Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/eb98e01c-db51-3ea1-8bdc-fd40c8e5146b.roa
File:                     eb98e01c-db51-3ea1-8bdc-fd40c8e5146b.roa (raw, json)
Hash identifier:          EcZQ9YPS7qCHZbI/2eLhITq4rAqX2I4KVRj8C6hSwuc=
Subject key identifier:   2F:DC:E2:56:26:D0:12:71:B6:73:14:63:EC:57:1C:E4:01:78:0F:C3
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F43285848A400B5EE7DBEB5A9A7AA4480
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/eb98e01c-db51-3ea1-8bdc-fd40c8e5146b.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     54994
IP address blocks:        157.185.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:b5:ee:7d:be:b5:a9:a7:aa:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=e42f4b50-84e7-4e55-b749-a6ffbf7948bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bd:e4:42:b6:c3:de:a5:dd:83:b1:32:91:e0:
                    e5:d7:35:ab:95:e3:bd:bd:1d:2e:bd:6a:7d:87:3d:
                    03:27:c6:4b:3e:bf:60:e7:48:be:1f:5b:f6:5b:41:
                    d1:e8:c3:96:cc:3a:7a:22:37:ff:9e:e2:01:9e:97:
                    d9:b0:6f:f3:27:aa:21:b6:1d:f0:53:81:db:9e:9d:
                    2a:61:59:62:20:da:ba:97:75:ab:c4:fd:32:f4:2c:
                    ed:28:14:fa:5f:07:ce:e6:bf:77:7f:9d:e6:b1:52:
                    8d:25:8a:79:9e:22:ff:3c:ec:05:fe:4b:e9:48:98:
                    ef:55:00:df:3a:e3:b5:23:6a:1a:a9:12:43:17:82:
                    b2:cf:cf:a9:78:64:a8:27:c5:56:6f:a8:84:94:f1:
                    12:77:20:54:e0:0d:be:17:ae:c1:16:8b:34:c6:df:
                    82:40:4a:3b:69:e7:33:f8:ba:04:d4:9f:1c:a3:79:
                    ea:03:a3:bc:d7:1c:bd:4d:06:05:db:b8:6c:3a:19:
                    81:fd:f0:5d:43:ec:1f:b7:83:eb:17:34:61:5f:4f:
                    a1:de:82:15:73:42:be:6b:6e:36:69:fd:5a:af:96:
                    94:29:b3:3a:c5:5a:e1:a6:dd:67:10:42:7e:4e:8d:
                    4f:e1:0a:8b:61:04:dc:c3:83:97:c4:82:0b:24:9b:
                    f1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DC:E2:56:26:D0:12:71:B6:73:14:63:EC:57:1C:E4:01:78:0F:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/eb98e01c-db51-3ea1-8bdc-fd40c8e5146b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.185.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:ae:35:5b:4b:b2:95:d6:05:63:07:39:2b:81:48:d7:5e:92:
         a0:3c:80:39:26:cf:0b:09:44:64:4f:a0:c7:32:f9:b1:c0:f9:
         c8:79:90:b4:74:6e:e6:75:dd:b9:ce:38:cb:bf:81:3f:f6:b4:
         6f:37:13:78:a0:32:24:b1:47:e6:1a:30:75:b6:75:3d:11:76:
         ff:50:1c:a2:26:b6:47:c2:58:cb:41:fd:c8:27:f2:6b:ba:ed:
         29:0a:7f:f1:b2:d1:c8:d6:bf:88:f1:8a:fc:b3:d7:2d:ff:73:
         ed:fd:b8:52:4d:b1:57:83:2d:e8:88:33:c6:3c:c0:f2:15:37:
         26:e8:85:c9:62:3a:94:d5:42:6d:86:7b:d8:e2:3c:d4:77:d0:
         57:7b:d6:2c:cf:53:a7:9b:38:0f:33:d4:8e:e9:01:0d:07:59:
         6a:9f:3d:cc:4d:ec:40:ad:ce:75:0d:4d:d5:45:81:5c:9b:03:
         74:31:54:77:52:7d:a8:9a:54:20:3a:77:98:84:0a:80:2c:2d:
         2f:7a:12:ca:5f:05:c6:83:9b:b5:04:da:13:c3:1c:d6:c6:29:
         52:ff:de:50:40:db:61:c6:84:08:ab:54:c8:b4:e1:b2:9c:b9:
         4c:7e:d3:e3:92:22:e3:5f:ae:50:1a:32:54:99:de:c1:92:10:
         65:4d:e5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:08:17 2025 by rpki-client