Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7877c624-8fd3-3fec-82cd-56b3f0151990.roa
File:                     7877c624-8fd3-3fec-82cd-56b3f0151990.roa (raw, json)
Hash identifier:          FcdcCdVb/clD6eBvGCAYs6j/6qg01ABRoQ83wsMuvi8=
Subject key identifier:   EC:1A:EE:56:4B:F6:F0:4A:B7:9C:16:78:FF:08:B4:DC:D0:42:C9:11
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F432858486C2B2753BA038CDF89418120
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7877c624-8fd3-3fec-82cd-56b3f0151990.roa
Signing time:             Fri 03 Jan 2025 14:00:51 +0000
ROA not before:           Fri 03 Jan 2025 14:00:51 +0000
ROA not after:            Thu 03 Apr 2025 13:00:51 +0000
asID:                     54858
IP address blocks:        107.190.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6c:2b:27:53:ba:03:8c:df:89:41:81:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jan  3 14:00:51 2025 GMT
            Not After : Apr  3 13:00:51 2025 GMT
        Subject: CN=19ce12dd-d767-4650-91da-a1f5d7966978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b3:ae:45:d9:3a:ff:0a:72:56:f2:a5:8c:71:
                    1a:9e:87:48:31:2c:2b:78:b2:70:d7:a4:8d:6f:9e:
                    73:06:c3:f2:b4:98:b8:9d:cd:7d:75:9d:08:49:74:
                    a4:3b:09:df:0d:b8:0f:8d:55:dc:9b:9d:5b:d7:38:
                    4a:23:ba:74:6b:e2:db:69:aa:f6:e6:06:90:1d:04:
                    65:01:93:01:e7:02:19:a4:6e:0f:28:d4:a4:68:31:
                    70:19:fc:3a:44:24:ba:e5:2e:97:19:c7:9e:ac:0f:
                    cf:cd:2f:93:a8:fd:e8:a3:a6:5c:86:8d:0d:d3:d0:
                    b5:c4:9f:82:ec:df:8f:da:57:3b:54:2f:9c:0a:be:
                    d9:13:22:45:39:d8:49:98:c0:a7:fb:84:28:f7:8b:
                    b9:af:b4:aa:9c:b7:f1:75:f3:7f:28:5b:d3:6d:17:
                    27:42:49:03:3d:92:c9:29:fb:88:cd:fd:7b:5d:56:
                    08:ce:7b:77:5d:fe:d6:89:21:4f:03:e5:2a:82:19:
                    2f:ef:b9:6b:f8:cd:04:89:3e:14:4b:60:11:5f:5c:
                    32:81:bb:be:ca:66:fa:3b:cb:5f:bb:7f:90:32:25:
                    3a:86:f6:8b:24:77:b2:86:d2:6a:f5:87:0d:c8:d0:
                    29:06:0c:dd:15:49:5b:18:a2:bd:ca:6e:09:c5:6b:
                    64:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:1A:EE:56:4B:F6:F0:4A:B7:9C:16:78:FF:08:B4:DC:D0:42:C9:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7877c624-8fd3-3fec-82cd-56b3f0151990.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.190.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:bc:5b:6c:85:06:76:68:b5:33:bb:e4:26:33:24:5f:a7:02:
         39:b9:9d:21:17:da:fb:2f:1a:fd:07:ae:1c:a1:78:2a:b8:1d:
         cf:3d:a9:07:15:39:dc:4e:1e:80:18:36:f5:6f:4d:52:fb:60:
         5c:62:35:6f:c7:7c:dd:e2:75:96:8f:56:73:46:2f:b5:48:98:
         40:8e:fb:99:12:c8:ba:33:d7:10:28:55:65:06:72:bb:b7:a7:
         c3:96:b8:fd:58:c0:2e:a5:81:67:af:07:cd:c9:ed:b0:f8:c8:
         c6:9f:49:14:2a:ac:20:a1:b3:4c:42:08:9e:91:1a:cd:e9:bb:
         c4:ca:d4:cf:9c:40:bc:1a:b0:bd:27:ae:0a:68:73:02:a6:17:
         2e:71:c0:9a:31:a5:a8:51:12:22:3f:7a:7c:d0:3f:fb:3c:71:
         0a:8a:82:d3:07:2f:1f:37:d8:f5:58:56:13:bf:50:0d:f2:a9:
         19:7f:59:f6:a0:d1:d1:f2:8d:e3:6f:c8:2d:89:64:e9:9d:bc:
         40:f7:94:a6:42:4e:4c:03:9a:52:d5:c0:b1:98:8c:f8:ba:55:
         bf:ec:f2:4a:8d:c1:ee:ac:1b:40:1b:e9:51:d0:4a:52:44:a9:
         91:7f:46:38:bf:8e:e5:1d:ab:43:a8:c4:26:df:0f:a1:70:3f:
         87:e3:2c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:04 2025 by rpki-client