Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/1ce20416-7f37-33f9-9a62-528b71678539.roa
File:                     1ce20416-7f37-33f9-9a62-528b71678539.roa (raw, json)
Hash identifier:          oOjd78Nmo/grH0HIXugQA4VdV+gtkKgOWx/7xIYJZjI=
Subject key identifier:   FF:31:39:28:29:8E:AE:9F:44:6E:D0:D6:F0:90:DD:6D:F9:E5:07:F6
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F432858485B6AFFE3E1B3ECF14B0FDCA0
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/1ce20416-7f37-33f9-9a62-528b71678539.roa
Signing time:             Sat 28 Dec 2024 14:00:52 +0000
ROA not before:           Sat 28 Dec 2024 14:00:52 +0000
ROA not after:            Fri 28 Mar 2025 13:00:52 +0000
asID:                     7018
IP address blocks:        144.208.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5b:6a:ff:e3:e1:b3:ec:f1:4b:0f:dc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Dec 28 14:00:52 2024 GMT
            Not After : Mar 28 13:00:52 2025 GMT
        Subject: CN=eabc2fd5-0028-4ba2-844b-7e8d3c08c4b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4d:43:e3:6b:9c:8c:29:97:fd:fc:af:65:35:
                    1f:62:b1:d6:74:6b:f9:52:09:f6:f7:32:b8:fc:9e:
                    ad:60:3e:0a:07:c2:62:03:7a:a5:08:a8:0f:30:66:
                    97:11:5e:05:2d:5a:a4:f0:c4:0d:6b:f7:14:4c:a4:
                    a8:3a:f9:b8:14:a5:fa:c7:ee:5f:1d:ab:31:e4:cb:
                    9d:c8:96:52:99:2d:96:68:1c:95:b3:0e:72:c6:23:
                    b8:18:4d:50:69:2f:d6:4c:60:a5:1d:a6:a6:25:03:
                    f4:20:26:6d:ee:ff:c9:39:cf:07:a9:61:1f:03:4c:
                    5c:ec:65:53:14:8c:6c:20:f0:ad:85:c0:6f:a6:aa:
                    c9:2a:19:8d:21:61:3e:76:93:e6:57:3d:51:6b:af:
                    c7:0d:7b:cb:8e:37:4f:71:60:04:77:f7:4b:dd:e5:
                    8a:74:b2:e2:c3:eb:64:d4:01:a2:16:a2:b0:c3:69:
                    99:30:5d:b6:cb:43:48:ce:7d:85:6a:43:22:6a:27:
                    e0:21:4f:19:5a:43:28:d4:e5:f0:be:ea:46:5e:e6:
                    39:d0:8e:6f:e8:01:58:b2:cf:e2:7e:ea:68:0a:f3:
                    63:3b:a8:35:44:86:87:6f:a4:5f:44:0c:48:bb:09:
                    aa:4c:ee:8d:95:92:5c:5b:4e:fd:52:ee:dc:1c:10:
                    a7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:31:39:28:29:8E:AE:9F:44:6E:D0:D6:F0:90:DD:6D:F9:E5:07:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/1ce20416-7f37-33f9-9a62-528b71678539.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.208.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:ff:fe:0b:6c:6e:d1:88:6a:a8:46:f8:f0:73:c7:7b:f2:35:
         1f:f8:ce:de:6b:f1:59:3c:24:d2:9e:11:4a:aa:cd:b8:17:3b:
         ed:78:8e:01:c4:33:63:bd:91:79:14:5b:5d:07:36:63:e9:98:
         64:0c:0c:8f:46:6c:00:12:d6:c2:be:51:96:e4:21:13:ce:c9:
         1d:e9:62:0b:a5:e9:d1:4b:bd:03:31:98:88:28:9a:ae:78:e7:
         94:55:21:60:ec:b9:ff:c7:bc:54:5c:a4:a1:6f:29:b3:84:57:
         02:27:ab:6b:8f:b5:a1:35:03:06:56:9b:e7:00:d4:1f:b8:cd:
         c6:9e:a0:ec:2c:db:50:36:27:6d:40:ac:72:75:bb:8e:93:61:
         27:40:8e:73:aa:20:fe:c6:eb:f3:f3:2f:6a:ad:74:e0:d5:d0:
         2d:74:d4:a7:d6:f4:77:a2:72:23:35:43:24:7f:23:96:5d:62:
         9c:4e:de:cb:bc:6f:14:9d:22:6a:cf:51:35:6b:03:03:53:3e:
         7f:a2:e0:68:9d:27:f1:7b:8e:7c:27:26:c5:34:b8:56:d9:2f:
         65:59:fb:13:a8:f2:31:a1:93:6e:d7:0a:21:3a:44:2d:fa:c9:
         af:3c:29:76:0d:cc:63:3f:0c:a2:50:f8:c4:e7:73:30:81:12:
         c9:3d:ee:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:01:06 2025 by rpki-client