Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/f0ee9cc8-ea03-32d8-8af2-6bd0b4ecec99.roa
File:                     f0ee9cc8-ea03-32d8-8af2-6bd0b4ecec99.roa (raw, json)
Hash identifier:          2CCiODasAgnYdoeyT6dQUy8NAnCmaNPzonb1CWn9Q5M=
Subject key identifier:   B4:C1:A5:E5:5A:85:47:D0:8D:EC:58:3F:CC:E0:16:0B:42:63:D3:FB
Certificate issuer:       /CN=208dcf74-3dce-4384-beaf-70319895fc4b
Certificate serial:       010D0C9F43285848159FF686B3DCA46219CDF080
Authority key identifier: B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/f0ee9cc8-ea03-32d8-8af2-6bd0b4ecec99.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     14618
IP address blocks:        134.65.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:f6:86:b3:dc:a4:62:19:cd:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208dcf74-3dce-4384-beaf-70319895fc4b
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=ddd3d98f-cfd0-49a6-9369-247ec52e669d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a1:26:93:b6:21:44:d0:c7:39:19:e1:f6:11:
                    cb:d7:c5:d6:09:79:52:84:cc:b1:53:1d:c9:d6:16:
                    8d:ea:6c:20:33:96:78:fd:b6:e5:89:b9:c4:d0:99:
                    c9:17:c9:02:af:c6:3c:2b:d9:23:56:e3:e6:0b:dd:
                    4c:dc:77:0c:86:12:41:83:bb:d0:fa:c5:01:14:fd:
                    78:79:58:2b:1e:3f:35:27:b9:48:a4:de:78:14:c0:
                    05:d8:d9:a6:60:ef:4f:9d:74:62:fa:90:0a:95:b3:
                    16:3e:2e:4a:c6:20:2f:cd:86:77:19:a3:01:a3:eb:
                    5f:74:52:4a:ee:fd:4a:04:fb:05:11:23:7b:a6:0e:
                    d8:42:d5:0c:9f:dc:54:cf:16:53:f0:d8:56:fc:a5:
                    dd:9a:c5:08:e0:ae:72:33:c6:e7:ae:35:6f:10:40:
                    a1:23:6a:6c:1a:e9:6c:e8:ad:8d:7a:20:16:d1:86:
                    dd:dd:92:0d:ab:15:76:19:0e:96:73:71:56:20:73:
                    b5:8f:e5:95:ee:8e:19:9c:49:51:72:7f:0e:1c:b0:
                    e0:06:63:a5:47:33:55:d2:d1:ac:dc:fa:39:7e:29:
                    89:3d:f6:fb:82:67:40:79:a3:65:01:eb:35:d3:d9:
                    37:78:e8:4a:2c:59:27:71:6a:82:ec:79:6d:24:e4:
                    f2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C1:A5:E5:5A:85:47:D0:8D:EC:58:3F:CC:E0:16:0B:42:63:D3:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/f0ee9cc8-ea03-32d8-8af2-6bd0b4ecec99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl

            X509v3 Authority Key Identifier:
                keyid:B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.65.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:6f:fe:fa:4c:bb:6a:08:1a:af:d2:30:fa:1e:81:be:19:09:
         8b:ee:3d:45:f9:a3:30:76:e9:4a:67:7e:54:e8:1a:ea:af:1d:
         c4:2f:03:ff:4f:2e:2d:31:7d:c5:d8:a9:59:75:16:84:ba:76:
         e3:63:9e:e7:8d:d2:5a:68:73:b8:13:c6:84:19:fc:3c:d2:66:
         2d:b0:a7:f4:4c:18:f3:fc:0b:b5:cb:54:a1:54:3a:ec:d4:cf:
         8a:e0:ff:9f:cc:a5:3a:bc:6d:f0:66:ee:9f:92:37:23:f7:29:
         5d:11:b6:79:f8:01:f8:24:b8:ce:93:73:f9:e1:3a:b7:27:5b:
         83:bb:73:f1:7d:ab:59:ae:5f:37:25:08:33:24:6e:e5:24:45:
         af:4f:25:8c:d2:15:5d:c3:1a:77:3d:51:bd:7e:74:17:95:7c:
         a7:a2:68:47:21:1b:5f:27:bc:09:b7:e8:e7:93:bb:2e:5a:c9:
         6d:2d:9c:e8:5b:af:bc:53:72:54:07:59:0f:ba:83:12:43:69:
         05:bc:22:62:28:44:48:61:ac:11:17:de:b8:de:c8:6c:e2:32:
         2b:28:39:07:da:f9:fb:65:01:98:92:08:2c:1a:4c:c7:6e:94:
         bb:18:f1:ad:6a:47:1a:90:02:51:f9:93:30:80:df:ab:da:6d:
         1f:ee:ec:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:23 2025 by rpki-client