Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/482cda7d-a110-3978-a093-87780ba15fd4.roa
File:                     482cda7d-a110-3978-a093-87780ba15fd4.roa (raw, json)
Hash identifier:          jyw+Kd35IcKg3okufeRpM1CE34d18oZzTPEESbvoQoI=
Subject key identifier:   19:FB:35:45:38:36:4D:DC:8C:7F:A7:76:CD:39:55:E0:5E:8A:E5:7C
Certificate issuer:       /CN=a5013bd8-fc34-4ad4-8dc8-516bdd8bc765
Certificate serial:       010D0C9F43285848A1361C5EA7B212E800F5D900
Authority key identifier: 3C:D1:9E:69:77:A5:96:FF:7A:1C:C6:7B:50:98:68:49:55:CF:4B:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/482cda7d-a110-3978-a093-87780ba15fd4.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     396982
IP address blocks:        204.16.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:1c:5e:a7:b2:12:e8:00:f5:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5013bd8-fc34-4ad4-8dc8-516bdd8bc765
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=adb62138-3c50-47e7-b5b4-af8f04a5ebc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7d:e9:e9:d5:61:e7:29:b1:b1:89:34:fb:6b:
                    e3:a4:ff:05:f9:4c:47:08:f5:99:b9:7b:43:f7:93:
                    ed:fe:03:70:96:72:2a:c6:3f:00:30:ac:7b:29:71:
                    5a:b1:4e:d8:4c:12:56:eb:d3:4a:5b:60:79:81:e3:
                    28:13:1a:50:43:93:f1:29:fc:6f:45:a3:02:f3:9d:
                    37:3b:84:43:44:2a:af:d0:8c:73:06:7a:46:46:d5:
                    38:fc:dc:ec:b8:55:fa:34:97:17:10:3a:55:2e:c1:
                    d1:d5:15:32:80:02:34:02:84:fa:02:ff:88:d3:fe:
                    11:ad:84:dd:07:fa:b5:68:9e:95:dc:e1:f1:f1:ad:
                    94:2a:06:55:ae:b9:b3:ae:db:85:91:af:98:96:d7:
                    92:87:ff:b5:a0:db:5b:b3:8a:e2:90:12:50:90:e0:
                    ba:4a:e3:42:9c:0e:48:64:db:59:09:32:e0:8b:85:
                    71:0a:72:8e:ff:8b:a2:04:85:b3:3f:96:89:49:3f:
                    ff:09:f4:f4:e0:6a:c6:ba:cb:08:4b:2a:b1:c5:03:
                    f9:33:6a:ea:c4:d6:72:70:c7:b9:5f:f6:db:b6:76:
                    d4:38:31:09:46:46:a0:31:8f:1e:f9:b3:1a:a9:84:
                    97:fc:85:36:e7:c0:b9:64:a3:c2:9f:42:98:db:07:
                    75:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:FB:35:45:38:36:4D:DC:8C:7F:A7:76:CD:39:55:E0:5E:8A:E5:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/482cda7d-a110-3978-a093-87780ba15fd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.crl

            X509v3 Authority Key Identifier:
                keyid:3C:D1:9E:69:77:A5:96:FF:7A:1C:C6:7B:50:98:68:49:55:CF:4B:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.16.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:34:59:a8:ce:82:26:96:53:14:b7:d0:b7:c7:33:ad:e3:42:
         10:06:6c:3d:2c:95:70:bc:1d:14:08:d3:96:02:58:6c:12:15:
         f8:d3:50:9d:37:ea:f7:25:d8:c8:22:42:54:f2:af:b3:88:30:
         e7:f9:77:c7:7d:cf:28:f6:93:10:e5:39:04:0e:32:98:75:a7:
         93:ad:0b:ac:94:a2:61:24:fb:5a:ab:53:9b:87:5b:5c:5a:a2:
         0a:6b:f0:91:59:19:32:03:2a:d8:86:32:c8:82:b2:84:11:0f:
         51:4d:d9:d9:08:90:a3:7d:62:74:1a:c0:e4:49:63:45:9d:77:
         b5:0a:82:77:dc:be:c6:51:6f:ad:b3:82:36:cb:d5:a6:78:eb:
         d1:41:55:57:35:32:c1:b7:f5:a2:6a:f8:bd:46:bb:fd:e3:75:
         74:4f:1a:1d:50:c6:2e:56:47:40:f4:48:b3:69:52:a5:0d:8f:
         c3:3e:10:33:cf:dc:7e:46:cd:ca:38:b1:1e:90:d4:31:9c:e7:
         4c:bb:22:32:8a:55:e1:48:7f:b8:f5:99:3e:ff:21:25:54:1a:
         a3:78:d3:20:8e:31:cc:d7:28:f5:9f:e0:60:44:71:8d:56:9d:
         de:39:04:5d:ba:d3:ee:29:a9:69:c5:0a:9c:15:44:9b:bb:ea:
         55:3c:78:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:53 2025 by rpki-client