Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/ea613592-7c99-3b65-8caf-49e2fb45cf6c.roa
File:                     ea613592-7c99-3b65-8caf-49e2fb45cf6c.roa (raw, json)
Hash identifier:          XCF9R9dOus2RyOI+6r8auNqSMmOPUOJDKkz5SGO43oo=
Subject key identifier:   36:F2:50:A2:65:A4:B5:06:B0:EE:20:7B:90:74:F7:FE:0A:07:AA:D3
Certificate issuer:       /CN=04ea0880-2156-4bff-9635-feb716ac6fae
Certificate serial:       010D0C9F4328584863CB0CECA9F684067F2CFFC0
Authority key identifier: 6E:3A:68:AB:A2:03:66:89:AF:ED:B5:C8:72:5A:38:C4:FD:E4:1C:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/ea613592-7c99-3b65-8caf-49e2fb45cf6c.roa
Signing time:             Tue 31 Dec 2024 14:00:53 +0000
ROA not before:           Tue 31 Dec 2024 14:00:53 +0000
ROA not after:            Mon 31 Mar 2025 13:00:53 +0000
asID:                     400679
IP address blocks:        170.39.22.0/24 maxlen: 24
                          2602:fd45::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/04ea0880-2156-4bff-9635-feb716ac6fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/04ea0880-2156-4bff-9635-feb716ac6fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:63:cb:0c:ec:a9:f6:84:06:7f:2c:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04ea0880-2156-4bff-9635-feb716ac6fae
        Validity
            Not Before: Dec 31 14:00:53 2024 GMT
            Not After : Mar 31 13:00:53 2025 GMT
        Subject: CN=3b0768bd-6354-43c7-bef8-b219dfedc5ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d4:0c:37:3c:f8:27:aa:95:54:51:02:b0:87:
                    82:06:34:13:53:ab:7c:e2:cb:76:ad:cc:4f:51:d0:
                    ab:1e:ed:c1:50:66:60:04:8f:54:6b:0e:47:6f:72:
                    7e:ef:b8:8c:f3:23:44:d4:b7:28:9c:c6:08:e9:b5:
                    07:7e:1d:22:4e:80:de:0a:13:9c:7d:92:dd:ee:4d:
                    62:05:24:fb:9a:28:d9:da:b6:7d:cb:41:71:21:42:
                    67:9a:15:c9:9b:4e:8a:47:1c:0b:44:b0:99:46:06:
                    0c:c1:e6:d6:f4:e6:96:8f:ee:39:c7:0c:1c:9c:be:
                    e7:1b:d0:d8:a5:c0:9b:d4:cc:ba:06:21:7b:ee:c8:
                    ec:4e:9f:90:e6:91:7c:a3:2f:40:60:06:95:57:9a:
                    a4:24:30:cd:1f:f2:ae:95:17:a9:a8:d8:f4:88:f5:
                    d6:5b:29:5c:8b:c4:92:0b:41:49:bb:39:56:19:ed:
                    21:eb:4a:de:b2:22:32:71:71:23:39:ea:a5:4e:d6:
                    ed:54:98:bb:bf:1d:f8:cc:5f:a5:54:4a:08:d3:da:
                    f9:6e:4b:ed:ea:64:53:a6:fb:35:dc:bc:08:a3:a3:
                    03:b0:5e:b2:d8:1e:81:b8:30:1a:90:df:59:27:8c:
                    1c:27:7d:d3:25:67:09:98:8f:e3:73:2c:08:e4:28:
                    74:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F2:50:A2:65:A4:B5:06:B0:EE:20:7B:90:74:F7:FE:0A:07:AA:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/ea613592-7c99-3b65-8caf-49e2fb45cf6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/04ea0880-2156-4bff-9635-feb716ac6fae.crl

            X509v3 Authority Key Identifier:
                keyid:6E:3A:68:AB:A2:03:66:89:AF:ED:B5:C8:72:5A:38:C4:FD:E4:1C:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.22.0/24
                IPv6:
                  2602:fd45::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:48:6b:77:2b:b5:22:a4:43:b5:a3:02:6c:68:f5:bc:2b:e9:
         86:e9:e0:0a:9b:e1:68:66:78:75:63:1c:e0:c4:4d:ae:db:46:
         a5:34:e1:83:22:4a:d5:7c:c9:4f:d0:2e:77:db:3a:56:1d:2a:
         5d:5b:5e:33:f0:05:d8:c6:a2:d1:ef:59:89:2d:9b:48:b0:92:
         57:d7:78:58:dc:37:71:fa:bb:f7:c4:83:44:b0:0b:4d:8e:ff:
         d1:58:08:af:b2:67:58:8b:8a:1b:04:ff:3e:38:bb:a3:3c:3b:
         f0:2b:0e:27:bc:ac:7f:e9:77:56:00:8d:ab:87:0a:16:e4:66:
         1e:a7:8f:d1:02:ea:67:71:d1:22:36:fe:72:9c:a0:f7:49:8e:
         4c:e5:3f:0f:33:ed:ab:90:d1:79:76:46:dc:af:4d:e4:72:7d:
         af:3a:f4:dd:07:54:6a:90:ef:82:56:fd:16:33:3c:42:6f:8c:
         6a:07:bf:20:73:68:8b:f4:e8:13:17:0f:b6:5e:0c:b7:66:99:
         b6:6d:7f:e1:b3:11:ec:a8:5d:d1:34:f8:db:d8:17:77:ff:8c:
         23:24:bb:5a:9b:35:66:c8:09:b2:b6:b8:68:25:62:3c:06:61:
         c9:c8:74:ce:de:dd:6e:9f:d0:d7:1d:a6:30:2b:21:bd:e9:8f:
         71:00:78:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:32:21 2025 by rpki-client