Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/845474c5-98b4-30e8-b075-80fb762db4b6.roa
File:                     845474c5-98b4-30e8-b075-80fb762db4b6.roa (raw, json)
Hash identifier:          UtuXhQLBPYvHby5PR5Q7EvFnZ4mw10hXcCNin/xIRPs=
Subject key identifier:   99:61:A9:22:79:5F:68:7C:10:08:8F:F3:F8:84:CB:31:54:35:2E:5D
Certificate issuer:       /CN=4884cca8-e13a-4d48-82af-7839862b6341
Certificate serial:       010D0C9F4328584882809615C7BBB95B7227F400
Authority key identifier: 5A:F4:C0:16:AB:A1:D4:53:82:E9:C7:B5:FE:F2:49:67:34:FA:F4:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/845474c5-98b4-30e8-b075-80fb762db4b6.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        192.68.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/4884cca8-e13a-4d48-82af-7839862b6341.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/4884cca8-e13a-4d48-82af-7839862b6341.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:96:15:c7:bb:b9:5b:72:27:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4884cca8-e13a-4d48-82af-7839862b6341
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=71f8f2a7-d1c8-4c49-9e41-939734a3a7f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e0:b5:90:45:3b:82:5d:0d:e6:95:4f:2f:4f:
                    cc:dc:09:9f:a7:f0:39:a0:3e:8c:5e:02:28:6d:5d:
                    70:77:20:42:74:c8:ab:b8:d1:50:cb:cc:05:0c:15:
                    e7:57:8c:6b:7e:e2:ae:95:cf:eb:42:45:5b:eb:b4:
                    49:66:7a:ab:26:93:d7:b5:83:19:89:91:ab:7d:24:
                    2e:45:43:a3:9f:10:2d:06:ea:77:82:97:b5:f5:74:
                    f5:ef:2a:9a:de:a8:7f:5d:c8:dd:24:6c:3f:87:fb:
                    a7:26:f5:9a:9e:9c:49:5a:8e:77:05:be:1c:b7:72:
                    b8:f3:6a:12:16:7c:a5:b2:26:21:8a:c9:8f:ba:5c:
                    51:de:c0:e7:9a:4b:7d:cd:76:30:3d:d3:d5:e1:b7:
                    49:61:0c:7f:18:f2:17:35:78:3b:c0:15:34:9e:91:
                    1d:97:60:a7:93:00:49:cc:3a:a3:7f:40:e2:60:24:
                    98:cb:f0:a8:9a:80:85:1d:83:e2:f8:81:51:c5:45:
                    15:89:92:7a:73:f5:1d:1c:54:13:23:76:0d:c6:c9:
                    d8:eb:8c:b0:46:cf:7f:ea:04:0c:88:6c:22:ae:e4:
                    29:d1:46:20:e3:46:ef:2f:f7:72:66:c5:b6:30:f2:
                    a7:d6:9d:23:d0:6d:c1:51:2d:42:a3:71:4a:77:79:
                    8d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:61:A9:22:79:5F:68:7C:10:08:8F:F3:F8:84:CB:31:54:35:2E:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/845474c5-98b4-30e8-b075-80fb762db4b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/4884cca8-e13a-4d48-82af-7839862b6341.crl

            X509v3 Authority Key Identifier:
                keyid:5A:F4:C0:16:AB:A1:D4:53:82:E9:C7:B5:FE:F2:49:67:34:FA:F4:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:fa:3a:c2:35:05:e8:e0:ff:f6:55:12:e7:12:b8:15:d3:0e:
         4a:58:7d:4c:cd:9c:d5:b7:fb:f7:94:1f:02:87:21:14:2e:d5:
         d4:8d:92:40:31:3e:3c:e4:20:05:22:5a:15:bb:02:1a:23:34:
         05:4e:08:ff:4f:18:01:c9:e4:1c:fd:a3:49:f3:ac:53:35:ff:
         6b:f4:a9:89:75:77:55:19:a4:69:f5:38:13:49:ce:8e:83:09:
         ed:a6:87:3e:3b:45:e8:1c:d9:c8:58:1d:6d:a3:cd:10:de:0b:
         8d:3f:62:10:e6:51:76:a7:13:a2:08:c8:eb:2c:de:18:35:71:
         2b:c6:df:84:d8:4f:38:74:4c:37:db:bc:c3:28:9f:e7:2d:38:
         db:8d:48:54:14:bf:69:08:45:5d:95:8c:fd:5c:17:71:55:28:
         55:4c:ec:29:49:ba:ff:85:39:c7:9c:da:f4:28:df:0b:28:bb:
         ec:86:a0:e3:df:26:6e:3d:d4:10:25:00:25:c2:84:ee:86:86:
         ea:8e:b5:80:e5:52:e3:1f:de:27:14:c8:56:0c:f9:8a:25:81:
         f4:dd:a0:ca:3e:d2:cf:4a:ad:e8:9b:8a:82:b1:b9:77:02:c0:
         2c:97:74:e3:36:9d:e4:e7:75:07:3c:1d:88:dd:2d:74:a1:c0:
         64:77:65:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:29 2025 by rpki-client