Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/2e6a1ed3-6ebb-3ea1-a2d7-839dc48ec0a6.roa
File:                     2e6a1ed3-6ebb-3ea1-a2d7-839dc48ec0a6.roa (raw, json)
Hash identifier:          mw0VANtx3qblLuPBSIwpvATNlUN1K6PSXjTAo0UnUYc=
Subject key identifier:   11:73:17:2A:00:B6:C5:FE:0C:AB:FC:DD:E3:AC:C5:3E:F7:60:94:42
Certificate issuer:       /CN=a78600ec-48a2-4f1a-8904-302418a38c57
Certificate serial:       010D0C9F43285848F926A073174DBD7A32BE6E00
Authority key identifier: 01:D2:A5:C1:99:85:CE:F6:57:D4:73:D3:A7:10:72:87:1B:43:48:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/2e6a1ed3-6ebb-3ea1-a2d7-839dc48ec0a6.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        167.124.104.0/24 maxlen: 24
                          167.124.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/a78600ec-48a2-4f1a-8904-302418a38c57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/a78600ec-48a2-4f1a-8904-302418a38c57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:a0:73:17:4d:bd:7a:32:be:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a78600ec-48a2-4f1a-8904-302418a38c57
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=806dcf76-b7e7-46a3-9d8b-80d5d863ef9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:97:8e:62:65:e9:01:b2:4b:f0:41:48:76:a8:
                    c8:bf:cf:84:5c:ca:79:83:96:6c:a0:3e:8e:01:bc:
                    11:3a:cf:14:2a:df:74:84:51:94:d8:90:8f:6e:bf:
                    bd:33:0b:31:cc:57:5b:7e:4e:d5:4d:31:4a:4a:ea:
                    fa:ff:34:dc:cf:8b:96:ea:e5:52:f4:62:12:c6:b7:
                    80:9d:ef:db:8c:36:56:3c:2b:98:97:81:a5:3d:45:
                    19:a9:47:21:4e:9b:85:8a:97:63:07:30:c6:cb:c2:
                    51:88:0d:cf:dc:a3:d8:77:f9:ce:3e:22:79:6d:c0:
                    ca:93:97:15:af:cb:6e:fe:14:22:9e:de:ad:08:55:
                    fa:3f:db:ae:16:49:6f:76:a7:db:37:7c:42:b1:c2:
                    c2:64:b7:02:9b:c3:80:28:c5:b0:e0:c6:d0:8c:2f:
                    05:98:58:6e:5c:0d:b1:bc:b6:69:39:80:6d:c7:5f:
                    70:10:4f:80:ed:44:7e:f7:3e:fa:00:79:5c:aa:78:
                    3b:bd:01:b5:27:0c:06:07:1d:6c:66:70:5a:1b:15:
                    65:7c:6a:39:ba:19:ad:7b:51:2a:b3:6b:3c:bb:f4:
                    b8:57:c7:76:f6:15:ad:2a:61:3e:3e:25:42:78:a9:
                    21:d3:1e:e0:6c:79:94:ff:2a:1c:c3:5a:d5:a4:11:
                    ea:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:73:17:2A:00:B6:C5:FE:0C:AB:FC:DD:E3:AC:C5:3E:F7:60:94:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/2e6a1ed3-6ebb-3ea1-a2d7-839dc48ec0a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/a78600ec-48a2-4f1a-8904-302418a38c57.crl

            X509v3 Authority Key Identifier:
                keyid:01:D2:A5:C1:99:85:CE:F6:57:D4:73:D3:A7:10:72:87:1B:43:48:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.124.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:d5:a1:76:76:be:6e:65:a8:78:fc:7e:88:45:1f:60:5d:96:
         3f:be:8e:24:06:52:75:9b:00:e7:fd:7b:c6:39:a9:d2:62:c0:
         34:66:c9:86:ee:7b:7f:5e:73:66:85:81:c7:ed:22:cf:35:ab:
         fa:98:40:de:9f:65:c6:89:f7:fd:06:fa:fe:e8:d8:45:22:0f:
         44:0d:f2:a3:44:c1:e9:d8:41:70:ea:4a:ce:e6:24:20:94:3e:
         f8:24:d6:c2:4c:ca:43:0f:df:95:e5:ea:c9:08:c1:74:a2:38:
         4b:be:62:43:64:40:30:a1:09:5b:10:2d:54:cd:a9:04:20:f7:
         70:ec:76:8c:f6:b1:62:1f:dd:f3:54:63:dc:da:83:0c:32:cd:
         62:59:d2:62:03:19:ad:ea:ad:cc:6a:b6:d1:6e:cc:8f:0c:25:
         cb:04:d2:4d:bc:6f:96:a7:1e:a5:01:e2:d2:10:a1:dd:53:d5:
         d6:87:50:3f:9f:9b:5c:ec:06:23:61:08:51:b7:d6:48:0c:84:
         bb:af:db:f9:35:e8:55:77:d1:06:eb:b4:5e:36:9e:cc:6e:cf:
         58:25:74:a1:fe:24:21:f3:89:df:c4:77:e7:f1:be:5a:24:9c:
         98:48:b6:74:2f:2d:a3:60:3a:a3:ce:9d:da:ab:c0:4c:99:4e:
         3c:a7:b3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:21:34 2025 by rpki-client