Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/f652d85e-7f1d-381a-80d0-5577ce4aa300.roa
File:                     f652d85e-7f1d-381a-80d0-5577ce4aa300.roa (raw, json)
Hash identifier:          Fjmq+kNAhLIsI0vihuqgY2nJAYfwQRnh2E+3ToDQl2o=
Subject key identifier:   B2:A0:E9:99:05:A9:AA:01:82:00:43:02:0A:0F:66:4C:6A:AC:FD:19
Certificate issuer:       /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
Certificate serial:       010D0C9F432858484C101D0FB08562EBF1046A96
Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/f652d85e-7f1d-381a-80d0-5577ce4aa300.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     53828
IP address blocks:        144.91.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:1d:0f:b0:85:62:eb:f1:04:6a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=17b61351-965b-414c-8cc7-654b04b1fd35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:63:9c:82:7e:9e:d2:c6:a5:cb:79:f1:70:e0:
                    52:75:44:cd:ef:5d:3a:cc:5d:40:53:a1:8f:d0:37:
                    0b:20:5a:92:c5:a4:4e:4b:61:8c:d8:46:23:1f:6b:
                    c4:8f:24:a7:a9:de:97:92:75:b8:aa:8d:8b:06:a4:
                    59:b1:aa:4a:63:97:37:87:d3:d2:0d:be:7d:2e:d8:
                    7f:2b:57:9d:7d:df:47:fa:d7:24:0b:da:2f:93:b2:
                    58:d0:f1:ae:45:e0:92:13:65:19:fc:c8:92:8d:c6:
                    7f:1c:48:44:ce:5e:56:5c:b2:c4:c6:6c:c9:3c:80:
                    bc:a5:69:c5:21:74:51:df:77:bb:a1:be:93:3e:24:
                    ac:b7:4e:28:3b:0b:bc:3b:39:b9:4c:49:26:14:5c:
                    5d:1d:82:f6:2a:ed:a3:3e:33:ca:0b:cb:05:3e:0a:
                    2b:e6:ba:75:52:23:0f:ca:a5:b1:a1:44:db:58:53:
                    6c:d3:1e:e1:48:cd:92:7f:b5:1b:85:f4:00:09:eb:
                    c8:2a:2d:7b:cf:1a:fb:eb:f5:0e:a5:07:2e:00:39:
                    c5:d8:de:d3:6f:3f:0c:59:6e:28:0b:e9:1f:db:9a:
                    09:bb:52:90:09:e7:82:5a:5d:25:3c:2c:c4:82:e1:
                    0a:e7:d2:83:2f:ed:60:79:4c:41:3e:24:f8:58:a1:
                    f8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A0:E9:99:05:A9:AA:01:82:00:43:02:0A:0F:66:4C:6A:AC:FD:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/f652d85e-7f1d-381a-80d0-5577ce4aa300.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl

            X509v3 Authority Key Identifier:
                keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.91.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:bb:c6:57:db:4c:54:31:aa:45:72:b5:96:39:26:e7:8b:76:
         2d:14:76:96:20:40:5f:7e:31:56:35:95:23:14:26:b3:8d:9c:
         8e:29:fe:31:7a:87:2c:4e:44:98:14:b1:c7:c9:15:c9:3b:88:
         e7:b6:7e:de:b7:38:0e:ed:1e:8f:c2:ec:9a:90:5d:5f:4d:13:
         7b:a3:b5:f3:5a:ca:04:48:d5:e6:24:a1:54:80:07:8b:3b:54:
         8b:c0:ed:27:dc:a5:f9:6e:de:94:5c:46:57:7c:fb:91:ae:df:
         71:60:b6:6c:9e:79:89:e5:31:c3:95:4d:c0:7a:4f:08:df:41:
         0f:10:bf:8d:f9:9b:70:3d:a9:3f:d4:58:80:00:d8:5a:57:4c:
         e5:ed:57:90:07:28:0f:b6:b6:92:df:04:e5:55:e8:c6:4f:08:
         83:ea:70:18:d3:6f:1a:28:10:8b:f6:25:b5:ff:f2:89:e1:f3:
         88:a4:21:fa:29:08:bf:bd:b6:de:5a:4c:6c:61:b7:87:e1:e0:
         b1:cb:64:99:13:f8:2c:54:7a:12:c0:1a:bb:23:05:e2:c1:57:
         22:99:9d:0b:d3:e6:0b:aa:56:92:be:59:8e:01:d6:d2:dc:69:
         e8:40:45:8f:37:e8:b8:cd:02:7f:0c:d9:ee:81:f9:fc:6c:e9:
         2f:35:d7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:52 2025 by rpki-client