Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/8bc43020-2195-365c-b314-6ccd7e35330b.roa
File:                     8bc43020-2195-365c-b314-6ccd7e35330b.roa (raw, json)
Hash identifier:          N2zoSTFLZ5ltB8gyAmveaXYt615/5KUrb2G0IcDsEjY=
Subject key identifier:   DB:73:16:63:F0:83:A6:FC:9D:C2:1A:70:8F:62:9E:85:D3:C8:23:6E
Certificate issuer:       /CN=1c17c1d1-7595-477e-aacb-f8ef42c4ba8e
Certificate serial:       010D0C9F43285848B626154AC674476E010B6EA0
Authority key identifier: AD:D6:FC:F8:D9:F0:31:D4:52:E0:A9:6D:8F:FB:B1:B3:60:7B:8F:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/8bc43020-2195-365c-b314-6ccd7e35330b.roa
Signing time:             Thu 30 Jan 2025 02:00:40 +0000
ROA not before:           Thu 30 Jan 2025 02:00:40 +0000
ROA not after:            Wed 30 Apr 2025 01:00:40 +0000
asID:                     14618
IP address blocks:        209.188.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b6:26:15:4a:c6:74:47:6e:01:0b:6e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c17c1d1-7595-477e-aacb-f8ef42c4ba8e
        Validity
            Not Before: Jan 30 02:00:40 2025 GMT
            Not After : Apr 30 01:00:40 2025 GMT
        Subject: CN=55bd5729-29bc-47c7-bbcb-57f0fc1947c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:da:50:81:76:1b:f9:4c:4d:f2:5e:01:8c:3d:
                    e7:17:1b:06:19:83:58:9d:6c:ae:f2:e0:8e:34:22:
                    ea:e2:49:a6:4d:4a:be:c2:bb:83:37:40:c1:f3:a7:
                    b9:73:16:8b:b1:5f:63:47:02:f0:28:fa:cc:43:03:
                    86:b8:69:25:2f:2d:dd:1c:25:5a:d5:86:e9:3e:1d:
                    9b:67:45:1a:ef:f5:3b:c6:e2:c3:e8:a8:d4:09:fe:
                    46:6d:37:15:aa:f1:1c:f9:9a:98:c9:58:88:91:ad:
                    1b:c2:32:4b:42:10:6c:b7:b2:a5:28:e6:cc:42:c5:
                    d7:a5:c4:08:be:a4:c6:b4:9a:54:ef:f7:c3:1c:81:
                    b7:7b:4a:05:55:bf:96:23:9b:7e:c8:07:5c:f4:04:
                    30:0a:2e:af:16:9b:46:b0:c2:db:e6:07:4d:38:7a:
                    9a:5c:24:fb:68:e2:af:fd:37:08:34:54:4d:67:f1:
                    f1:0b:08:22:db:c3:fb:64:a0:9b:36:bd:22:28:65:
                    4b:04:ea:f3:04:c9:0f:81:9b:12:23:44:a4:25:75:
                    bf:2a:d1:40:e6:f3:20:71:1c:9d:63:dc:79:ea:91:
                    49:ef:8f:ce:4d:7c:cc:a3:93:e1:47:f7:7c:35:4e:
                    0f:7e:bb:9f:ae:c7:1a:92:a2:72:8f:e6:61:94:43:
                    bd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:73:16:63:F0:83:A6:FC:9D:C2:1A:70:8F:62:9E:85:D3:C8:23:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/8bc43020-2195-365c-b314-6ccd7e35330b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.crl

            X509v3 Authority Key Identifier:
                keyid:AD:D6:FC:F8:D9:F0:31:D4:52:E0:A9:6D:8F:FB:B1:B3:60:7B:8F:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.188.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:3a:f8:da:0d:dd:96:ce:2b:2c:fe:99:aa:60:a1:15:9b:9c:
         1a:d0:59:7f:87:2a:82:e5:a5:31:6d:4d:0c:1f:c1:0c:d7:8e:
         a1:47:ef:52:d3:3a:7d:af:79:e4:43:66:e0:77:85:b1:66:25:
         eb:62:54:40:6c:13:43:86:f1:85:bf:fd:b8:a6:b8:b5:23:af:
         f1:1b:6a:4e:93:89:6b:39:4e:81:ba:65:0d:1a:94:69:f3:54:
         b0:33:86:89:49:d7:cf:76:67:45:44:7c:3f:06:01:90:47:92:
         da:f1:0b:3e:f1:41:d6:a6:5b:fe:9b:ea:6a:5d:02:70:00:d0:
         fa:f0:e9:4b:5c:4d:18:b0:f1:2d:68:ab:1f:41:88:5f:91:7a:
         cd:aa:6a:4d:a0:03:6a:ae:26:ed:f5:11:96:80:ad:48:2f:30:
         f0:68:cb:35:e3:59:e9:f0:ea:04:ea:83:be:04:9b:d9:28:ee:
         b7:99:ef:ea:44:26:57:6d:37:6c:ce:46:1e:5a:6a:bf:dd:f2:
         e7:0e:96:7a:49:ef:4a:e6:f7:df:9c:3e:d0:c3:85:1a:0e:4b:
         d7:ab:54:7f:c5:32:ec:b1:0b:d3:3a:ec:9d:a3:d2:49:5f:9a:
         5f:39:7d:9f:80:c9:43:9e:bf:8a:04:65:bb:cf:2d:e6:ff:88:
         6c:d6:c9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:43:13 2025 by rpki-client