Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/1bc62461-4688-3f61-ba23-1337d77bf4e4.roa
File:                     1bc62461-4688-3f61-ba23-1337d77bf4e4.roa (raw, json)
Hash identifier:          6S1VLyvUL1l60MH0gAuRqi5DpnNsb4+qrB7xE3ny6KY=
Subject key identifier:   0D:04:0C:12:F1:82:A8:94:10:52:EA:23:3E:F6:21:5C:26:12:FD:C1
Certificate issuer:       /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Certificate serial:       010D0C9F43285848090FAF8AB0D75399906DEA00
Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/1bc62461-4688-3f61-ba23-1337d77bf4e4.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     1206
IP address blocks:        128.182.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:af:8a:b0:d7:53:99:90:6d:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=96d16f2d-f3cc-4e37-8420-c69e5ee2a3af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5b:21:95:b3:b3:89:af:53:ba:74:5d:a2:6a:
                    f7:51:32:0e:11:b0:b9:d5:27:68:12:20:39:38:a0:
                    73:34:bf:32:b0:9e:0e:ee:84:98:ec:3b:81:f0:98:
                    b7:84:41:72:a0:28:73:af:16:c9:a1:5c:cc:a0:a4:
                    92:e7:01:5e:81:45:ae:5e:8b:e8:7a:1e:13:b3:e8:
                    b0:77:ed:16:b1:90:59:84:a9:6a:6b:62:43:a2:71:
                    08:79:0f:2a:0a:d2:04:31:04:c3:a0:45:6e:74:c4:
                    04:70:08:b0:7f:d3:64:9f:d5:99:ef:6a:7b:f4:e4:
                    d1:9e:f8:62:82:32:b2:0d:e7:77:95:5e:a3:f8:04:
                    c4:b6:d6:96:38:9b:ac:c8:64:c9:3e:cd:b7:ef:c0:
                    95:16:aa:5b:88:9d:d5:0d:b6:84:f1:54:82:fb:8e:
                    a5:04:c3:e4:dc:e7:e8:10:a0:fb:c4:13:26:09:6c:
                    89:2e:1d:6b:5b:0f:d1:33:41:ac:11:65:1b:9b:86:
                    9e:84:43:59:5a:c0:19:79:87:76:d5:3c:ee:4f:62:
                    c5:ce:dc:c3:73:b2:89:83:53:dd:c3:f9:6a:e3:08:
                    2e:6a:29:3b:6e:d2:77:f8:a3:10:d4:c0:a5:e5:b9:
                    32:3e:0c:55:23:a7:46:11:75:3d:0d:9c:2b:3f:57:
                    bb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:04:0C:12:F1:82:A8:94:10:52:EA:23:3E:F6:21:5C:26:12:FD:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/1bc62461-4688-3f61-ba23-1337d77bf4e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl

            X509v3 Authority Key Identifier:
                keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.182.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:a7:4d:5f:5f:e1:19:66:d9:16:17:b6:93:c6:cd:8f:48:cd:
         6d:d0:80:74:bc:0a:e6:c3:a9:17:08:70:2e:41:ce:a3:1a:45:
         9e:07:5a:bf:ab:42:7f:14:cf:9f:5b:df:e4:cd:00:28:b7:73:
         21:0e:38:69:df:37:35:19:9d:0d:f6:1f:a3:79:9a:96:ff:e9:
         b2:35:61:5b:e1:2d:e1:ef:ca:cf:3c:a9:ee:08:24:4c:47:4a:
         77:55:1a:58:fd:e6:9c:1d:b7:f6:db:e5:24:86:a2:7a:e7:65:
         d5:a6:71:77:c4:64:9c:64:63:ac:a8:6b:b3:d9:b7:1c:44:29:
         b3:2d:3f:68:aa:57:7c:c4:24:1a:69:d6:e5:24:a0:15:da:54:
         47:ce:94:c9:1d:ee:b4:32:5d:64:5f:b4:77:f1:cf:1c:ac:a0:
         8c:b9:db:3a:98:8b:81:41:66:26:45:e5:d3:23:6a:f8:9a:27:
         1d:4a:66:5d:bf:a5:f5:a6:d7:8c:a8:f4:75:b9:a2:0b:31:4e:
         c9:98:d6:d3:90:dc:6a:e2:bc:d7:67:b5:4c:02:7f:6c:b2:68:
         03:84:2b:42:8a:33:00:7e:8a:75:1e:7a:48:ca:2c:ec:4d:ac:
         6d:6d:92:c2:50:97:3f:a1:55:09:c0:58:33:70:08:f7:69:38:
         6a:28:00:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:46:30 2025 by rpki-client