Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6208a83a-ad33-3a79-9e5e-736f354c791e.roa
File:                     6208a83a-ad33-3a79-9e5e-736f354c791e.roa (raw, json)
Hash identifier:          qtZhcCOKTHXDCmR6shuNNsUUpgpIv31/DLdFdRxakgE=
Subject key identifier:   41:5A:6F:F0:1A:86:F4:FF:61:32:3D:E9:1E:5A:A8:70:51:8C:56:5B
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584878BB0535A6FA6346F523C380
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6208a83a-ad33-3a79-9e5e-736f354c791e.roa
Signing time:             Wed 08 Jan 2025 02:00:39 +0000
ROA not before:           Wed 08 Jan 2025 02:00:39 +0000
ROA not after:            Tue 08 Apr 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        136.245.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:78:bb:05:35:a6:fa:63:46:f5:23:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Jan  8 02:00:39 2025 GMT
            Not After : Apr  8 01:00:39 2025 GMT
        Subject: CN=af682453-a3f0-4a40-bc0b-6d6fc67f92ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2a:14:1e:1f:94:43:15:b9:76:36:92:81:f9:
                    09:9d:b1:97:77:14:29:5c:08:ba:e7:dc:8f:c2:3d:
                    df:98:d6:29:c9:df:10:fe:60:a7:7c:1a:33:21:38:
                    e8:1f:1f:c0:94:f7:7b:1c:cc:f4:d1:5d:95:c0:4d:
                    28:78:f7:30:36:de:f0:0c:91:7b:45:40:de:f0:28:
                    08:ef:82:c4:dc:1c:9d:36:da:63:9f:21:c1:c2:f8:
                    c7:79:a6:55:d1:0e:1c:64:98:22:bc:ef:97:80:d7:
                    24:18:c1:4e:c4:96:de:85:58:d5:b0:9b:16:7a:4c:
                    25:92:da:3e:bd:46:fc:21:4b:ad:2a:ad:1a:e6:2d:
                    48:8c:89:29:06:8a:8e:e9:d6:40:1d:07:17:8c:0b:
                    75:ee:c8:c2:e1:3e:be:05:83:a9:f5:5e:22:4c:89:
                    95:c2:c4:9f:c0:36:41:82:11:a3:07:fd:e1:e5:f9:
                    ee:c2:34:2c:79:ee:c9:40:b5:ae:1b:19:40:6f:9f:
                    46:21:1b:dc:5c:22:8d:cf:e0:61:94:ea:6c:f9:fe:
                    19:71:ce:6b:4e:7e:4f:55:e2:96:20:b8:56:d6:01:
                    6e:aa:ae:45:4a:a1:fc:d2:96:ff:a5:8b:d9:75:87:
                    66:cb:e5:70:a5:08:a1:b3:4d:7c:39:a0:1d:0f:07:
                    cc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5A:6F:F0:1A:86:F4:FF:61:32:3D:E9:1E:5A:A8:70:51:8C:56:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6208a83a-ad33-3a79-9e5e-736f354c791e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.245.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:dd:5f:ca:2c:4a:8e:63:7a:7e:06:d8:71:de:fc:e1:9e:ee:
         ff:2b:ea:10:2e:35:5c:c8:e1:a5:39:8a:47:f3:d5:01:79:54:
         9d:76:cc:24:9a:e7:bb:2a:93:54:c6:61:52:bb:1b:9a:92:5d:
         3d:8e:00:e1:8f:e6:51:91:a6:19:6c:42:05:58:8c:07:09:bf:
         f2:9b:4c:5f:be:f7:86:64:9c:ee:69:1a:ab:16:e5:a0:e4:29:
         cf:e3:19:ec:38:79:e8:38:cf:9c:ef:ec:2b:fc:e0:b9:85:41:
         ae:46:26:86:fb:30:7d:33:4d:5d:f4:d6:14:f1:a3:a9:e6:a7:
         81:ff:0c:44:17:a7:0e:53:da:33:87:b4:a1:74:c6:20:08:f0:
         c9:f6:75:74:09:2f:76:75:2b:c2:74:80:81:3d:35:2f:88:d5:
         09:6d:12:65:ae:52:06:e4:15:91:74:9d:db:f9:8f:0d:36:06:
         55:10:5f:db:5a:c6:5f:09:2e:e1:5d:40:a6:f3:27:8c:84:d6:
         55:94:3b:dd:8a:ad:2b:d8:3b:2f:47:97:23:07:e6:90:f8:11:
         96:ad:90:3e:86:f3:a6:03:63:02:8c:0d:92:72:ea:98:dc:40:
         ea:95:00:cd:02:77:fb:ae:5c:bc:7b:e7:b0:65:3f:32:44:c4:
         bc:92:7a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:20 2025 by rpki-client