Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/0a5312e1-ba99-3b62-8fc1-d534ee288765.roa
File:                     0a5312e1-ba99-3b62-8fc1-d534ee288765.roa (raw, json)
Hash identifier:          wID5ByR5WpxjZhxYSZvsg7ricIpFBeNQl6/c0ujEwrg=
Subject key identifier:   B4:DB:A5:AE:E4:68:9E:29:C7:BE:0D:4B:4A:0F:DB:7F:FB:DE:EF:B1
Certificate issuer:       /CN=544240c0-1aad-4163-8ada-3b71180eac4f
Certificate serial:       010D0C9F432858482395463876AC6FE9D2274000
Authority key identifier: A7:B0:96:5B:48:01:56:7A:E0:42:9A:9F:7E:0C:3E:42:9A:BB:59:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/0a5312e1-ba99-3b62-8fc1-d534ee288765.roa
Signing time:             Sun 08 Dec 2024 14:00:51 +0000
ROA not before:           Sun 08 Dec 2024 14:00:51 +0000
ROA not after:            Sat 08 Mar 2025 14:00:51 +0000
asID:                     15169
IP address blocks:        147.146.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/544240c0-1aad-4163-8ada-3b71180eac4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/544240c0-1aad-4163-8ada-3b71180eac4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:23:95:46:38:76:ac:6f:e9:d2:27:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=544240c0-1aad-4163-8ada-3b71180eac4f
        Validity
            Not Before: Dec  8 14:00:51 2024 GMT
            Not After : Mar  8 14:00:51 2025 GMT
        Subject: CN=f0eb4e6d-4f18-43ed-b7e3-288e99edf180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ac:85:aa:fb:ab:8d:6e:8e:e1:b3:95:e0:d4:
                    35:d2:5f:55:32:bd:99:66:2a:53:0f:37:a4:2f:97:
                    84:26:48:5a:92:87:6e:0f:6b:6c:7a:f7:99:09:3b:
                    aa:ca:93:b0:5f:03:5b:4f:c3:d8:da:64:bb:4d:1b:
                    4e:27:0e:7c:db:29:20:89:cb:0e:ea:70:d4:a1:63:
                    97:b0:e1:b4:c4:cc:e9:1d:42:bf:c6:1d:87:a1:7b:
                    8b:b4:a9:ec:8e:c9:97:4b:a5:bb:e0:97:21:6c:de:
                    1a:62:b3:44:74:53:79:b4:6f:99:7d:e0:f9:b7:1b:
                    92:f2:5c:d8:0a:cc:ac:0b:18:6e:e3:d2:e0:1f:e8:
                    e9:27:71:4d:ef:a8:a9:da:2e:78:81:eb:3e:8d:9d:
                    1f:5d:46:fd:c3:4f:d5:bb:21:08:eb:ff:ea:ed:fd:
                    39:29:7b:39:ea:a6:4e:38:80:c6:12:84:2b:fa:61:
                    61:0a:7e:45:c7:04:63:c4:3f:03:ed:a4:b7:84:9a:
                    71:10:36:72:77:f6:4d:13:e3:34:a3:17:27:4b:39:
                    05:e4:67:38:15:0b:a2:c7:a5:81:fa:7f:24:54:54:
                    3f:e5:05:75:71:15:20:0b:34:b7:53:0d:9e:f6:66:
                    b7:d9:9f:b9:8b:ac:93:15:45:69:95:64:6b:41:69:
                    94:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DB:A5:AE:E4:68:9E:29:C7:BE:0D:4B:4A:0F:DB:7F:FB:DE:EF:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/0a5312e1-ba99-3b62-8fc1-d534ee288765.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/544240c0-1aad-4163-8ada-3b71180eac4f.crl

            X509v3 Authority Key Identifier:
                keyid:A7:B0:96:5B:48:01:56:7A:E0:42:9A:9F:7E:0C:3E:42:9A:BB:59:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.146.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:42:3e:5d:b2:ab:22:3a:4d:6b:b5:a3:5f:d7:14:a7:b2:17:
         90:34:0a:f7:81:df:5b:b8:48:32:84:96:8d:40:6a:bd:47:d0:
         a0:40:be:06:75:3a:d1:f8:f5:4e:0c:de:76:4f:85:7f:5b:e3:
         a8:ac:aa:3f:78:de:f2:5e:37:e4:2a:11:34:3a:c0:aa:96:53:
         36:5b:fb:1d:27:c5:15:d5:6b:b3:3e:0d:f9:78:bf:2f:c1:8e:
         5b:ab:3e:95:c8:06:26:96:d8:06:14:65:90:71:be:4a:12:cc:
         0d:93:fc:f9:9b:b2:f6:9f:fb:1d:8a:7e:14:13:ab:2b:b1:de:
         4e:04:fb:ff:4a:0d:3d:ad:fd:ff:c5:0c:e9:47:b0:4e:fa:15:
         70:c3:fb:cf:58:7c:c6:4a:14:60:14:68:6b:70:85:1e:13:d3:
         ab:7d:77:42:1f:73:a3:57:e4:1c:0a:af:c8:3f:71:ad:74:f6:
         89:86:dd:10:c8:f2:e5:1b:ca:8f:d5:58:4a:e4:00:c9:f5:48:
         11:0c:3d:fb:9b:13:8f:58:c7:ff:3a:66:09:dc:29:19:80:04:
         b9:f8:8c:32:03:58:81:f3:5a:38:55:ef:a6:e3:89:99:b8:33:
         a3:1e:84:84:8a:70:66:47:ce:e4:10:a7:ff:83:b9:69:de:90:
         44:a8:dc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:32:02 2025 by rpki-client