Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/0a84462e-ebef-3601-aa9b-894d08e40b73.roa
File:                     0a84462e-ebef-3601-aa9b-894d08e40b73.roa (raw, json)
Hash identifier:          I7fa69nLo8++IaV2uie/TJCwWySHaLk33ClajuGL3RU=
Subject key identifier:   60:08:8B:9C:4C:92:4B:B7:79:24:A0:71:66:2F:9E:21:04:FC:1E:D8
Certificate issuer:       /CN=17499469-12e7-4915-9db8-02bba626b87d
Certificate serial:       010D0C9F43285848748B16760D045E30E603EE80
Authority key identifier: 6E:89:08:E4:43:38:96:4D:4A:79:D1:ED:FC:6C:82:71:63:3C:26:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/0a84462e-ebef-3601-aa9b-894d08e40b73.roa
Signing time:             Mon 06 Jan 2025 14:00:52 +0000
ROA not before:           Mon 06 Jan 2025 14:00:52 +0000
ROA not after:            Sun 06 Apr 2025 13:00:52 +0000
asID:                     396432
IP address blocks:        147.185.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/17499469-12e7-4915-9db8-02bba626b87d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/17499469-12e7-4915-9db8-02bba626b87d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:74:8b:16:76:0d:04:5e:30:e6:03:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17499469-12e7-4915-9db8-02bba626b87d
        Validity
            Not Before: Jan  6 14:00:52 2025 GMT
            Not After : Apr  6 13:00:52 2025 GMT
        Subject: CN=c0dab507-3dde-4553-aa25-86e38bcfde11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:11:5f:87:0d:77:8c:8d:49:56:e5:08:a3:3a:
                    dd:15:eb:e5:41:ad:90:ab:89:c9:02:2e:fe:5d:c5:
                    77:da:57:be:79:3d:0a:a5:16:f6:34:db:6f:25:9d:
                    d5:9c:81:57:41:43:bd:09:8a:68:d3:19:a4:29:56:
                    b3:dd:99:13:32:cd:25:7d:a2:47:63:5a:ca:9b:88:
                    e4:1c:b0:ef:6e:f7:21:db:1b:19:99:b2:d9:c5:ee:
                    a9:8b:fe:36:9b:6b:13:e2:65:4a:37:36:fd:65:92:
                    3a:fc:b6:31:f5:2b:ba:68:4a:af:f7:39:d1:3d:d0:
                    c3:40:49:8b:95:ff:ec:9b:29:e3:e1:5f:25:19:fc:
                    e4:9d:7b:f7:9c:7c:fd:5b:fd:6e:6e:be:ec:2d:f5:
                    4a:7c:ac:88:d5:84:2b:49:f4:a5:ff:ed:7b:4e:69:
                    79:0d:28:47:3d:27:e9:1c:1a:8a:9e:4b:c9:23:5b:
                    91:05:31:eb:b7:09:f1:49:76:57:cc:2d:cb:53:d3:
                    cb:e0:ab:f6:cb:65:cd:95:20:a2:8d:85:62:95:b5:
                    9d:91:14:a6:e7:dc:b4:b6:40:b9:5f:84:e2:2f:eb:
                    63:ec:54:4f:da:a3:16:76:a8:fe:6d:56:49:bc:47:
                    0a:57:48:a5:67:32:c0:74:4c:e3:34:7e:a8:de:a8:
                    f9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:08:8B:9C:4C:92:4B:B7:79:24:A0:71:66:2F:9E:21:04:FC:1E:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/0a84462e-ebef-3601-aa9b-894d08e40b73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/17499469-12e7-4915-9db8-02bba626b87d.crl

            X509v3 Authority Key Identifier:
                keyid:6E:89:08:E4:43:38:96:4D:4A:79:D1:ED:FC:6C:82:71:63:3C:26:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.185.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:8a:7c:3d:33:7f:f9:f7:a2:18:6e:f5:6a:82:18:c6:6e:f0:
         14:de:ff:12:e2:cd:cd:59:51:62:77:0c:43:fa:5e:18:ef:55:
         7a:63:d8:7e:be:7a:f9:22:23:2f:d7:4d:ea:05:49:c6:d6:74:
         05:3b:27:22:5a:2c:72:32:02:51:5b:4c:5a:90:96:3b:46:68:
         fd:3c:ff:5c:32:a5:e0:70:08:a5:8a:7a:e4:8f:93:a3:e5:18:
         e7:6d:07:6e:c5:84:16:85:48:63:40:b1:2d:18:7f:17:83:0e:
         7a:e2:02:dc:b6:5d:e4:de:03:ed:ba:b7:a2:d9:f5:ef:17:75:
         8c:70:2e:43:e9:76:df:f3:0b:b5:fd:51:cf:34:c0:ea:ba:49:
         b8:5e:12:2e:c0:9c:27:51:c5:8f:95:c2:c6:ab:bb:61:d0:c3:
         68:e1:1d:92:1d:b3:81:ca:56:90:27:bf:43:7e:85:40:17:3f:
         d1:c4:b3:08:dd:a6:84:93:86:b5:6c:4b:ae:7f:48:eb:0c:49:
         97:9f:80:46:9d:95:c6:66:0d:40:8b:f1:cc:47:6a:99:23:9c:
         6e:2f:31:33:d8:c9:fb:4a:7c:c9:cb:4c:ae:9e:71:e8:2e:4d:
         69:05:db:2e:6a:10:31:76:19:62:ff:b2:71:1f:ac:08:68:27:
         5a:8c:8c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:21:45 2025 by rpki-client