Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f3360526-fee0-3fc1-ab88-b46eab60006a.roa
File:                     f3360526-fee0-3fc1-ab88-b46eab60006a.roa (raw, json)
Hash identifier:          kKjgtQyuQjeNSy0Z6YOI7Bi5nujHI29CF5xyuAVqZCo=
Subject key identifier:   14:C1:6E:64:F5:71:55:74:74:9D:ED:C7:EB:BC:91:EF:46:FF:92:8D
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F43285848265FF4D5514C89146D0B6100
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f3360526-fee0-3fc1-ab88-b46eab60006a.roa
Signing time:             Mon 09 Dec 2024 14:00:51 +0000
ROA not before:           Mon 09 Dec 2024 14:00:51 +0000
ROA not after:            Sun 09 Mar 2025 13:00:51 +0000
asID:                     393291
IP address blocks:        208.52.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:5f:f4:d5:51:4c:89:14:6d:0b:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Dec  9 14:00:51 2024 GMT
            Not After : Mar  9 13:00:51 2025 GMT
        Subject: CN=8ae16c06-65c6-46dd-9b8b-a77c9a421217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:dc:43:0c:77:cf:24:49:89:3a:68:8e:cb:ef:
                    11:ee:02:79:9b:13:a0:2f:5e:a5:d4:ab:3c:32:f6:
                    30:e2:52:a4:49:67:fb:2f:95:da:35:ba:d0:bc:93:
                    e6:41:5e:9f:00:aa:10:d1:61:5b:06:61:02:5f:63:
                    38:25:3d:12:1f:79:79:35:d8:82:23:d0:9f:69:a1:
                    3e:60:ff:06:67:45:e3:88:c4:a7:49:b2:39:54:20:
                    d9:05:52:94:a2:a3:cf:ed:a7:0f:1a:de:87:7d:f6:
                    5c:55:b2:14:bd:2d:46:24:33:c6:2c:f9:f8:f3:06:
                    6c:fe:fb:5d:61:e6:46:9d:c6:0f:85:54:c2:57:35:
                    12:1a:28:ff:52:c5:c2:00:cb:c2:ff:c1:97:2e:47:
                    49:31:19:f8:80:c2:d8:22:b1:45:ff:85:54:2b:2a:
                    df:7e:11:6d:19:09:f7:73:fe:40:a9:65:19:66:f1:
                    eb:70:1f:72:9b:19:7d:3d:81:af:31:f7:fd:e6:05:
                    83:d8:7d:a3:f1:cc:1d:7a:fa:db:4c:ad:3a:55:eb:
                    32:bc:f1:d2:14:79:41:3d:53:ec:fc:2c:3f:5b:2e:
                    72:94:6f:53:82:b1:69:60:c2:ed:e3:41:39:c7:80:
                    9b:a3:87:14:99:e5:9e:b1:eb:1f:c7:35:59:e5:52:
                    5e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C1:6E:64:F5:71:55:74:74:9D:ED:C7:EB:BC:91:EF:46:FF:92:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f3360526-fee0-3fc1-ab88-b46eab60006a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.52.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:db:ae:7b:40:09:24:c9:a7:8f:8f:8a:52:38:94:28:37:f7:
         a7:15:7d:dd:aa:63:28:d1:fa:74:a2:77:14:fd:7b:2e:46:3f:
         63:f7:27:c2:aa:97:57:cb:62:8f:65:59:05:ab:93:4c:54:18:
         cc:0a:ee:33:07:07:da:c1:4e:ce:83:e4:b8:e7:13:4f:30:42:
         7a:a1:05:72:cd:af:ae:ec:ec:7c:cc:62:4d:82:6f:65:38:32:
         6e:36:c5:85:ca:f7:7c:e3:02:5f:45:bd:6f:c7:34:4e:34:13:
         85:4b:41:b5:42:0f:ea:bf:26:9c:f1:38:25:dc:48:5b:50:52:
         b4:03:ce:b4:7b:54:4b:84:d0:8a:73:6a:18:1b:d3:28:75:dd:
         ad:72:e0:3f:cb:ea:ad:11:c8:f3:c5:32:69:be:08:7a:7b:4b:
         d5:68:9f:3f:54:6c:3b:77:f5:bd:bc:22:66:15:d4:ec:d7:d9:
         a0:02:53:f1:f4:5e:d9:d6:f4:bb:e7:44:4a:6c:55:5a:8b:5d:
         73:e9:fb:74:c7:cc:60:cb:b6:37:f3:2a:40:2a:8a:31:9a:0e:
         c2:c6:7b:ef:38:10:7b:30:e8:ed:16:7d:6a:e4:23:ac:3f:b8:
         8e:f1:c7:d9:47:3c:aa:80:b0:89:61:f8:ed:be:d0:eb:9b:b6:
         ac:2c:58:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:30 2025 by rpki-client