Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/772887f9-cc43-3cf1-89a3-5cdd6335334c.roa
File:                     772887f9-cc43-3cf1-89a3-5cdd6335334c.roa (raw, json)
Hash identifier:          lgxX9xm5VKix8WmOqaMAcPSVH3iWHg+fqVyVTh0klxw=
Subject key identifier:   8D:39:43:82:9E:1A:E1:E8:43:13:D3:D7:84:B1:04:46:39:7F:77:4E
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285848BFEBD3FBCD2072327ADB4C20
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/772887f9-cc43-3cf1-89a3-5cdd6335334c.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     15169
IP address blocks:        108.177.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:d3:fb:cd:20:72:32:7a:db:4c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=816271f4-d8a3-4b36-b6e5-194f79d71032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:76:e3:ed:a3:1c:a0:f2:3b:1b:07:02:29:50:
                    7e:f9:0e:c9:7c:75:b6:83:23:f3:d4:0e:ba:86:6e:
                    ca:4d:64:67:73:31:2c:23:82:50:09:0a:20:e3:06:
                    26:98:15:ce:fc:e9:bf:5b:f5:e5:26:fa:88:b7:fc:
                    d4:2f:6f:72:8c:f0:9f:9e:c3:33:5b:a9:e9:71:79:
                    e9:e8:d1:a6:79:cd:d2:68:07:57:42:b5:11:42:3c:
                    c7:05:ed:0a:a4:f1:39:2d:98:58:6d:40:3f:c7:0b:
                    b9:ef:5a:f5:5d:32:06:3f:e9:4d:b1:d7:6a:29:ea:
                    13:1f:34:e1:06:be:8e:b9:e9:e2:e1:f5:90:23:e8:
                    a9:41:ec:61:5c:d7:35:58:0d:4b:b5:fd:0a:32:d5:
                    2c:1c:45:95:26:38:98:03:c4:92:19:c5:59:8b:77:
                    06:71:b1:90:a5:72:35:77:33:da:6d:c1:cb:3e:34:
                    c5:8a:ee:83:de:e9:e1:17:9f:c8:57:25:dc:b6:f0:
                    bd:ed:c8:26:0f:34:4d:4a:8e:ce:a4:53:b5:69:9f:
                    ee:ac:10:4d:be:da:a4:6f:c2:9a:a2:d1:4a:a8:1d:
                    25:57:53:fd:72:92:c6:2f:08:70:98:59:4f:d0:03:
                    bd:fa:b9:ef:1d:04:48:26:e9:09:d8:0c:0d:71:1a:
                    64:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:39:43:82:9E:1A:E1:E8:43:13:D3:D7:84:B1:04:46:39:7F:77:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/772887f9-cc43-3cf1-89a3-5cdd6335334c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.177.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:41:28:14:b0:a0:fb:76:51:fe:1c:74:fb:7e:8e:34:6f:d3:
         c8:35:fb:f4:10:47:e5:ef:7d:1d:48:52:ca:12:96:4f:be:9c:
         10:5c:1a:bd:50:c0:a5:4f:3e:a2:fd:dd:ea:8f:37:af:0c:60:
         8b:7f:16:ab:9b:f0:c5:5d:3d:d2:bd:4a:ef:cb:24:b3:b6:f5:
         c3:ee:bb:eb:63:bb:e1:ed:7b:6c:64:f2:0d:fc:47:02:cb:d8:
         1b:2d:43:c2:d5:da:09:ca:23:99:a6:fb:b1:3b:cc:96:aa:ca:
         42:14:9a:41:fe:c4:41:fa:6b:7e:e4:8e:c9:51:31:a2:69:19:
         5f:8f:46:39:73:3f:a9:53:5e:fb:80:af:02:61:4a:27:a7:ee:
         71:24:41:7e:14:52:2e:50:ef:ff:a6:8f:d1:d0:a7:7e:7b:51:
         ba:d1:f0:ea:2d:03:e7:13:2c:a0:84:3e:fa:02:34:c3:17:2c:
         ad:88:89:d1:a7:73:74:67:63:6f:93:1e:f8:0a:c4:97:e9:63:
         4c:e7:13:5e:31:72:89:e3:56:e3:75:21:07:f8:70:81:b3:2a:
         21:12:9b:33:99:3e:de:1b:ad:1d:68:cf:c8:41:c5:c7:18:c8:
         26:93:6e:31:36:f2:e5:25:23:d5:d2:cf:3a:0a:44:e7:78:7a:
         f9:3e:17:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:39:08 2025 by rpki-client