Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/57c811d5-6067-3699-87e6-13ee0631239c.roa
File:                     57c811d5-6067-3699-87e6-13ee0631239c.roa (raw, json)
Hash identifier:          KEVQgCOq1FEzJeqq3fGzNBrF2E/tpr1bQBvrM4qg1B0=
Subject key identifier:   76:99:76:05:AD:D1:F6:4E:9D:C9:D6:F0:39:44:CF:5A:3C:B1:45:3D
Certificate issuer:       /CN=ab98592a-7218-439c-b165-34810fd16d71
Certificate serial:       010D0C9F43285848EF616902115E835D93DBB180
Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/57c811d5-6067-3699-87e6-13ee0631239c.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     3300
IP address blocks:        204.231.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:69:02:11:5e:83:5d:93:db:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=3b1a47d2-46b7-4ddd-9654-5c66ea2f644f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:41:68:b8:f1:f3:32:39:96:cb:f9:d4:90:a6:
                    16:41:56:30:6a:09:c2:20:83:39:6d:7e:66:15:95:
                    30:68:02:4b:68:25:df:21:96:74:fd:2e:eb:e9:6b:
                    55:33:ab:2c:2a:01:1e:33:4a:35:e3:48:96:11:5f:
                    fd:65:63:41:a2:82:9c:6d:fd:fe:88:9d:30:b3:ba:
                    7e:63:c1:a2:44:d1:93:56:a8:cd:71:d0:a6:f8:63:
                    24:9e:80:4d:d2:6b:9a:07:a7:30:23:26:ce:26:aa:
                    fe:a3:07:5a:3d:a0:21:b7:22:57:b6:a7:6e:54:2e:
                    1e:40:48:49:22:0e:ac:7f:70:81:34:bf:78:77:c8:
                    d8:17:cc:68:31:c8:89:41:4a:2d:c7:b8:51:1b:9a:
                    8c:2e:b4:30:8d:be:0d:f3:81:e8:1f:05:ab:28:01:
                    26:15:23:58:5a:a8:10:3e:dc:c3:ae:a9:34:cc:df:
                    6c:89:7f:d5:6d:6a:06:cf:07:83:62:83:05:c3:46:
                    7c:a3:54:57:b0:34:2d:da:ca:7a:a7:ed:6e:c8:81:
                    e6:a8:ec:08:be:a3:ea:e3:02:fc:99:c8:bc:0a:b7:
                    a6:68:3a:c3:c4:63:18:0f:a1:ab:11:50:3d:9e:d1:
                    b1:2c:f1:20:c2:78:cf:9e:60:83:13:e0:09:22:0c:
                    ec:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:99:76:05:AD:D1:F6:4E:9D:C9:D6:F0:39:44:CF:5A:3C:B1:45:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/57c811d5-6067-3699-87e6-13ee0631239c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl

            X509v3 Authority Key Identifier:
                keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.231.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:d0:8a:f9:06:78:3f:bc:0e:7a:33:86:a5:26:c9:1e:b4:13:
         37:77:bb:f2:8f:83:7a:d0:ec:90:81:c8:20:b4:4d:9b:9f:f7:
         ca:1b:ed:4e:df:9c:1c:43:50:c5:d8:78:1e:e5:bb:d6:85:86:
         48:bb:7d:3c:9b:2c:03:27:1f:73:b9:cb:f3:f7:78:cf:5c:cd:
         08:0c:e0:35:81:26:80:85:02:af:9b:cf:5c:60:47:5d:fc:9e:
         0f:29:ae:1d:b1:0f:76:b9:f3:b4:a8:d0:39:4e:44:a6:f9:10:
         04:14:23:0a:34:f4:17:b1:5e:c7:44:d5:be:85:6f:21:f8:82:
         79:f3:4d:a6:58:fe:ef:d4:99:5d:d7:b3:34:5d:55:a6:78:8d:
         3b:54:fd:19:51:cc:2e:09:c4:cf:b8:80:ee:f0:05:fb:cc:18:
         ad:42:9b:83:8f:73:5b:81:19:b1:3d:09:10:bc:68:e2:e8:6d:
         1b:2e:83:0d:da:d9:3d:a5:38:3d:79:73:2b:f5:90:1b:d7:32:
         56:45:b4:73:43:3c:f7:04:1d:a8:2d:e3:1a:94:6b:1f:7c:6b:
         d8:0d:2a:61:d9:88:82:13:a1:7f:b9:49:ec:1b:9f:01:d6:1d:
         8e:33:e2:87:38:9d:6e:0b:f6:af:f8:5e:2b:bc:3b:98:02:87:
         86:c0:c6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:03:04 2025 by rpki-client