Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/0431d5c3-e313-37a5-8362-b85e4b398aa8.roa
File:                     0431d5c3-e313-37a5-8362-b85e4b398aa8.roa (raw, json)
Hash identifier:          2ai/VdBWK9DthB1XFuMIQX4ob2ESjV1i1SpTTwJ5+1Y=
Subject key identifier:   47:BF:FB:C2:AD:15:B6:FC:96:1F:4D:18:0E:67:D6:5C:D6:99:7B:60
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F43285848D211437725E87C16BB47AFC0
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/0431d5c3-e313-37a5-8362-b85e4b398aa8.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        136.245.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:43:77:25:e8:7c:16:bb:47:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=7c8abc9f-0884-46de-b324-b9675917ab74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:03:6a:96:93:5f:87:5a:1b:de:b2:00:97:dc:
                    f4:9f:15:55:b6:98:5f:54:cc:55:5c:93:0e:8b:52:
                    aa:19:a3:94:cd:02:bb:73:8e:d7:72:eb:46:9b:0d:
                    d8:9f:4a:ba:1d:e9:e3:3e:ac:6e:36:5d:81:b4:6e:
                    10:36:27:2a:9a:be:d9:5b:2f:94:42:5d:24:e9:b2:
                    55:82:89:8a:77:9a:18:ae:24:59:6f:c6:e7:35:4d:
                    73:1a:be:19:ab:3e:98:88:d1:a3:d1:03:ce:b4:c7:
                    62:74:ad:84:ce:ec:05:be:bb:7a:20:d4:6b:22:12:
                    5e:77:04:8a:fd:40:c4:2b:b9:4d:b3:ad:3f:09:07:
                    2e:14:e3:94:b0:c4:16:07:b9:59:2e:0d:a4:b1:6f:
                    c5:a7:8a:12:cf:b9:ec:3d:f6:1e:c4:7f:d6:55:ae:
                    8b:6d:8e:b1:e0:27:a8:47:e5:bc:c8:32:d1:7f:3f:
                    28:39:9a:82:2a:1b:4b:b6:4f:09:db:be:bc:f0:ce:
                    98:9b:5a:d2:d4:bd:23:0c:14:51:dc:d3:30:b2:59:
                    8d:d3:4e:67:42:30:2e:7c:97:98:b6:4a:2d:14:72:
                    c6:85:35:e8:10:c0:fc:d5:75:07:b3:93:e9:9e:b4:
                    d8:1a:2c:a4:99:62:3d:d6:66:ae:db:31:1b:83:cd:
                    50:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BF:FB:C2:AD:15:B6:FC:96:1F:4D:18:0E:67:D6:5C:D6:99:7B:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/0431d5c3-e313-37a5-8362-b85e4b398aa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.245.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:b4:13:ba:cb:c6:f6:9d:26:29:e6:d7:fe:99:93:6e:80:24:
         dc:e7:90:1c:cc:86:ab:b7:9f:e8:5d:c5:d9:21:27:40:ed:ac:
         fb:0b:f3:ec:a0:1d:b3:1d:e2:b4:4d:86:95:79:dc:3f:cc:15:
         7a:c4:ab:2d:68:c0:93:87:6b:f0:ea:53:f2:5d:b2:4e:37:35:
         28:19:a2:72:41:e6:7b:81:65:fa:aa:f1:76:f4:71:be:1f:96:
         0e:1a:2b:2b:94:25:03:35:8b:5a:fc:c8:14:e9:2a:74:88:44:
         99:04:26:67:b4:04:ea:4b:38:ab:93:1c:00:00:9c:e2:59:fa:
         b7:b0:74:76:ad:4f:89:35:6d:60:07:c7:62:eb:1f:2b:af:d3:
         8c:11:c2:d9:e8:77:51:91:88:46:81:52:35:42:56:00:21:73:
         87:75:fa:0f:d6:14:03:e0:08:a4:81:e8:ec:de:fd:6e:ab:ee:
         7a:36:a3:90:84:43:11:66:09:28:31:24:65:c3:f4:1a:17:c8:
         21:25:84:b3:b5:34:38:0d:cc:55:92:17:63:1a:d6:a2:aa:18:
         1a:fe:cd:72:20:e6:a7:64:d9:05:25:16:c4:6f:21:10:53:e3:
         0a:4d:a0:4f:e9:09:c2:d6:67:c7:3d:6e:f7:ba:50:8e:f8:6d:
         a7:50:61:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:39 2025 by rpki-client