Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/4db2f9a7-e666-3a8c-b702-0f73bf97b127.roa
File:                     4db2f9a7-e666-3a8c-b702-0f73bf97b127.roa (raw, json)
Hash identifier:          eeFRdml5LDGFBj7qt14VcVAzR7AGCQrG7I65Mjap+lA=
Subject key identifier:   12:8C:1E:7F:1B:15:23:BE:BE:20:8A:0A:29:CB:5B:4E:03:39:8E:DF
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584878BB050C69F6DAF12BF0D040
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/4db2f9a7-e666-3a8c-b702-0f73bf97b127.roa
Signing time:             Wed 08 Jan 2025 02:00:39 +0000
ROA not before:           Wed 08 Jan 2025 02:00:39 +0000
ROA not after:            Tue 08 Apr 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        136.245.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:78:bb:05:0c:69:f6:da:f1:2b:f0:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Jan  8 02:00:39 2025 GMT
            Not After : Apr  8 01:00:39 2025 GMT
        Subject: CN=51749258-3510-477c-bb60-0d39d5cbd535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f5:9b:3c:b9:a9:0a:71:3f:c3:86:85:dd:71:
                    b9:fe:be:c6:00:26:21:a8:c4:2d:56:07:24:59:58:
                    33:3b:6a:b2:18:03:b4:c7:67:ff:f0:46:38:10:9c:
                    a4:df:bb:51:e8:d7:59:95:26:a9:27:ae:82:6d:b4:
                    dc:04:f2:d5:84:15:c8:94:33:d9:df:dd:33:e8:e8:
                    24:6f:9f:0e:69:15:c5:32:2d:41:ce:20:c6:22:9e:
                    23:6e:9c:7a:75:84:6f:99:74:2f:0b:cb:9b:ef:a3:
                    ab:ae:79:c2:15:74:d2:c0:d2:74:28:37:c8:7e:a8:
                    28:51:c6:1d:c1:eb:7c:d5:22:21:04:57:ab:5d:8f:
                    24:db:34:78:cb:87:e2:1d:98:dc:94:91:f9:ab:45:
                    36:0c:4f:e2:7e:6a:fd:bc:d2:8e:dc:d0:68:f7:aa:
                    32:6e:00:0e:b5:6d:7e:cc:eb:66:51:1d:5d:b1:21:
                    9b:30:b1:79:da:d7:b8:22:28:e2:15:40:5c:47:da:
                    93:5d:97:31:8c:89:10:ed:e3:6a:90:b6:ec:43:49:
                    b7:34:07:4f:3f:81:ea:33:e3:66:9e:a0:a7:2f:95:
                    dd:46:95:9e:13:84:76:f7:49:bb:e2:d5:7d:fa:b7:
                    99:db:22:dc:9f:54:93:b9:78:5c:09:96:fd:1b:81:
                    98:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8C:1E:7F:1B:15:23:BE:BE:20:8A:0A:29:CB:5B:4E:03:39:8E:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/4db2f9a7-e666-3a8c-b702-0f73bf97b127.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.245.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:09:1f:5f:2a:4f:61:c9:c0:0d:d6:23:3c:af:c1:d1:8a:22:
         00:3a:7b:16:00:76:b2:4a:a9:09:08:2a:41:f5:25:d3:d5:8f:
         d5:c1:62:a9:b7:0e:cb:b9:c1:a6:d3:24:b0:3d:ed:ed:6d:5c:
         da:bb:b6:b6:49:e4:8b:a8:4a:8b:59:90:c6:55:49:df:82:82:
         3f:0d:10:9b:65:03:ce:74:47:1a:ca:76:1c:67:7c:b4:5f:77:
         a8:ad:ba:9c:90:ab:a5:06:0d:6f:d1:32:c5:6f:09:97:3d:c1:
         f1:c1:48:82:1e:fb:b8:03:84:66:65:6e:f6:0c:60:ef:b1:23:
         cd:5c:d1:21:88:70:f6:c9:f8:a9:26:23:4c:1c:76:de:c4:61:
         1d:aa:35:78:0d:1e:f6:14:38:6a:a0:e8:dc:db:6e:2c:13:a2:
         ce:b7:e1:d6:9b:4e:bc:1d:0c:8d:46:f7:f8:13:07:1e:30:d1:
         3b:25:6c:2a:80:c2:a5:43:57:c2:24:a3:90:f6:3e:32:95:fb:
         95:4b:ac:73:67:0d:18:e7:bd:75:d3:b3:ad:0f:8e:c6:7a:92:
         5b:52:61:1e:93:18:2a:3b:0c:80:11:d3:ec:0a:85:7b:3b:cf:
         bc:00:9a:f9:d0:53:a7:d4:9f:e7:b1:35:dd:64:b8:21:6f:b8:
         b1:72:60:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:08 2025 by rpki-client