Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/e9fada9c-c9e9-3abe-88cb-5043ea808fcc.roa
File:                     e9fada9c-c9e9-3abe-88cb-5043ea808fcc.roa (raw, json)
Hash identifier:          VTIfIbNeNyF+JwUxtNkcvvewr2VkMsxOk5HDVorGiuQ=
Subject key identifier:   16:1F:E3:FA:22:56:BF:6D:6B:F2:0C:6D:26:BA:DE:5B:C6:19:99:72
Certificate issuer:       /CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460
Certificate serial:       010D0C9F432858487E50692C44DDD4BCDAE83A80
Authority key identifier: 10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/e9fada9c-c9e9-3abe-88cb-5043ea808fcc.roa
Signing time:             Fri 10 Jan 2025 02:00:40 +0000
ROA not before:           Fri 10 Jan 2025 02:00:40 +0000
ROA not after:            Thu 10 Apr 2025 01:00:40 +0000
asID:                     7018
IP address blocks:        205.196.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7e:50:69:2c:44:dd:d4:bc:da:e8:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460
        Validity
            Not Before: Jan 10 02:00:40 2025 GMT
            Not After : Apr 10 01:00:40 2025 GMT
        Subject: CN=fdd38a4f-a5f8-4d06-ac4f-8f01fcdc4375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:25:c7:95:91:bc:aa:f9:1d:14:6f:2c:fc:f4:
                    c1:c9:b1:3d:6d:60:32:ef:91:94:26:3e:f0:b3:a0:
                    87:04:b9:c7:09:a5:06:88:a3:26:2b:43:58:35:a4:
                    71:19:bb:44:9b:90:2c:e3:24:ad:bd:bf:48:44:92:
                    a0:82:27:dc:20:d1:64:b9:72:a1:e1:a7:11:71:e4:
                    bd:54:b2:7c:ce:4d:38:a8:64:52:ae:e7:c6:88:7b:
                    bd:4e:4e:c2:9e:4c:94:db:e1:86:27:80:9c:85:3e:
                    64:72:e0:f5:7e:f9:74:6e:a6:a4:64:d2:c7:05:93:
                    d1:47:05:c3:a7:4a:e9:b3:71:1f:59:e6:3d:3a:8b:
                    e0:17:b1:cc:8d:fc:0b:73:36:ea:81:42:de:c1:8d:
                    55:61:a4:c4:b0:2b:de:3c:a0:4a:82:a1:b1:19:ee:
                    c8:96:db:57:c2:19:e6:73:b7:d8:50:89:ba:f4:03:
                    cb:ad:1c:f7:d8:6d:48:dd:34:ae:63:8a:42:15:d7:
                    50:a7:bf:fb:39:e1:d5:06:d3:f0:1c:41:9a:1d:65:
                    44:8c:09:b9:d8:a0:58:84:2a:c6:e4:2e:db:60:80:
                    3d:c8:07:70:9c:92:6e:16:8e:6b:e4:6e:bf:92:b0:
                    50:c9:3a:44:4e:85:14:35:8e:72:f8:78:8c:8e:d3:
                    5f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:1F:E3:FA:22:56:BF:6D:6B:F2:0C:6D:26:BA:DE:5B:C6:19:99:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/e9fada9c-c9e9-3abe-88cb-5043ea808fcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl

            X509v3 Authority Key Identifier:
                keyid:10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.196.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:7c:e1:f3:f6:a8:db:f8:bc:9d:a7:ce:45:1c:ed:e9:99:9f:
         97:48:cd:d0:3d:35:df:65:f8:1d:89:a9:9b:14:8d:9e:a5:0c:
         19:eb:38:00:52:ed:9a:42:45:ae:59:ef:c1:62:f4:de:ba:a3:
         6e:e8:b4:b8:ca:b6:4c:1e:1c:f8:85:4a:b2:6a:0d:fd:fd:95:
         6c:c6:ca:08:0a:0c:0a:10:24:15:77:59:47:58:d9:f2:39:3c:
         8a:88:a9:12:21:66:9d:0a:47:59:37:ff:bd:d8:47:c9:61:9e:
         2e:11:02:b3:ed:9a:ff:dc:c8:e8:1f:0d:a3:00:47:a4:d6:c4:
         a1:a3:0b:e2:98:a2:1e:fc:13:e4:43:d6:81:41:e3:f7:02:1b:
         e1:6d:6f:01:67:05:fc:81:62:60:24:dc:18:5e:6c:c1:74:b1:
         53:99:db:79:93:83:0a:09:09:95:c2:32:3f:74:b7:78:2a:7d:
         c7:90:63:26:cb:cf:c0:0f:b6:5e:56:64:aa:d4:d5:7c:6f:d6:
         7f:dd:a5:13:65:b3:44:fb:2a:df:da:b4:46:7a:9f:ca:b6:87:
         ef:c6:8a:55:de:24:1e:c3:28:98:84:07:ba:51:9e:7a:26:21:
         58:63:91:1e:fa:ad:be:0a:2a:83:4f:76:b1:7b:e9:0d:c8:eb:
         4b:70:04:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:42 2025 by rpki-client