Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/e70b0f5e-3f70-3796-bd5e-b12d1014e69c.roa
File:                     e70b0f5e-3f70-3796-bd5e-b12d1014e69c.roa (raw, json)
Hash identifier:          yi6V6t0t6TrdOZrtRNcp6KHfjBknUl7Xq7CLcxRVeaE=
Subject key identifier:   4D:1D:F5:3B:D3:81:13:3F:18:79:BE:32:C3:FA:9E:3A:C8:65:D9:AE
Certificate issuer:       /CN=45fe4043-69f6-4f38-9003-897cd909fb3b
Certificate serial:       010D0C9F43285848159FF45B8B9F2C8CB2BBB340
Authority key identifier: D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/e70b0f5e-3f70-3796-bd5e-b12d1014e69c.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     16509
IP address blocks:        199.19.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:f4:5b:8b:9f:2c:8c:b2:bb:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45fe4043-69f6-4f38-9003-897cd909fb3b
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=13e2518b-45a8-4c26-88b2-d907413d8d11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:64:87:c1:1b:d7:bc:52:aa:0a:02:b3:38:14:
                    a6:34:03:51:9e:c8:c3:e7:11:c3:d9:8e:f3:31:20:
                    49:cf:f9:03:12:82:b8:3b:48:87:dc:71:f0:18:6e:
                    16:f3:48:f5:20:6a:0e:4c:64:1c:5e:5b:d4:7b:22:
                    e0:5c:60:ca:43:84:f2:ac:56:af:a1:66:50:cc:db:
                    f2:6d:30:a8:18:6e:73:7b:09:35:46:83:4c:b3:41:
                    ef:25:99:ae:71:60:b3:c8:64:c5:da:71:5d:28:3f:
                    3e:ee:1a:d8:92:e8:b8:26:81:48:92:26:c5:8c:63:
                    43:ba:3d:32:4f:a3:17:32:49:9e:30:b2:19:9a:c5:
                    22:43:07:47:ca:1a:e0:a4:c5:f1:38:6a:df:79:4d:
                    eb:f8:ed:cd:8e:7c:5b:a3:75:8b:33:de:30:b4:ba:
                    62:32:09:78:18:d3:78:92:25:1a:fb:d7:96:25:ec:
                    79:d0:f6:3e:e8:06:a8:89:65:81:f8:a6:c8:cc:29:
                    6a:c4:73:eb:58:3e:e7:5e:29:dc:d5:dd:57:75:60:
                    9e:54:35:0b:73:1d:b7:17:00:d8:27:66:0e:06:9a:
                    88:74:96:d3:c7:1d:36:58:12:32:d6:21:de:63:94:
                    91:1a:1e:ce:30:a4:29:1c:f4:d9:26:75:d4:6b:9a:
                    3e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:1D:F5:3B:D3:81:13:3F:18:79:BE:32:C3:FA:9E:3A:C8:65:D9:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/e70b0f5e-3f70-3796-bd5e-b12d1014e69c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl

            X509v3 Authority Key Identifier:
                keyid:D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.19.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:f9:50:63:e7:e5:a5:48:27:e1:f6:9d:a1:54:f9:dc:79:88:
         56:d3:9f:5d:b6:f6:27:40:64:0b:76:6c:5d:ff:a7:bd:f9:d2:
         ee:3b:53:00:08:f7:aa:65:02:3f:ee:71:6d:90:58:bf:7d:b2:
         55:8c:b0:6a:03:57:e6:59:73:7a:22:bf:2c:b9:7d:59:4f:d7:
         1e:b8:97:6c:e9:9c:ba:12:38:d8:99:15:85:bd:28:31:91:6a:
         fe:df:cb:2f:21:60:85:a3:d2:a5:0b:02:85:ec:e4:f1:1c:7d:
         96:e6:33:ba:05:f3:23:0e:72:48:bb:7e:e4:03:30:16:29:93:
         69:af:ab:ab:ef:b5:32:41:1b:c0:00:f9:79:75:b3:9c:d4:22:
         4e:48:37:b3:57:42:b2:ed:9d:43:ba:4e:04:9d:fb:b9:5a:15:
         76:65:0a:9d:a9:57:88:7a:a1:4e:29:ea:13:78:8d:63:5f:bb:
         26:f8:1a:2c:a1:73:02:a9:f9:06:83:70:d9:1a:43:70:20:5e:
         79:0c:0d:d3:cb:b8:b6:e9:f9:97:43:ca:48:10:95:ff:8b:cc:
         77:9f:d2:50:b4:d0:ab:56:a6:5b:76:66:4c:d5:49:88:29:7e:
         5b:f1:06:a8:79:29:50:5f:f2:6d:9d:75:58:3d:eb:6c:90:61:
         f7:9d:c7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:11 2025 by rpki-client