Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/46f5bb0e-e664-36db-988d-b555288389c3.roa
File:                     46f5bb0e-e664-36db-988d-b555288389c3.roa (raw, json)
Hash identifier:          ibZsvfcSsIrZsVe3F9yqpXqxvmYWanN53gW/W48Htvs=
Subject key identifier:   F5:B2:FC:67:FE:EC:91:68:38:E5:EB:47:08:BB:8D:37:B0:EA:25:BB
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285848907604DA506297D75768CEA0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/46f5bb0e-e664-36db-988d-b555288389c3.roa
Signing time:             Thu 16 Jan 2025 14:00:50 +0000
ROA not before:           Thu 16 Jan 2025 14:00:50 +0000
ROA not after:            Wed 16 Apr 2025 13:00:50 +0000
asID:                     397228
IP address blocks:        198.133.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:76:04:da:50:62:97:d7:57:68:ce:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jan 16 14:00:50 2025 GMT
            Not After : Apr 16 13:00:50 2025 GMT
        Subject: CN=38fde72c-8059-470d-bf34-11a89d2144da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8b:d8:f5:34:00:ea:b6:ff:ec:52:3f:48:d7:
                    99:35:41:bf:80:eb:c8:33:e4:83:4e:80:95:fe:3e:
                    f9:9d:0f:cb:a2:8a:47:19:31:f6:a0:f5:5e:9f:68:
                    a5:33:65:48:3b:22:86:21:0c:95:24:50:fe:fd:12:
                    8c:a5:25:5d:e8:a3:84:2a:2b:62:0d:0a:02:46:00:
                    bb:3c:cc:e7:50:f5:b7:91:60:90:ef:12:58:f1:da:
                    11:92:52:9d:36:87:f6:1e:a5:7a:d3:63:d9:37:d3:
                    e9:b2:9f:95:59:da:e0:36:78:0e:ef:92:1c:33:24:
                    bd:bc:36:4a:df:c9:ae:c6:a5:17:dc:1f:23:4e:d8:
                    27:b8:d2:59:d8:18:9f:1d:c8:4d:ed:6b:35:00:68:
                    7b:7b:1f:64:b8:b0:87:b6:58:70:5a:17:08:3a:4a:
                    95:af:6a:d8:75:9d:9d:7a:1f:49:10:a4:8c:89:3d:
                    cd:21:ed:00:a8:d5:37:63:e3:c3:67:e7:0f:2f:4c:
                    11:0b:c0:6c:ac:f5:8b:97:23:8b:d6:d9:6e:80:01:
                    af:55:33:fd:00:e0:26:a5:63:5c:92:ed:11:49:e3:
                    7c:37:01:8b:7b:1a:21:73:ff:68:4c:b5:c3:02:c1:
                    8c:4e:0c:61:73:06:69:31:93:60:f8:8f:c9:01:ea:
                    12:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B2:FC:67:FE:EC:91:68:38:E5:EB:47:08:BB:8D:37:B0:EA:25:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/46f5bb0e-e664-36db-988d-b555288389c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.133.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ed:60:91:55:4c:aa:1f:e9:83:f3:07:16:2a:7d:3d:23:50:
         40:52:dd:94:72:ca:2b:aa:f9:d4:d9:6a:73:79:1b:e0:ca:5c:
         f2:27:cc:55:ce:a8:c5:67:26:e5:be:ac:fc:73:78:7c:98:b6:
         cc:7a:6b:54:fc:04:fd:8d:79:5b:ee:f6:8e:4c:6b:2d:69:e0:
         0e:2c:da:ca:9b:f9:22:70:c3:1e:5c:c3:64:3a:19:39:c1:63:
         b8:da:1f:88:23:f1:ed:b5:fd:f9:9b:33:75:b4:41:d5:1b:b1:
         42:cd:a5:2f:0d:e8:0d:cb:fa:be:59:a3:e5:68:89:ca:c6:da:
         ab:30:d2:29:1f:9a:de:8c:60:83:20:38:81:cf:71:68:81:0f:
         5b:2b:e0:02:25:e4:43:a8:83:9d:9c:a2:01:37:f1:2c:c9:2c:
         e0:bc:bb:76:ca:e9:74:37:85:ed:48:66:c8:d1:4a:14:f8:db:
         04:0c:b8:c3:9b:5c:06:a1:01:69:09:45:3c:52:9c:d5:f8:c1:
         a6:d5:b6:fb:9b:05:af:6e:06:92:01:b5:3f:08:5d:54:be:b3:
         cc:ae:a7:7f:48:63:13:c4:0e:ec:ce:dc:3b:e3:c2:0d:3f:82:
         90:58:c6:3e:0c:0c:b0:a3:59:87:ac:41:16:b6:84:d9:b7:75:
         67:78:fe:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:54:46 2025 by rpki-client