Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/d1d18c83-b8e1-368c-afd1-3668a96f0c7a.roa
File:                     d1d18c83-b8e1-368c-afd1-3668a96f0c7a.roa (raw, json)
Hash identifier:          gmzo9DGt7WTztJK1ylC/6TXhDCcmCt0geQZdkDLV+LQ=
Subject key identifier:   30:B0:41:9D:58:EE:45:2E:5E:CE:4C:33:2B:F3:54:71:98:3C:97:DF
Certificate issuer:       /CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2
Certificate serial:       010D0C9F43285848BE862ED7EA3E6A5A4A3BAD60
Authority key identifier: 26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/d1d18c83-b8e1-368c-afd1-3668a96f0c7a.roa
Signing time:             Sun 02 Feb 2025 02:00:39 +0000
ROA not before:           Sun 02 Feb 2025 02:00:39 +0000
ROA not after:            Sat 03 May 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        45.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:86:2e:d7:ea:3e:6a:5a:4a:3b:ad:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2
        Validity
            Not Before: Feb  2 02:00:39 2025 GMT
            Not After : May  3 01:00:39 2025 GMT
        Subject: CN=48477305-d93b-45e6-bae9-92bdd785a917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e2:00:5d:98:52:b4:21:50:8c:b9:1a:09:b3:
                    a3:34:7e:e9:62:90:4b:4b:b0:8f:16:9d:44:77:c3:
                    bd:67:bd:f2:e4:c4:9f:aa:16:7d:af:59:87:a8:ae:
                    c5:e8:c9:c0:a9:4e:65:db:1e:bb:0d:e5:00:5d:ba:
                    f1:b4:41:d2:75:e6:8e:4b:94:40:11:d7:78:3c:d5:
                    25:51:e2:6a:13:4e:2f:9c:51:ef:fc:34:ee:4d:b4:
                    af:d1:87:79:32:40:bd:3a:0e:a7:e0:85:07:83:a6:
                    82:a9:76:17:49:4a:90:f9:80:f6:04:ee:d7:59:e9:
                    05:0c:11:8d:23:94:99:13:51:73:89:8b:58:ba:1f:
                    7f:f2:97:38:25:1a:64:32:a9:9a:9d:cf:b3:b2:4b:
                    0d:63:1c:10:c6:09:8a:8a:3c:95:25:18:63:7e:8e:
                    7c:b1:81:9c:8c:b8:89:af:0c:95:6d:21:d5:a4:a2:
                    aa:c4:1b:8a:ef:45:d5:00:41:ee:2f:fc:1c:47:09:
                    c1:64:bb:16:0b:7b:3b:2b:c5:b4:6a:d0:7f:e7:a1:
                    57:6e:b6:d4:01:19:e4:23:a8:c0:78:8f:c7:ec:3d:
                    3e:a7:80:b2:89:6b:42:28:99:db:fb:cd:3c:17:62:
                    87:54:c5:fd:40:d1:9a:66:95:42:75:57:3b:66:5c:
                    0e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B0:41:9D:58:EE:45:2E:5E:CE:4C:33:2B:F3:54:71:98:3C:97:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/d1d18c83-b8e1-368c-afd1-3668a96f0c7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl

            X509v3 Authority Key Identifier:
                keyid:26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:47:45:2c:4a:fb:8f:30:a1:4b:7a:35:ab:5a:30:ba:a6:01:
         56:46:87:f2:c5:9b:32:c7:a0:4a:e3:0f:0c:b6:b6:92:ec:86:
         2c:52:3b:48:aa:8d:cd:00:18:96:86:43:f2:f2:60:d1:6f:f7:
         71:c2:3f:01:66:bc:3a:59:d1:ef:0a:7d:ec:0c:57:ba:77:e4:
         af:c0:ba:79:e9:02:cc:6f:c0:87:90:6d:86:5b:13:77:ac:96:
         59:b1:6b:a8:d7:8e:fa:2e:00:6e:90:27:14:c2:19:b7:c1:6e:
         6c:64:00:d9:6a:d9:29:8b:3e:03:41:bb:33:e3:aa:eb:59:92:
         1d:d0:76:e6:d5:73:18:09:d6:4d:e2:a8:56:f6:02:83:3c:fe:
         95:9b:1e:c3:e0:f8:9b:f9:be:86:c6:cc:cc:58:21:b5:50:84:
         f2:f5:38:d0:1b:a4:e7:72:d2:a7:3e:02:a6:2e:b7:9e:50:c3:
         0f:7f:0b:7a:e3:84:e6:97:3f:d6:06:ca:85:74:40:3d:68:17:
         a8:42:b4:4e:9b:e3:d2:8d:d4:be:b7:ef:37:36:7a:df:a1:98:
         6c:ab:7a:1e:81:ee:ce:77:b1:ce:dc:37:6e:62:8f:2c:63:ec:
         a6:26:65:12:75:bc:be:70:64:c6:66:64:46:b3:04:d6:48:ef:
         c0:42:f0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:36 2025 by rpki-client