Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/5cea7fe7-35eb-332d-a713-9768d64cc717.roa
File:                     5cea7fe7-35eb-332d-a713-9768d64cc717.roa (raw, json)
Hash identifier:          OR8Nl0t9ihxXq2KOYbw3wSpb9hEHSg7qzczRXOhQUgw=
Subject key identifier:   02:D7:50:81:0D:21:D0:38:98:CA:86:E0:40:DD:91:95:5B:FF:6C:0D
Certificate issuer:       /CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
Certificate serial:       010D0C9F4328584839EABDBC17C789EDEE55B880
Authority key identifier: D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/5cea7fe7-35eb-332d-a713-9768d64cc717.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     20205
IP address blocks:        168.245.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:bd:bc:17:c7:89:ed:ee:55:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=09efe9fd-2f23-44ab-94af-8df5ebc75ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:77:71:0d:a9:50:47:72:71:ce:48:c4:7e:69:
                    34:c1:1b:17:c1:47:ae:96:37:a1:3c:c5:d6:f8:06:
                    12:d1:1b:32:d6:77:45:c5:ce:a6:b9:25:e4:2e:f3:
                    b9:e3:cd:14:2b:da:52:34:f1:33:66:ec:39:9c:52:
                    1b:75:3f:73:1d:bd:c5:3a:e1:d9:cb:ac:1a:40:7b:
                    91:a5:83:7a:00:31:98:f1:c1:17:6e:66:ca:9a:f2:
                    7f:12:d0:91:4d:5b:4c:f1:0a:5e:8b:94:ac:ee:e7:
                    a5:4a:2c:b0:32:5d:b9:08:1e:1f:06:5f:e1:f0:4a:
                    a2:9e:e3:1b:3c:a7:c6:63:d7:f9:2f:27:06:b4:0e:
                    2b:5f:8e:09:9d:df:e6:80:dd:10:b0:69:36:d3:3a:
                    5e:4b:cb:3a:e3:d4:01:84:91:5c:4e:a1:ff:f5:3f:
                    d7:24:b2:08:19:5d:f7:aa:81:9b:6b:2c:fe:9c:f1:
                    57:ea:7a:a6:1e:1c:ce:fa:69:e3:85:6b:c2:60:50:
                    cc:6f:42:d7:7a:6c:ac:1d:d7:0c:dd:ea:ec:e3:b1:
                    53:c4:af:b6:b6:b2:d5:6f:38:30:f3:85:6e:85:94:
                    60:96:9c:e4:9f:a1:7d:c1:5e:37:7c:a9:b9:7c:d0:
                    39:f8:28:85:92:33:04:83:fe:13:ac:49:5e:78:45:
                    b7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D7:50:81:0D:21:D0:38:98:CA:86:E0:40:DD:91:95:5B:FF:6C:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/5cea7fe7-35eb-332d-a713-9768d64cc717.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl

            X509v3 Authority Key Identifier:
                keyid:D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.245.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:3c:d9:8a:44:e9:f3:9f:1e:be:c0:57:a3:c3:d2:cb:db:77:
         dd:ac:4a:d4:1a:e3:a9:22:54:e7:a4:11:e9:6b:fd:25:4f:2b:
         78:bc:29:0b:a1:b0:50:30:8d:79:c9:0a:8a:56:83:81:d2:97:
         df:e5:23:e1:15:02:5f:03:e6:5f:65:fd:49:bf:b9:03:b4:13:
         ff:2a:dc:d2:29:f7:ab:b4:89:f5:53:44:83:dc:28:ec:6d:b4:
         af:72:c2:f6:2d:7b:fc:20:5b:5f:a5:b0:70:77:87:ca:22:10:
         31:3b:17:5f:5d:fc:c4:70:04:93:8c:a5:8d:f3:40:e5:20:62:
         1d:02:41:93:dc:9c:a4:63:3c:63:33:6c:a4:ee:8f:be:a9:7e:
         fd:9f:8e:75:dc:94:5d:83:ca:86:d6:66:d2:f8:00:4b:70:ad:
         a0:60:39:c3:a0:fd:b3:27:a8:f8:5e:ee:31:1a:35:5d:a8:83:
         97:db:f8:35:27:60:43:7a:83:83:06:81:e4:cd:4f:8d:df:91:
         a8:0f:e6:e4:0b:36:63:d6:a6:b9:a0:32:d3:ee:f9:64:cc:d3:
         46:53:f2:e9:ba:ca:c8:7e:12:54:e3:3a:56:53:5a:f6:b3:bd:
         fe:4d:a1:7f:36:62:a9:c3:40:df:6d:82:55:32:1c:34:3b:b3:
         f4:3f:e4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:05 2025 by rpki-client