Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/1568ffa4-448a-3377-932d-fa759841f527.roa
File:                     1568ffa4-448a-3377-932d-fa759841f527.roa (raw, json)
Hash identifier:          P23E0UjD2uzd9EsE3KusKdb1n4lq8kEDyBmNT5kaf4U=
Subject key identifier:   42:C8:E4:23:1A:9A:42:26:D6:AB:F9:B3:B1:B9:72:9B:DB:1C:95:19
Certificate issuer:       /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
Certificate serial:       010D0C9F432858481F652C5F80286FC7A451AD40
Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/1568ffa4-448a-3377-932d-fa759841f527.roa
Signing time:             Sat 07 Dec 2024 02:00:39 +0000
ROA not before:           Sat 07 Dec 2024 02:00:39 +0000
ROA not after:            Fri 07 Mar 2025 02:00:39 +0000
asID:                     36445
IP address blocks:        205.178.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1f:65:2c:5f:80:28:6f:c7:a4:51:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
        Validity
            Not Before: Dec  7 02:00:39 2024 GMT
            Not After : Mar  7 02:00:39 2025 GMT
        Subject: CN=516aff4f-e54f-4422-bc2b-a87468f89457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c5:ee:9d:c8:5c:dd:39:62:bd:41:41:fe:86:
                    96:20:a1:67:eb:e3:6b:12:cd:3d:9b:fd:85:58:2b:
                    79:b2:8f:ce:4e:3e:0a:c4:76:7e:a3:86:44:35:cd:
                    df:3c:bc:c6:66:c3:4c:32:37:3e:5d:73:ac:f9:32:
                    e3:2f:07:1f:48:43:5f:17:42:60:56:17:ad:31:e2:
                    7d:3e:e0:72:7b:54:f1:a7:df:74:b2:c7:5c:ff:77:
                    c8:d4:77:7b:87:c5:a6:0d:d9:7a:5e:c0:1a:ae:6f:
                    1f:be:89:fa:9e:6c:86:7b:2b:e9:2a:b0:ae:42:fb:
                    23:26:e5:05:95:8b:0f:16:71:8f:da:a8:61:67:f4:
                    b3:98:b5:83:c7:2d:e8:59:fb:cd:c3:d7:fd:cc:cb:
                    03:c6:18:cd:e8:b6:79:d1:fe:5a:62:65:8a:66:98:
                    ba:54:6e:f5:de:b3:0e:66:23:1c:f1:83:1a:58:06:
                    d1:2c:a4:db:59:93:80:f8:1a:07:eb:a9:11:fa:fd:
                    6d:01:4e:d7:3c:32:bb:ab:bb:6e:0a:81:00:3e:f7:
                    59:27:9c:e5:9c:a0:ae:bd:76:f9:ea:f4:78:a9:a1:
                    0a:9c:92:12:40:59:af:cc:4e:a6:06:f9:42:15:93:
                    3c:1e:0e:87:fd:4d:b5:fc:b2:c9:3a:a6:73:6a:c4:
                    61:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C8:E4:23:1A:9A:42:26:D6:AB:F9:B3:B1:B9:72:9B:DB:1C:95:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/1568ffa4-448a-3377-932d-fa759841f527.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl

            X509v3 Authority Key Identifier:
                keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.178.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:86:22:f7:a3:b6:16:8d:ff:05:ec:7a:37:7f:36:35:69:2b:
         1b:13:1e:41:5f:0d:a2:6b:40:55:29:ae:ca:8e:a7:8f:82:60:
         cc:c0:ee:a5:1c:cb:f5:b0:96:60:1c:81:2a:34:46:ca:96:52:
         d8:57:d6:d3:91:08:ab:c4:bf:21:f4:d5:06:f8:f4:39:e7:20:
         aa:ea:29:f9:30:3c:30:c1:37:83:64:93:74:ae:a9:57:2c:c1:
         c5:43:80:02:c6:1f:c5:61:d2:1f:87:b2:76:63:30:75:b4:a7:
         cd:7c:39:67:aa:44:96:1f:54:bc:3c:34:8f:3c:94:e2:8d:3a:
         05:72:f3:5a:52:62:24:63:70:05:df:22:a0:e8:d7:fc:42:8f:
         02:06:0e:31:84:24:f4:43:41:a9:a1:54:90:ad:05:d3:4e:35:
         68:4b:00:d4:e4:66:c4:f6:5c:af:06:92:af:8e:75:83:23:fb:
         c2:53:f2:5b:a8:a8:8e:db:62:19:5f:3f:25:c4:c8:a9:da:02:
         eb:c2:cc:b6:43:4d:f7:2e:01:98:e4:3b:a9:60:ed:55:0b:e7:
         3c:40:80:e3:c2:79:ec:92:a5:fe:fb:f0:25:db:14:ac:23:77:
         27:41:65:d4:fe:85:8c:a4:3e:e6:6e:10:62:1a:fc:d0:2a:10:
         95:0a:12:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:41:19 2025 by rpki-client