Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/73c5c3e3-5aff-3d70-a32f-db0c0b13038a.roa
File:                     73c5c3e3-5aff-3d70-a32f-db0c0b13038a.roa (raw, json)
Hash identifier:          8tIq+iNNhT+Jb4TkzBKzBty2qRlBcMQ2iBgOWzakmaQ=
Subject key identifier:   A0:98:CE:AD:47:C5:30:AF:64:24:74:F1:A5:59:F5:36:E5:61:9E:61
Certificate issuer:       /CN=fdea7099-d2e5-45e1-8c1e-a8206f549539
Certificate serial:       010D0C9F4328584812D52C8DE08072A1ADBE7050
Authority key identifier: 53:19:5B:43:E3:45:6A:E0:13:B2:4D:A8:F8:55:36:67:FC:01:F5:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/73c5c3e3-5aff-3d70-a32f-db0c0b13038a.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     14618
IP address blocks:        205.201.40.0/24 maxlen: 24
                          205.201.41.0/24 maxlen: 24
                          205.201.42.0/24 maxlen: 24
                          205.201.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:2c:8d:e0:80:72:a1:ad:be:70:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdea7099-d2e5-45e1-8c1e-a8206f549539
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=630f993a-cd34-4da7-bf35-fafde7ef6f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:94:d1:17:04:4d:ac:2d:45:a6:ee:03:ae:95:
                    26:64:fd:1f:b0:39:d5:23:a0:3a:94:0c:e7:de:13:
                    06:b1:b3:32:1a:9d:5e:0d:5d:26:f2:dc:16:01:26:
                    50:c0:14:bb:7d:58:2c:c7:df:08:ce:ee:78:5b:1e:
                    51:61:35:de:05:2f:f5:d4:3f:65:ab:d0:c1:2b:ab:
                    c9:e1:09:fa:f9:cf:64:8c:35:de:87:7f:f7:c5:02:
                    5f:db:82:5f:34:11:be:21:73:74:d1:85:90:01:3d:
                    4f:77:7b:2e:ad:61:98:ea:92:2a:34:ad:49:d5:c0:
                    7d:ae:7d:d5:3c:e2:c7:78:6e:26:08:36:89:c9:8b:
                    7d:1c:9f:8e:96:ff:57:42:d6:63:c5:94:02:57:c9:
                    91:60:69:ab:6b:63:1e:c6:60:ce:99:24:bb:95:98:
                    1f:6b:72:e7:f6:bb:5a:50:78:e9:54:fa:99:a5:cc:
                    42:62:72:d2:9c:66:4b:33:07:45:c1:45:15:2b:d9:
                    49:1e:16:7f:a3:41:5b:5a:7c:15:7d:62:aa:37:ca:
                    e4:c3:7c:ab:4e:67:ce:98:78:78:d1:a7:46:31:83:
                    09:76:53:27:04:87:97:8a:6b:43:54:1e:5e:a8:41:
                    d6:5b:3a:1f:d3:45:72:1f:08:80:d6:01:35:89:5d:
                    d4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:98:CE:AD:47:C5:30:AF:64:24:74:F1:A5:59:F5:36:E5:61:9E:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/73c5c3e3-5aff-3d70-a32f-db0c0b13038a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.crl

            X509v3 Authority Key Identifier:
                keyid:53:19:5B:43:E3:45:6A:E0:13:B2:4D:A8:F8:55:36:67:FC:01:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.201.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:cc:89:b7:64:b8:80:e8:27:af:86:d8:b2:3a:e9:ce:7a:ff:
         64:0f:8f:48:d4:b2:26:14:fd:02:4e:05:21:a8:27:c3:c3:68:
         18:b8:c8:88:29:8b:12:27:6b:01:61:1e:f3:0d:94:56:c2:f2:
         16:9e:85:d4:c3:94:a3:9b:36:e8:7b:25:fb:2a:b1:e4:85:91:
         3b:a9:e0:97:73:73:4b:a2:63:bb:24:80:74:8c:04:87:34:77:
         21:c7:15:ab:b7:05:51:d6:c1:dc:c8:a2:af:0c:df:e0:38:e6:
         97:7c:27:e6:e3:0d:03:75:c5:6a:d4:5a:21:3c:2a:b4:bd:cd:
         7a:18:cc:44:64:cd:ec:a2:57:42:18:40:38:62:45:ed:93:dd:
         a1:3e:a0:27:e1:06:dc:34:3d:af:ab:48:df:f0:9f:ee:a4:21:
         5c:f7:af:9a:74:c2:b7:d3:cf:1b:33:c9:4f:23:83:a9:07:50:
         3f:93:28:8b:16:a1:de:98:4b:e9:03:1c:1f:8b:e7:63:f3:3d:
         f7:04:e7:0e:86:65:fc:95:62:da:46:e2:2a:62:ee:6b:36:8f:
         45:60:e9:b3:c3:d6:4f:d6:20:55:bf:ef:bd:2e:db:7b:91:ac:
         e0:6c:54:c6:74:dd:6b:fe:50:d6:b0:a0:59:6d:66:b9:d3:ef:
         2b:50:f6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:58 2025 by rpki-client