Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/99e13c26-f077-3c28-bac7-63bbf2c159ac.roa
File:                     99e13c26-f077-3c28-bac7-63bbf2c159ac.roa (raw, json)
Hash identifier:          KD4jPfATCXZXAlqQ+ypiZqqnW1UCYpR1IGmYboPbBEs=
Subject key identifier:   5F:81:15:08:EC:D3:22:3D:EF:30:21:62:7B:7D:16:1C:0A:22:5C:82
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285848159FDBE64D428AC8A1C2A280
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/99e13c26-f077-3c28-bac7-63bbf2c159ac.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     30133
IP address blocks:        192.228.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:db:e6:4d:42:8a:c8:a1:c2:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=760d0899-5ea4-4619-bbe4-2a375ba37238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:42:05:3e:2b:6d:ea:17:94:ae:16:77:26:9d:
                    09:2d:8f:f0:a5:cf:c3:8c:26:ab:f8:13:88:95:29:
                    20:27:32:57:b6:bb:4b:ab:ab:0a:35:37:f6:09:01:
                    c4:f0:57:33:a2:f0:bd:68:4b:aa:6b:e1:bd:ac:66:
                    8a:3a:95:db:2f:fc:f0:8c:dd:37:65:14:a5:63:0d:
                    7f:d2:85:96:33:d9:bb:b5:73:b6:8a:c2:b8:37:77:
                    84:03:70:54:a4:50:61:5f:d7:f5:07:5a:fa:d0:41:
                    43:8a:c7:48:b9:10:98:d6:c1:57:2b:3b:df:cb:b6:
                    5d:03:a7:3c:ef:db:58:ac:06:53:44:ef:d0:30:60:
                    5b:0f:d6:bc:d1:c8:b8:0d:67:7b:78:7e:7f:48:6e:
                    c2:2d:f9:c1:c0:13:9b:1b:2f:fb:06:08:72:c6:25:
                    e0:e5:7a:a9:dc:b6:8c:af:4b:34:fe:87:da:ec:64:
                    b9:7d:13:e7:de:41:06:57:1f:bb:33:4d:d0:7d:a5:
                    c4:0d:6e:35:5b:9e:ef:13:78:7c:7e:a7:a6:00:5b:
                    f0:a7:e8:15:03:1e:33:f3:80:9e:41:78:ce:ae:da:
                    8e:97:43:6e:77:c9:36:51:6d:5d:e4:f1:61:15:8e:
                    da:cb:8a:61:3e:f2:c8:f1:61:df:cd:6c:c8:df:66:
                    2c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:81:15:08:EC:D3:22:3D:EF:30:21:62:7B:7D:16:1C:0A:22:5C:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/99e13c26-f077-3c28-bac7-63bbf2c159ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:00:98:9d:3f:56:8a:58:c2:46:b9:46:04:dd:5e:dc:b9:52:
         27:db:d2:87:07:1b:3e:0a:f4:73:a9:bc:ac:12:91:45:c1:9f:
         9f:a9:7b:e1:2b:aa:25:2d:67:ef:23:6b:4b:82:bc:31:d9:96:
         ed:40:a2:df:1a:db:98:ee:7b:92:03:96:a1:ce:6e:22:e6:2e:
         e3:3e:77:17:0a:84:0c:4d:a8:53:97:37:b9:88:1d:38:1f:a8:
         a7:99:b9:0b:32:28:f0:7c:5b:2e:07:a2:29:79:14:a4:6e:fb:
         5b:c5:24:50:a6:61:7c:9e:d5:c2:d7:6c:2c:2e:77:50:4f:44:
         7d:4a:c0:c9:e7:d3:70:1d:18:b8:af:ef:70:98:6f:4c:84:86:
         fe:18:9f:c8:eb:54:96:0a:7d:96:92:fd:24:7c:56:db:74:38:
         4b:89:e1:9a:28:29:e0:20:68:8d:b3:91:c0:a1:90:2d:cb:f0:
         9a:c0:a5:ea:0b:2c:64:2c:3c:4d:fd:62:f2:72:12:61:7e:f6:
         72:fc:ee:93:cb:19:d3:04:04:9f:ff:e7:2e:21:22:60:7e:1b:
         97:88:cc:f7:8b:6f:22:9d:1c:8d:24:80:19:6b:e9:77:71:be:
         9b:a2:8d:ae:14:f1:11:90:38:61:b1:88:22:46:b1:10:28:af:
         fe:d4:36:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:05:01 2025 by rpki-client