Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/499f708c-a3fd-3b53-9ae1-95855a7ebf3f.roa
File:                     499f708c-a3fd-3b53-9ae1-95855a7ebf3f.roa (raw, json)
Hash identifier:          HYuJkXsd/FO9aNxXOTFrLFH9Jys8TW6KZoqQuF83Bjw=
Subject key identifier:   E5:6A:5A:95:19:AD:61:41:A4:91:40:36:3B:4C:64:20:D3:62:A6:AE
Certificate issuer:       /CN=4adc9f42-8201-4af2-a3c2-223d1e2687a2
Certificate serial:       010D0C9F432858485B6AFD1D3529C3E606906EC0
Authority key identifier: E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/499f708c-a3fd-3b53-9ae1-95855a7ebf3f.roa
Signing time:             Sat 28 Dec 2024 14:00:52 +0000
ROA not before:           Sat 28 Dec 2024 14:00:52 +0000
ROA not after:            Fri 28 Mar 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        192.64.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5b:6a:fd:1d:35:29:c3:e6:06:90:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4adc9f42-8201-4af2-a3c2-223d1e2687a2
        Validity
            Not Before: Dec 28 14:00:52 2024 GMT
            Not After : Mar 28 13:00:52 2025 GMT
        Subject: CN=a5877d23-701a-40d5-9493-697ff7574c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:39:04:b6:98:c0:44:46:1a:09:aa:05:9f:ce:
                    14:f4:8f:1d:e8:f2:20:57:a6:16:55:72:c1:97:ce:
                    ac:50:a6:e4:1f:5d:e8:75:be:8d:c5:bc:fa:dd:14:
                    55:bd:2c:ae:3d:ea:7f:74:1d:a5:0d:f0:71:ed:ff:
                    85:17:43:f1:2f:5e:1c:04:82:90:d4:c4:ea:93:ea:
                    76:98:9a:41:4f:a1:ab:c4:d6:b4:ab:6c:c9:dd:b4:
                    82:28:28:0b:02:af:d9:4c:6c:32:ff:af:02:6a:c5:
                    8a:d6:95:cb:20:88:00:82:fc:1b:5e:2d:a3:6c:e9:
                    7f:4d:4c:07:65:9d:13:68:bf:87:92:19:35:64:e0:
                    f2:8f:4a:75:13:91:fa:3a:1e:98:0e:f5:0e:be:cd:
                    e2:26:54:5a:63:2c:24:7b:dd:1a:29:a1:46:1c:7d:
                    07:8a:68:78:b5:c5:12:63:9e:a7:22:1d:27:d3:fc:
                    e6:3e:4b:b9:ca:bf:81:4c:60:70:60:3e:57:2a:a0:
                    78:ee:5c:45:aa:ae:a8:bd:97:6c:8f:ad:17:26:1b:
                    35:0f:06:9d:59:04:f2:9a:22:da:e8:eb:9f:93:97:
                    0b:b0:20:e0:e2:b8:b8:30:72:94:eb:df:c5:19:01:
                    9d:df:63:ad:04:86:a4:ee:79:c5:49:eb:76:77:89:
                    68:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6A:5A:95:19:AD:61:41:A4:91:40:36:3B:4C:64:20:D3:62:A6:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/499f708c-a3fd-3b53-9ae1-95855a7ebf3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.crl

            X509v3 Authority Key Identifier:
                keyid:E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:4b:2d:81:54:61:ee:4c:8e:d4:bc:dc:d7:db:c3:97:62:86:
         f9:f9:24:ae:ef:05:af:5d:07:d1:38:9f:74:9d:2b:a5:c1:ee:
         50:5c:96:13:f1:0c:fa:3e:93:7e:9b:58:02:60:c4:16:d9:20:
         e6:c4:f3:f3:4e:8d:48:a4:f0:bd:cc:d9:6c:62:f9:94:7f:d7:
         cb:d4:46:98:74:99:8c:54:7c:73:91:15:e6:d5:67:89:0e:0c:
         f4:7c:33:28:ce:79:a1:0d:c5:a3:5a:ba:27:79:f0:19:41:07:
         a9:ff:f0:50:21:04:df:10:ff:14:04:39:f3:a8:27:46:00:e0:
         8b:6f:ac:15:c8:14:ab:b1:a9:46:ba:a8:55:0d:7e:8f:24:1f:
         b8:93:74:75:bc:f5:44:a5:d7:7b:4c:e7:13:8b:75:82:38:10:
         ca:90:f8:e8:80:61:06:01:39:b3:94:95:b2:c2:e8:c0:eb:fd:
         b3:75:94:f9:1c:08:fb:a5:6d:d4:d5:40:bf:3c:c8:49:01:0f:
         6a:90:96:39:d7:07:41:dc:8d:e9:5f:d1:49:d3:e7:34:7a:ae:
         16:f9:ee:9e:d6:07:c6:fc:d1:18:de:0b:90:6f:82:92:ea:46:
         f6:73:52:41:54:7c:4e:bc:14:fe:f8:61:0b:a2:94:a5:b0:91:
         4c:81:cc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:04:07 2025 by rpki-client