Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/9ce4290c-c209-326f-94fc-ba532426a504.roa
File:                     9ce4290c-c209-326f-94fc-ba532426a504.roa (raw, json)
Hash identifier:          AaAUhpkurSdxfE9PUGhcHb79+9pRgNPnnkxGKtwmebs=
Subject key identifier:   A9:69:CA:6B:28:30:61:17:B8:E8:3F:D4:A1:00:FA:9B:AC:66:FC:39
Certificate issuer:       /CN=5754a89f-37ee-48bb-8a3c-139ee06fe0fc
Certificate serial:       010D0C9F4328584823954262B2080BA99A8E7720
Authority key identifier: 4A:5B:7C:62:2B:70:D9:86:B9:F4:7E:69:5C:F7:5B:B3:C5:4D:EA:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/9ce4290c-c209-326f-94fc-ba532426a504.roa
Signing time:             Sun 08 Dec 2024 14:00:51 +0000
ROA not before:           Sun 08 Dec 2024 14:00:51 +0000
ROA not after:            Sat 08 Mar 2025 14:00:51 +0000
asID:                     62490
IP address blocks:        136.175.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:23:95:42:62:b2:08:0b:a9:9a:8e:77:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5754a89f-37ee-48bb-8a3c-139ee06fe0fc
        Validity
            Not Before: Dec  8 14:00:51 2024 GMT
            Not After : Mar  8 14:00:51 2025 GMT
        Subject: CN=5bb6a3bc-0578-4380-9d34-52814f2c51d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f1:48:81:7d:41:09:c8:43:9f:71:41:cc:01:
                    60:73:36:c9:7e:63:6c:c0:4f:1c:96:26:b7:58:42:
                    1c:4b:a7:6d:fe:13:a6:95:e4:43:13:6b:e6:9d:b4:
                    99:79:1a:b8:12:dc:fe:18:74:35:21:98:53:0a:ca:
                    e0:18:e0:79:c3:20:83:75:c1:83:ca:65:e1:ff:9e:
                    23:26:f1:85:11:1a:12:7e:ee:bf:5b:ba:cd:e8:f1:
                    51:ca:81:3e:ed:ac:7a:bd:85:bc:82:8f:7f:4b:96:
                    09:60:d3:69:72:0c:98:3e:ce:82:55:66:79:e6:2c:
                    76:50:d1:73:4c:fa:3a:5d:8a:01:b7:db:4c:99:db:
                    be:d5:96:8e:bb:8b:1b:82:51:ae:37:75:a6:0c:b7:
                    a6:60:88:66:4d:16:2d:41:33:dc:3b:aa:6b:23:f8:
                    6b:e9:a6:79:03:bf:7b:cd:cb:41:d9:f9:da:53:24:
                    17:80:13:03:30:46:f8:21:76:16:24:ed:56:d9:19:
                    95:e1:49:d9:94:4a:f8:8b:37:2d:4f:d6:47:1b:5e:
                    58:f8:c5:79:08:38:3e:f3:49:fc:ae:29:fd:80:be:
                    6c:2f:84:73:d6:6c:fb:46:81:bc:cd:1a:2d:64:a4:
                    81:e5:c4:a3:a3:1e:79:21:c0:76:95:3d:ad:11:3f:
                    da:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:69:CA:6B:28:30:61:17:B8:E8:3F:D4:A1:00:FA:9B:AC:66:FC:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/9ce4290c-c209-326f-94fc-ba532426a504.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.crl

            X509v3 Authority Key Identifier:
                keyid:4A:5B:7C:62:2B:70:D9:86:B9:F4:7E:69:5C:F7:5B:B3:C5:4D:EA:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:a4:f1:45:3c:5f:06:77:6a:cc:0f:88:07:d0:a9:12:f8:06:
         e7:4a:b0:58:9f:81:55:31:4a:5d:dc:db:08:c0:29:d7:88:a1:
         e6:10:31:ea:dd:d9:d9:cd:4a:2a:ea:50:d7:fb:80:df:c1:c3:
         a9:ab:67:74:4b:7c:98:a8:88:60:04:b3:23:cd:93:36:f4:0b:
         83:0b:3b:27:aa:e4:95:80:aa:38:fd:e2:bb:58:a2:12:50:b7:
         5c:c6:b4:17:3c:56:26:da:1b:67:1f:bc:b6:98:19:6a:16:a1:
         65:98:33:26:19:83:e6:5d:3b:56:90:b4:75:c9:78:bf:42:64:
         0e:93:e0:ff:50:40:59:08:8d:17:21:dc:23:3b:84:8c:4a:ba:
         0a:e4:9d:fc:8b:48:e9:2d:be:e5:f2:2f:a5:0b:b3:cd:a8:a2:
         6a:5a:b1:b5:ba:e3:68:67:30:5b:99:e7:7e:24:54:19:91:19:
         f2:5f:2c:fc:8d:b5:d3:9d:ad:d9:41:19:51:df:00:7e:8e:fb:
         44:bc:69:be:77:a7:8b:37:03:44:d1:27:90:9f:57:60:4d:e1:
         9d:de:22:6f:1f:e6:88:6a:ae:67:98:6f:ff:e5:fd:04:11:47:
         e5:09:fd:7c:d6:6a:e4:97:ae:21:51:1f:0b:8d:33:f0:44:0a:
         70:3d:8f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:17 2025 by rpki-client