Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/74f562d4-913b-3843-9e3d-f9f26ec3da09.roa
File:                     74f562d4-913b-3843-9e3d-f9f26ec3da09.roa (raw, json)
Hash identifier:          ZF4I1UFNaLqLOpzUuoaMtMdlf0FZNxssX1VsIyzA4g8=
Subject key identifier:   44:B0:53:1C:42:5B:9A:AA:AA:52:59:82:C5:64:06:CE:5E:8C:2F:1D
Certificate issuer:       /CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
Certificate serial:       010D0C9F43285848854B4D0FDE8C10CC0E36AFB0
Authority key identifier: 8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/74f562d4-913b-3843-9e3d-f9f26ec3da09.roa
Signing time:             Sun 12 Jan 2025 14:00:53 +0000
ROA not before:           Sun 12 Jan 2025 14:00:53 +0000
ROA not after:            Sat 12 Apr 2025 13:00:53 +0000
asID:                     26057
IP address blocks:        168.238.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:4b:4d:0f:de:8c:10:cc:0e:36:af:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
        Validity
            Not Before: Jan 12 14:00:53 2025 GMT
            Not After : Apr 12 13:00:53 2025 GMT
        Subject: CN=448eea07-a71e-41a2-8929-630c8422dc88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:68:57:bd:6c:e2:1b:ba:2a:28:60:12:aa:a9:
                    65:2f:82:4b:6e:2d:bf:af:14:c1:b6:bc:b7:02:6e:
                    02:01:16:1e:99:0a:52:a3:51:63:5b:8f:dc:83:8e:
                    6c:cf:70:e0:b9:4c:ca:1e:57:e2:a9:87:89:89:51:
                    70:a7:ba:8a:f7:52:64:d6:12:db:ec:2c:86:df:6e:
                    05:fe:64:54:72:c3:65:9b:ef:2a:b5:fa:47:e9:fb:
                    76:dc:c1:81:26:5e:39:62:ab:f9:f1:79:2f:12:eb:
                    2c:1e:46:e8:96:cc:96:2c:4e:1c:aa:91:20:fb:ba:
                    0e:83:3c:e2:c7:6d:51:7f:0f:a2:c1:4a:0a:6f:9c:
                    c4:11:cf:b2:af:97:c3:6c:ae:3e:84:56:f5:39:17:
                    5e:a3:67:3f:d2:f6:8d:08:0b:c0:df:db:6a:4b:96:
                    9f:41:06:26:43:95:2a:9a:42:00:b4:c3:7b:0b:50:
                    ca:93:b6:76:a1:fa:2f:9d:25:8d:fd:ac:24:c4:b7:
                    0f:68:dc:84:f3:e5:8e:a3:e2:70:f8:9b:c6:80:44:
                    ca:d4:0f:40:e5:b0:10:73:f1:e0:76:0f:5e:58:19:
                    46:38:4a:70:e7:0c:82:9c:56:f8:b6:17:05:d0:5b:
                    e2:2f:fb:79:12:8b:bd:8e:fc:82:ac:a4:72:66:32:
                    21:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B0:53:1C:42:5B:9A:AA:AA:52:59:82:C5:64:06:CE:5E:8C:2F:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/74f562d4-913b-3843-9e3d-f9f26ec3da09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.crl

            X509v3 Authority Key Identifier:
                keyid:8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.238.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:82:ed:51:ec:8a:bc:1e:52:03:4e:1b:62:f1:a9:dc:90:25:
         bb:8a:07:02:33:9b:71:76:f5:6b:c5:7d:5e:63:dd:b7:0a:04:
         05:4f:26:19:9e:1c:f7:f5:cd:58:6b:f3:11:67:50:23:5e:80:
         c1:c2:37:40:34:67:56:80:0a:0f:42:44:a8:a4:1d:77:d6:03:
         b0:82:4b:44:65:70:39:c2:ff:41:38:50:02:3a:df:8d:78:fc:
         9a:6e:a5:69:5a:b4:32:b9:cc:a3:4f:65:b7:be:cf:87:cd:32:
         f6:90:cd:67:e8:3f:c1:62:9e:81:43:f1:1b:c3:d9:bb:b8:37:
         68:5d:21:6c:a0:41:86:90:cc:49:1c:2e:86:a9:80:22:45:97:
         a1:4b:23:b9:98:4a:83:51:7b:02:9e:d9:50:ff:f5:2a:79:3f:
         76:4a:c1:ca:50:eb:15:75:63:3e:f5:c1:5f:30:df:0e:85:50:
         41:00:29:96:72:50:f6:3a:44:9e:4c:bc:b7:02:7d:ec:77:f9:
         d0:a4:33:6c:8f:18:72:ad:8d:a7:59:e6:57:a4:8a:de:99:1c:
         49:d8:27:6f:81:9d:eb:37:54:22:55:16:16:25:55:e0:97:bf:
         f2:be:48:b5:e3:a9:63:22:48:38:02:d9:31:c3:44:8e:70:f9:
         27:2c:14:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:53 2025 by rpki-client