Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9230df53-fffb-315e-bb55-fc435b57bd4e.roa
File:                     9230df53-fffb-315e-bb55-fc435b57bd4e.roa (raw, json)
Hash identifier:          bO9OeNGj9g+Q7hyCHOew6oidub615py80Vcv87m3hho=
Subject key identifier:   4C:47:D6:08:0F:3D:FD:1D:F3:27:B8:E2:0E:61:94:6C:8A:A0:ED:06
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F43285848A318AD3CA150D9A062B46A80
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9230df53-fffb-315e-bb55-fc435b57bd4e.roa
Signing time:             Thu 23 Jan 2025 06:13:22 +0000
ROA not before:           Thu 23 Jan 2025 06:13:22 +0000
ROA not after:            Wed 23 Apr 2025 05:13:22 +0000
asID:                     16591
IP address blocks:        136.33.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:18:ad:3c:a1:50:d9:a0:62:b4:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jan 23 06:13:22 2025 GMT
            Not After : Apr 23 05:13:22 2025 GMT
        Subject: CN=ef979702-4aa2-49fe-a2fa-0f1f310ce3b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:27:8b:44:64:b6:1b:dd:47:26:fb:cf:39:56:
                    15:68:35:be:4e:80:35:4a:96:80:3d:d2:0c:37:77:
                    12:50:ba:76:b8:b6:87:af:1d:bb:a7:61:af:45:bd:
                    3c:5c:c9:2a:95:76:fe:1d:2c:a9:c3:72:db:e7:be:
                    62:30:84:b0:9b:30:b8:4e:43:4e:6f:53:a3:1a:fa:
                    f9:be:16:f3:5a:a3:f1:40:2e:6f:e1:fa:7c:7a:ca:
                    24:47:cc:14:ec:b9:a4:c5:04:0a:37:28:7c:6c:61:
                    53:da:b1:2f:73:c0:4e:02:cc:8b:73:a1:ab:1b:89:
                    87:6e:b1:e5:83:e5:6d:d6:3e:69:9d:10:69:10:dd:
                    6f:b3:74:c9:13:54:3e:ba:f7:d7:17:6e:f1:49:7c:
                    ac:35:ff:6d:14:51:d8:77:60:d0:13:d2:ae:f8:62:
                    21:b2:03:5a:e2:57:36:84:27:a8:b4:75:4c:bd:9e:
                    46:af:6a:80:7c:2d:5d:40:55:4f:f1:ee:86:e0:63:
                    b4:65:dd:82:7b:88:05:cf:85:af:55:fc:8f:c8:12:
                    e1:9f:8a:82:09:f1:45:44:6f:0e:08:6c:88:f7:a0:
                    6c:a9:b2:6c:bf:10:ae:bf:c9:85:e1:c5:e3:e9:fc:
                    d3:f3:2b:2d:a7:86:8b:cb:03:9b:1b:28:a0:0c:d9:
                    ac:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:47:D6:08:0F:3D:FD:1D:F3:27:B8:E2:0E:61:94:6C:8A:A0:ED:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9230df53-fffb-315e-bb55-fc435b57bd4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.33.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:5f:10:5f:c2:f2:ab:14:06:45:93:73:f2:47:79:5a:f1:a6:
         11:14:d5:88:c8:a7:2b:d8:34:d9:4c:ab:45:5b:e0:d4:fe:61:
         47:5e:b0:6a:47:5e:54:ad:7b:4b:9d:a7:2c:7f:45:43:9e:fa:
         13:6c:fa:c1:50:55:2c:7b:de:ac:88:d5:75:1f:57:33:33:27:
         5d:48:4c:33:69:30:28:53:ec:1d:bf:2e:4d:f7:10:fe:2b:fa:
         de:bc:b5:08:0e:2c:a9:87:ea:28:0f:6a:89:57:6d:ec:29:8f:
         11:d2:79:3b:37:ec:80:3a:83:2a:29:77:4f:c8:ac:86:b5:ab:
         6f:f1:61:18:b4:0c:97:d0:9d:e0:16:7a:b1:29:19:62:7d:88:
         40:56:b9:ff:e4:25:ed:17:d5:77:f6:7b:57:59:87:32:01:2d:
         5d:44:fc:af:12:87:c5:22:28:5b:a6:cd:db:0e:2f:f6:85:f1:
         27:17:19:c1:34:a0:7f:aa:6b:67:95:66:a9:ee:6c:69:3f:48:
         d3:14:99:70:20:2e:e0:26:43:2c:63:09:51:1b:5a:fe:01:c3:
         bc:51:38:01:e1:96:f2:e0:67:f4:94:a4:60:eb:aa:10:9d:4c:
         47:b9:b4:e4:bd:c8:c0:46:be:d3:6b:95:76:f8:3d:3b:fc:6c:
         02:1b:28:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:22 2025 by rpki-client