Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/201f29d9-ab02-3513-8d42-c93a46d0e75e.roa
File:                     201f29d9-ab02-3513-8d42-c93a46d0e75e.roa (raw, json)
Hash identifier:          hvhzIj7vcnwCrYMTKQ+0hh97kW2c9DHGTlGapM7X7IM=
Subject key identifier:   D2:35:A0:2F:37:77:BC:67:CB:F0:55:03:F8:01:F6:62:5F:7E:E7:A1
Certificate issuer:       /CN=fbe3f91d-911a-4397-956a-9925c68f0a94
Certificate serial:       010D0C9F4328584819CFCCEB9016C780E8805C00
Authority key identifier: BF:95:AD:3B:A8:B6:DE:7B:6C:D5:C1:FE:F5:02:A7:24:EF:C6:16:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/201f29d9-ab02-3513-8d42-c93a46d0e75e.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     19353
IP address blocks:        66.175.240.0/20 maxlen: 24
                          198.47.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/fbe3f91d-911a-4397-956a-9925c68f0a94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/fbe3f91d-911a-4397-956a-9925c68f0a94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:cc:eb:90:16:c7:80:e8:80:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbe3f91d-911a-4397-956a-9925c68f0a94
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=247938bc-5e2f-4380-8ca0-349f5bb5ea82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:db:24:6c:1d:2a:f2:09:96:c0:ac:88:8c:04:
                    37:ec:1e:f0:95:f0:a4:e2:6d:1d:8f:ef:c4:b7:6f:
                    b2:8c:21:3c:7f:91:0e:f3:27:ca:54:8e:2d:22:66:
                    51:80:24:01:7e:93:1f:c8:e0:01:9d:a7:64:56:05:
                    85:90:d3:02:81:e2:51:6d:97:17:57:5f:35:86:71:
                    d1:c1:c3:36:3f:e4:df:ff:b1:1a:6b:03:0b:3f:4c:
                    43:40:99:8e:21:b9:4c:03:9b:37:ea:e0:4a:0b:3e:
                    b0:62:aa:5c:e4:0c:de:4e:e6:62:cf:94:93:5f:69:
                    96:2d:79:44:97:d9:b5:26:e1:df:dd:1f:5c:1d:4c:
                    b4:a0:16:ea:d2:8f:31:f2:e8:76:0a:f8:ac:78:9e:
                    ee:ce:99:09:72:99:07:1a:68:8b:4b:a2:05:9f:d6:
                    00:50:58:08:ca:fe:35:1a:62:a5:84:8e:fe:b6:a4:
                    5f:b2:be:8c:34:d6:ce:36:c1:9d:57:10:bb:24:17:
                    7d:5f:ee:0b:ac:5a:f3:ba:1c:8b:1a:4f:59:4e:25:
                    82:c0:d8:5c:32:47:e7:3b:95:6d:a4:4f:67:46:12:
                    36:c3:4f:e2:7b:d5:4b:70:c1:72:b5:52:38:e4:5e:
                    f8:30:e9:17:7a:6f:a9:06:c1:f5:10:00:e8:5d:18:
                    4e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:35:A0:2F:37:77:BC:67:CB:F0:55:03:F8:01:F6:62:5F:7E:E7:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/201f29d9-ab02-3513-8d42-c93a46d0e75e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/fbe3f91d-911a-4397-956a-9925c68f0a94.crl

            X509v3 Authority Key Identifier:
                keyid:BF:95:AD:3B:A8:B6:DE:7B:6C:D5:C1:FE:F5:02:A7:24:EF:C6:16:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.175.240.0/20
                  198.47.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:8d:0d:b5:8b:0c:4e:3b:1f:97:39:ad:9e:02:f5:b9:de:8c:
         da:a9:48:80:28:3b:f8:4e:44:f2:cb:21:a0:b9:88:ab:73:55:
         f5:bc:1b:a0:00:84:25:49:8d:f5:39:41:f1:10:c3:e6:75:12:
         ce:60:7f:3e:bb:82:4c:70:67:bc:04:8a:95:e5:a8:0d:ee:05:
         77:07:81:42:da:3e:32:81:8c:b1:68:50:f8:fb:7c:8a:66:33:
         aa:74:ed:57:3b:90:d0:3c:4e:eb:79:f8:a6:a7:a5:3c:8f:03:
         7b:5f:ab:c1:de:34:e9:69:c0:93:ac:ca:59:ee:57:6b:cd:b7:
         7b:60:26:76:cf:c5:6d:b1:5e:85:03:c7:78:80:13:76:24:a2:
         e0:f3:78:5d:f4:01:81:ad:32:43:a0:16:e8:e8:2d:78:70:da:
         7b:37:0b:77:f1:a9:f7:ef:2b:35:6e:21:12:8f:9f:eb:8f:18:
         e0:8e:07:f9:e2:13:f7:66:ba:b7:30:e8:b6:89:b4:54:97:d2:
         9c:f0:c2:23:b8:61:d1:39:6e:89:8b:30:74:0d:d1:a3:6c:fe:
         d9:4c:06:32:d4:42:34:96:ba:31:b3:56:d0:47:c7:29:4a:7d:
         1b:e7:58:a0:d7:a6:11:f8:29:f5:a7:34:e2:d2:42:db:f0:52:
         d8:af:6f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:46 2025 by rpki-client