Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/222fc882-68d7-4892-a04a-f0d1836061c4/36314958-41f4-3cba-8d2d-fbb3aff86638.roa
File:                     36314958-41f4-3cba-8d2d-fbb3aff86638.roa (raw, json)
Hash identifier:          vbvSntR/qW9nmM2pXBNX42MC54qFPUg3+87tvICOAXs=
Subject key identifier:   B6:E2:66:D5:C6:0E:1B:03:A5:B1:ED:12:3D:74:78:1B:5F:63:4D:94
Certificate issuer:       /CN=222fc882-68d7-4892-a04a-f0d1836061c4
Certificate serial:       010D0C9F43285848143A7D3E3F73DCA3C64BAA80
Authority key identifier: 86:5E:DB:71:43:A9:13:B8:39:3F:53:0F:3C:9C:26:E6:79:BC:D2:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/222fc882-68d7-4892-a04a-f0d1836061c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/222fc882-68d7-4892-a04a-f0d1836061c4/36314958-41f4-3cba-8d2d-fbb3aff86638.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     64241
IP address blocks:        209.251.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/222fc882-68d7-4892-a04a-f0d1836061c4/222fc882-68d7-4892-a04a-f0d1836061c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/222fc882-68d7-4892-a04a-f0d1836061c4/222fc882-68d7-4892-a04a-f0d1836061c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/222fc882-68d7-4892-a04a-f0d1836061c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:7d:3e:3f:73:dc:a3:c6:4b:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=222fc882-68d7-4892-a04a-f0d1836061c4
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=13a3ff2a-0bf5-4648-9fcf-1f7aebdf7049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cd:02:76:35:21:30:2c:10:fa:65:4b:f9:de:
                    f5:27:92:d9:b4:0b:68:fe:6c:49:73:28:91:4e:f0:
                    78:2d:d7:69:78:2f:00:08:a7:33:06:5d:25:db:29:
                    4e:71:12:12:d2:36:d5:4a:11:6a:94:f8:d7:08:99:
                    18:bb:ff:88:6e:80:99:6d:04:af:f3:cb:ca:29:b2:
                    5f:28:5e:3f:11:d3:7a:75:b2:3a:00:56:f7:e5:8c:
                    12:b0:52:4f:64:40:98:7b:be:9e:c2:c4:9a:d4:be:
                    a5:36:08:d7:d3:2c:03:27:66:71:fc:94:10:e2:09:
                    ca:3e:0d:7e:02:c4:de:17:e1:cb:c8:ef:66:cd:9e:
                    a2:db:96:e1:cf:c1:e1:ef:7d:0b:74:51:6e:5a:e3:
                    33:4c:0b:88:41:2d:42:78:9c:6f:fa:0d:43:ac:62:
                    b8:dc:f3:21:ea:bc:d0:7a:4d:a7:ea:49:1b:4a:66:
                    f4:4c:56:9c:99:56:49:5c:96:e1:9b:da:4d:75:2e:
                    9d:45:5e:98:52:89:2d:c8:c1:fa:f2:f0:6d:24:a5:
                    ba:d7:7c:f9:4f:41:90:c1:09:0e:f1:b0:2b:38:a8:
                    0d:18:29:d7:42:8d:d8:81:e3:27:94:7d:7e:86:e4:
                    b0:e2:c5:73:83:fe:f2:e5:9b:4f:71:ef:5b:49:56:
                    35:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E2:66:D5:C6:0E:1B:03:A5:B1:ED:12:3D:74:78:1B:5F:63:4D:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/222fc882-68d7-4892-a04a-f0d1836061c4/36314958-41f4-3cba-8d2d-fbb3aff86638.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/222fc882-68d7-4892-a04a-f0d1836061c4/222fc882-68d7-4892-a04a-f0d1836061c4.crl

            X509v3 Authority Key Identifier:
                keyid:86:5E:DB:71:43:A9:13:B8:39:3F:53:0F:3C:9C:26:E6:79:BC:D2:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/222fc882-68d7-4892-a04a-f0d1836061c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.251.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:24:c6:51:a9:25:27:f2:fa:2b:29:29:d7:7f:bb:5d:53:1b:
         23:3b:34:46:f2:84:b0:4f:3c:f3:92:b2:b0:a8:d1:8d:76:83:
         ca:6c:58:8c:75:d0:37:f2:ee:dc:74:9b:95:c3:83:70:41:85:
         0c:1f:f5:05:71:5b:53:88:15:95:79:03:01:ad:82:65:f2:3d:
         79:de:5a:40:47:16:1d:03:c5:a5:cf:f7:a0:6c:63:fe:5f:73:
         da:1e:82:ef:c3:8b:cc:20:96:99:27:a5:f7:37:5a:19:ed:10:
         c2:8b:2d:ac:02:75:8b:78:86:7c:bc:42:2c:2f:1a:3b:fc:76:
         2b:d2:36:d9:7a:14:e8:af:88:df:5e:31:f0:a7:4c:03:6a:c0:
         f4:06:17:e3:ba:7c:7a:a0:e4:f4:e7:66:92:97:7c:56:e9:b1:
         4c:3f:99:3f:a5:e7:89:aa:44:2c:7a:2f:68:e5:c8:e2:98:91:
         56:c9:ae:eb:01:82:0c:a9:04:00:87:5b:96:e0:ec:94:6c:a9:
         f5:bd:5b:ac:94:51:dc:9c:27:c5:ab:29:8e:68:94:8e:61:c4:
         2b:8f:a0:2d:2f:a4:cf:0d:9e:bd:05:8a:76:84:b6:89:87:48:
         5a:87:eb:6c:e3:93:b0:26:ff:2f:66:1b:3c:e7:ce:9c:6d:fc:
         25:88:b9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:03:37 2025 by rpki-client