Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/d13535fb-cbfc-3dec-b158-20eb919c9bcf.roa
File:                     d13535fb-cbfc-3dec-b158-20eb919c9bcf.roa (raw, json)
Hash identifier:          Uv2M6Rllc1ltHtYAncw5d9TvR9hTD23ssD8M15pbrKM=
Subject key identifier:   1F:44:60:0C:98:DE:C0:8A:B2:DD:CA:94:57:61:23:86:75:2C:68:79
Certificate issuer:       /CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
Certificate serial:       010D0C9F432858488DAB4359F515DFDE8E1C4540
Authority key identifier: FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/d13535fb-cbfc-3dec-b158-20eb919c9bcf.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     53768
IP address blocks:        162.134.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:43:59:f5:15:df:de:8e:1c:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=65688b6e-4df8-4046-b956-a9b59a768cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5b:88:03:e6:2b:d7:f0:3b:a4:25:e7:95:43:
                    ce:52:c0:5b:d6:4c:ac:7d:74:d6:ec:78:90:8a:f4:
                    48:9b:ec:ab:3f:64:c2:a3:44:0f:03:27:45:51:1b:
                    cd:14:79:74:3e:58:d2:ff:5f:43:fb:c0:fe:aa:95:
                    f0:59:3b:b5:b7:e4:03:32:2d:d0:7a:07:83:a1:e8:
                    a8:4a:ed:95:02:7e:1d:46:46:df:38:12:72:83:2e:
                    68:59:ae:75:1a:6a:af:d7:0f:c2:b7:d9:0f:c5:a7:
                    2d:57:0d:9d:f8:80:11:1b:eb:49:e8:14:47:f2:2b:
                    50:5c:48:2e:fd:4e:d2:d6:8b:7c:e1:c8:27:a1:f6:
                    7f:3a:65:66:49:52:84:8b:c4:e5:b9:17:01:08:df:
                    e3:bd:d1:7e:ed:e0:a7:3b:25:e3:6d:d4:d8:b4:af:
                    c6:2c:46:ab:89:04:ad:f2:16:6d:e2:38:a2:33:4c:
                    1a:28:a9:a8:df:4a:03:73:0c:65:98:c4:6a:42:32:
                    d6:27:c7:ca:eb:e1:e2:73:24:ac:77:02:b9:65:e1:
                    54:ec:b9:4a:4e:f1:40:be:15:f5:9e:32:03:89:ab:
                    11:63:c1:9c:e4:8d:1b:e4:30:cf:1a:1b:94:c2:25:
                    d3:fd:7b:59:eb:84:8d:fd:68:3f:48:9d:28:61:5f:
                    25:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:44:60:0C:98:DE:C0:8A:B2:DD:CA:94:57:61:23:86:75:2C:68:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/d13535fb-cbfc-3dec-b158-20eb919c9bcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl

            X509v3 Authority Key Identifier:
                keyid:FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.134.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:0e:dd:e0:de:51:41:57:af:61:6f:af:62:63:d1:1b:e0:a8:
         70:e7:a7:61:94:83:7c:86:e3:d0:67:f0:19:b9:e4:0b:e4:8b:
         51:08:1d:cf:16:0e:16:65:92:51:8f:64:86:9e:d8:62:7b:35:
         65:13:8c:42:e4:09:06:9c:e3:13:b0:99:9c:2c:e5:cb:e3:16:
         98:94:f3:61:95:92:21:5e:56:87:ea:25:ce:41:3a:21:8a:26:
         b8:3b:86:d3:8e:05:bf:7a:0d:48:13:f6:ef:08:65:3f:ed:18:
         da:48:a0:48:85:9c:f7:e9:e2:24:a5:e8:8f:42:0f:bf:1d:62:
         f6:85:ca:36:a6:06:50:7d:b1:48:f3:af:4e:a1:53:07:95:3f:
         04:0d:a9:b9:f1:c8:f7:1f:f6:26:b4:fb:e8:b8:2a:1e:6f:7d:
         cd:ba:d2:13:a7:a4:06:86:b2:7d:f4:a8:5f:0d:fe:aa:8d:4f:
         e2:59:90:2f:2c:33:34:66:5f:7e:8b:42:bf:a6:cb:4a:02:d9:
         cb:4c:42:52:2b:22:ca:6e:87:ab:3d:2f:11:83:85:28:34:a3:
         ec:35:e1:40:ac:1c:76:dd:17:12:a6:73:d2:7e:5f:c8:29:25:
         69:14:54:b3:ce:3f:9e:10:c8:6d:ca:4b:01:95:59:51:fc:bd:
         59:a2:b3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:53:42 2025 by rpki-client