Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/d97d9c80-7670-3dfc-af78-3aea843af4ca.roa
File:                     d97d9c80-7670-3dfc-af78-3aea843af4ca.roa (raw, json)
Hash identifier:          n5eSc1vJoJ42Lo3GK6glaK7twj2TCYsEE/DBpDJtCnk=
Subject key identifier:   07:E4:8B:4B:54:30:DB:3B:E4:E1:26:4D:87:E0:C1:91:EC:11:E1:F2
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584819CFE23292020E0E7B587B00
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/d97d9c80-7670-3dfc-af78-3aea843af4ca.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     13760
IP address blocks:        209.209.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:e2:32:92:02:0e:0e:7b:58:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=b0bebd0f-bb2d-4ab7-a99e-607339b8267d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:28:02:75:3e:cc:28:6e:12:f5:49:f6:74:54:
                    2d:ea:d6:30:a6:87:d6:7a:9b:96:0f:e3:9b:e2:ad:
                    92:c4:fe:0d:0b:3c:62:2a:cb:a6:41:3c:0e:92:7a:
                    f9:11:c6:3a:91:da:df:12:f2:cf:a2:f1:0b:0b:4a:
                    dc:cf:26:d8:f2:82:c5:bd:73:b6:56:98:f8:d2:fb:
                    09:cb:e6:d2:53:1b:55:3f:54:0e:9a:4b:47:af:2f:
                    90:db:0b:14:3e:fe:cb:4a:ac:5a:fe:0e:7b:d5:32:
                    82:80:e5:be:3d:2e:14:9c:d5:65:a4:ba:38:31:02:
                    3c:c5:43:e2:c9:7f:81:24:4b:1c:5c:a9:65:18:12:
                    7b:a1:09:49:c0:f4:5e:fe:72:5c:6f:58:14:7b:45:
                    f6:8b:9d:2b:ab:1d:71:5d:3a:2c:7c:73:98:9e:b7:
                    0a:98:5f:bd:18:23:c5:c4:04:53:49:8d:a8:55:e0:
                    06:dc:9a:6d:a5:66:c8:51:51:0e:21:0a:50:af:96:
                    02:cd:b6:6c:08:2c:fc:89:5d:6e:73:f0:34:7f:b4:
                    2d:2e:a6:1e:ba:dd:f8:06:44:49:7c:04:67:60:cb:
                    4b:d7:66:31:55:06:a4:f8:14:35:42:c4:4a:a1:fb:
                    b4:1b:60:e7:ea:c1:ac:4f:10:98:22:95:04:8b:3e:
                    e1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E4:8B:4B:54:30:DB:3B:E4:E1:26:4D:87:E0:C1:91:EC:11:E1:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/d97d9c80-7670-3dfc-af78-3aea843af4ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:ae:42:7f:a9:f4:44:ca:2f:a1:44:76:a9:8e:fb:69:11:f8:
         c2:9d:65:14:a7:f1:b7:72:d0:c2:25:0a:b5:cf:5d:33:82:13:
         24:96:c4:b1:0f:34:59:8d:4f:d6:82:4d:f5:3c:a8:91:e6:30:
         2a:af:cd:62:cf:aa:36:d1:90:40:99:d1:59:da:7b:bc:ca:ae:
         fe:f6:a2:14:9d:b5:8c:e0:1c:33:79:6c:bd:55:59:4c:e4:af:
         d0:81:b0:02:4e:36:f6:3d:c2:5f:f2:2a:32:b3:08:1f:5d:f4:
         34:3f:5b:88:58:7c:63:f4:11:16:a3:0c:f0:17:bb:ba:89:c7:
         e8:60:40:2b:72:6a:35:95:a5:b1:a7:35:f3:7e:39:31:86:f7:
         a3:04:00:8e:d0:e9:31:b1:e3:d3:db:8e:76:b8:09:b6:b5:33:
         43:de:45:64:5d:ba:ad:63:26:38:87:44:b0:f7:05:e2:fc:88:
         35:22:bd:93:fa:29:3e:7c:c0:84:a7:f8:44:4d:81:ae:c5:a2:
         27:b0:48:c6:38:b9:7f:2f:5b:b3:b1:bc:b9:8c:a6:1e:bf:94:
         0f:98:c2:a2:6a:04:7d:98:57:ef:b6:4f:b6:b6:a7:50:b7:af:
         58:ee:fe:2a:a7:21:c2:1e:ff:7f:09:ad:6c:74:85:c4:c9:9f:
         05:8c:19:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:29 2025 by rpki-client