:7d:ef:67:4f:b2:52:c9:7f:b4:
                    48:a7:09:67:38:e2:3a:cf:0b:d2:b4:52:49:3d:e0:
                    5f:c2:54:70:f9:96:0b:69:aa:70:04:86:82:2d:b4:
                    8b:40:94:96:8e:96:1c:c2:f1:0f:c3:8b:49:9c:ae:
                    3a:01:d2:52:84:d5:eb:06:4f:6e:8b:e5:d0:d0:a2:
                    5d:22:e8:90:bd:71:30:13:1f:d6:f2:03:66:e6:4a:
                    4a:cc:9c:47:cf:72:5f:60:93:05:3e:13:2c:ff:1c:
                    45:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:00:88:09:5E:D1:00:1E:9A:DB:EC:FD:BF:09:E5:D8:E7:B4:CD:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed/2e76c261-fdad-3290-a47c-70e64b04cc41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed.crl

            X509v3 Authority Key Identifier:
                keyid:2F:F7:BD:CB:F6:81:8B:78:85:D8:33:81:75:70:E4:2D:F3:A5:F6:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.250.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:15:30:76:bb:28:7e:63:be:45:36:4e:be:0d:31:65:bd:0c:
         5f:32:8e:d8:3a:e9:c4:2d:df:74:5e:18:94:aa:59:6c:47:c2:
         23:e7:50:0c:33:b3:01:f5:75:a8:a0:02:04:45:99:f3:83:30:
         8b:d6:5f:ed:1e:b3:9c:68:17:3c:eb:1e:99:01:9c:38:a3:ff:
         19:85:7c:f0:fb:ab:eb:a5:99:55:84:c2:e9:66:2b:22:f0:7c:
         0e:48:c7:93:14:7f:7c:bd:b6:0c:0f:f7:b9:9c:0a:31:19:3f:
         0d:8c:55:34:e8:04:be:1e:d7:6c:98:25:d5:d1:31:ec:13:04:
         4d:49:cb:d2:63:25:67:72:ec:9d:19:88:03:f2:50:cf:97:33:
         df:66:fe:73:ff:07:3b:4e:47:56:d5:31:bf:b8:f0:8e:63:71:
         e2:bb:24:7c:74:73:ee:21:5e:7d:dc:2a:1f:2a:a6:6f:cc:4f:
         91:3f:b9:2f:56:12:28:88:0c:c3:84:d1:c6:f6:07:d0:20:e9:
         f8:01:d3:66:f0:1b:3a:c9:00:d0:e3:b1:30:0f:de:b1:7d:63:
         24:cc:ac:17:e3:b8:e5:be:29:ab:e8:f5:c9:4a:6a:5b:a5:1a:
         d2:3f:58:67:af:15:ed:95:78:76:3d:dc:44:98:99:37:c5:85:
         76:4e:05:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:20 2025 by rpki-client