Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/144f4ef9-f281-3e6b-ab5f-0dcdfe830052.roa
File:                     144f4ef9-f281-3e6b-ab5f-0dcdfe830052.roa (raw, json)
Hash identifier:          b9Fsv/J7cHmOlUf48FAQlU4A8C9m4VUC0+u4AfsSEp0=
Subject key identifier:   89:EC:A2:8E:6E:DB:64:13:A5:94:2C:A7:4C:0C:FD:58:C7:91:FE:47
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285848143A7931C05E0E50A5D51880
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/144f4ef9-f281-3e6b-ab5f-0dcdfe830052.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33076
IP address blocks:        199.6.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:79:31:c0:5e:0e:50:a5:d5:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=136f9842-0fb7-4a59-942e-8d458daf79ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0e:c2:f3:be:82:15:27:5b:21:c8:1c:a9:bb:
                    28:90:b2:01:46:45:d4:a2:58:1a:eb:82:87:91:c8:
                    0c:68:a6:92:57:53:23:1e:fa:6d:bd:fa:6e:60:dc:
                    95:16:9d:c8:6e:98:44:62:28:6d:b0:12:e2:9f:88:
                    0b:07:8a:90:d0:02:f8:43:c4:3f:ad:08:d0:f1:3f:
                    6b:ac:ca:c4:d8:01:70:cf:d7:3e:64:85:43:9d:ab:
                    f5:09:0e:af:70:11:3c:5b:8f:f8:c1:3e:e2:96:37:
                    89:16:29:32:71:d4:31:33:ef:d3:7a:86:f4:0d:45:
                    86:6f:8f:ed:82:0b:fb:c3:66:2a:df:24:df:8b:a5:
                    08:e6:2a:6e:88:b0:66:b0:6a:71:39:33:3c:a6:ff:
                    a7:e8:48:88:38:d8:4b:78:b4:af:73:07:d6:be:d8:
                    09:c6:0d:40:48:55:57:ed:2a:3a:d5:94:01:77:c9:
                    eb:6f:83:38:c3:70:7b:00:ea:05:6e:bd:72:fc:00:
                    0a:54:ce:4f:b3:0e:db:10:b0:fd:78:0a:e4:a2:dc:
                    16:17:2e:ab:f7:20:fe:29:fd:05:7a:e8:72:29:93:
                    a2:82:47:18:53:56:a7:02:87:73:22:e0:a7:f5:ac:
                    ef:c9:29:30:0f:42:01:f9:31:ce:1c:83:6f:ed:5c:
                    f8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:EC:A2:8E:6E:DB:64:13:A5:94:2C:A7:4C:0C:FD:58:C7:91:FE:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/144f4ef9-f281-3e6b-ab5f-0dcdfe830052.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.6.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:9e:47:e0:54:d0:36:84:48:f7:cc:21:9c:33:e6:de:54:b4:
         13:98:51:4c:c3:08:82:a5:eb:cb:ba:51:fa:f4:5e:f4:66:48:
         67:e9:22:0e:b9:68:b8:2d:6e:64:30:7c:69:c8:69:b4:36:6e:
         70:4d:e9:8a:b8:64:9d:eb:f5:b2:3e:bc:ea:28:a9:b9:6e:a1:
         00:38:5f:82:c2:11:30:6e:ac:01:7e:63:71:fd:33:eb:d9:67:
         2b:22:12:ab:a5:ad:5c:2c:80:86:0b:ff:5e:37:96:cf:fc:50:
         cb:aa:fc:0f:30:ee:54:68:85:12:3a:df:df:7f:60:43:8b:b8:
         b0:66:30:19:e7:5c:3d:21:c0:73:74:4b:79:91:a6:3e:15:9f:
         96:db:1f:12:4b:48:9f:73:43:d5:41:60:36:02:40:c2:03:3b:
         46:1a:10:99:52:c3:02:69:84:71:1e:38:eb:ef:24:49:4c:b7:
         3d:a8:3c:c3:02:7e:b7:37:13:71:86:f0:c8:3c:48:db:69:d5:
         72:4b:7f:03:97:04:be:5c:37:f8:5d:3a:90:91:cd:6f:af:fd:
         ed:3b:2f:10:0c:50:d6:b5:91:c1:1b:72:44:5f:4f:d0:06:4e:
         34:22:cb:23:d9:cd:02:c0:c0:89:4e:a2:05:e9:ea:d6:b2:00:
         3a:cd:2d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:55 2025 by rpki-client