Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/2d112227-ccc7-32dc-af8a-99b27b67c1bb.roa
File:                     2d112227-ccc7-32dc-af8a-99b27b67c1bb.roa (raw, json)
Hash identifier:          mcF6Ip/bCK34L88gD0LtgypkOJdlCINm9ArV+juFxZA=
Subject key identifier:   06:DA:E4:9E:BA:22:A1:A7:14:21:24:B2:2A:D8:1B:77:3B:6B:2B:F6
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F432858488815E60CC6F6BF9848EE0CC0
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/2d112227-ccc7-32dc-af8a-99b27b67c1bb.roa
Signing time:             Mon 13 Jan 2025 14:00:52 +0000
ROA not before:           Mon 13 Jan 2025 14:00:52 +0000
ROA not after:            Sun 13 Apr 2025 13:00:52 +0000
asID:                     36829
IP address blocks:        104.156.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:88:15:e6:0c:c6:f6:bf:98:48:ee:0c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Jan 13 14:00:52 2025 GMT
            Not After : Apr 13 13:00:52 2025 GMT
        Subject: CN=008a8c9e-0596-4a55-96a5-16b92a248a36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:98:16:c7:c8:1a:b8:8c:ae:e7:83:d1:3d:ff:
                    dc:2a:ea:a2:de:b8:18:75:f6:04:b9:95:03:73:d6:
                    65:68:dc:57:0f:1a:75:33:af:6c:60:b1:6b:c8:25:
                    f1:fd:79:84:58:ac:67:2f:86:6b:ed:cc:0e:f9:76:
                    21:23:eb:bd:ea:b9:20:56:58:36:0d:0e:e2:de:3b:
                    08:76:4b:94:95:0b:da:21:9e:7a:a4:8c:0d:d7:8b:
                    c0:36:33:2a:67:41:73:b0:a5:67:7d:5e:5a:09:50:
                    47:fb:0b:75:3e:c2:d5:c0:fe:af:bb:ae:cf:7d:44:
                    08:fe:a1:88:bd:6c:55:1e:fb:cf:bb:e4:36:2d:ef:
                    fd:a1:3f:c0:6f:ea:8d:dd:a9:0e:77:f3:a5:82:2e:
                    41:f3:2e:3b:3a:a9:1c:8b:c1:88:14:c8:d0:97:a0:
                    63:73:cc:51:fe:fe:c5:94:d2:a0:c9:05:33:30:86:
                    e8:67:c3:0a:e0:a9:df:e8:e9:5a:24:30:d9:7c:3d:
                    9b:ba:fe:ec:99:cb:ef:f4:03:ff:47:2b:8d:19:ba:
                    8c:fe:68:db:b3:e8:10:fd:81:4e:a1:65:b7:b1:39:
                    66:d1:38:c3:5a:d8:aa:ba:cf:59:35:6b:e2:f4:e2:
                    55:de:f4:3e:4f:51:37:6a:32:88:a1:30:c5:cf:b7:
                    a7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DA:E4:9E:BA:22:A1:A7:14:21:24:B2:2A:D8:1B:77:3B:6B:2B:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/2d112227-ccc7-32dc-af8a-99b27b67c1bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:30:32:45:97:db:2c:03:2c:5c:2a:3c:c1:b5:25:59:00:75:
         23:78:ab:ab:88:b1:26:ee:71:67:9b:05:99:a6:18:03:e9:41:
         da:af:90:00:dc:45:8a:b7:cb:78:0d:b7:a6:c1:1b:27:0e:01:
         f8:47:10:cb:1e:9b:61:15:24:5d:e2:7e:72:9d:f2:00:b4:0b:
         c7:ce:a0:57:cd:a9:5d:fd:ab:04:54:f0:20:92:bf:57:36:36:
         a5:66:de:a8:75:89:1e:84:dd:1e:91:ef:21:d6:f6:79:3b:5c:
         f4:77:f2:26:f5:12:77:b8:9c:a2:c0:38:73:7e:08:3d:d9:c5:
         a9:49:da:5a:a8:5c:42:8d:fd:dd:dd:a0:0a:27:50:20:c9:24:
         4b:5e:41:59:6e:45:9b:f8:29:66:f8:48:be:39:8c:95:fd:d9:
         87:95:7a:bb:a1:52:ed:5f:ee:3e:f4:cf:25:d6:e4:6a:98:3c:
         01:81:88:e4:e8:f1:6a:15:7b:1b:25:14:1b:1c:4f:f3:0c:16:
         dc:7a:42:31:ad:8d:78:fa:69:76:a7:bc:e9:59:7b:89:03:26:
         cc:59:dd:00:59:8e:c4:a5:2c:80:65:29:25:d0:c0:e1:9e:40:
         37:55:b4:4e:73:31:0e:eb:69:72:9a:99:fc:da:bf:cd:b8:a5:
         2b:5e:a5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:41 2025 by rpki-client