Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/0e5db1f3-b3a1-3597-99f3-28ec533ed3e7.roa
File:                     0e5db1f3-b3a1-3597-99f3-28ec533ed3e7.roa (raw, json)
Hash identifier:          H1i+VRaBxtgftPRhgBannY3C/h9YzFx5uiexCo/XvDo=
Subject key identifier:   00:01:BE:52:08:C1:48:BB:41:39:CD:87:49:11:32:86:C3:D4:12:CE
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F4328584824FA85EFE1DD1B6822C0BB80
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/0e5db1f3-b3a1-3597-99f3-28ec533ed3e7.roa
Signing time:             Mon 09 Dec 2024 02:00:40 +0000
ROA not before:           Mon 09 Dec 2024 02:00:40 +0000
ROA not after:            Sun 09 Mar 2025 02:00:40 +0000
asID:                     396982
IP address blocks:        98.158.240.0/20 maxlen: 20
                          148.64.0.0/19 maxlen: 19
                          168.149.128.0/18 maxlen: 18
                          170.176.240.0/21 maxlen: 21
                          199.247.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:24:fa:85:ef:e1:dd:1b:68:22:c0:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Dec  9 02:00:40 2024 GMT
            Not After : Mar  9 02:00:40 2025 GMT
        Subject: CN=087ca401-f4f3-4bff-8ad7-baa1af859515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f2:c3:ed:62:d3:ac:16:f5:44:aa:10:49:8a:
                    e2:85:d9:24:ee:56:f7:3d:98:67:77:b0:2a:fa:0a:
                    41:32:1c:c8:21:0b:94:85:9c:80:42:35:c4:82:18:
                    f1:16:1e:51:49:14:bd:46:36:00:11:60:d7:39:70:
                    75:c4:10:4d:c3:5a:db:a6:61:77:a9:d0:16:25:5b:
                    ba:92:e0:75:cf:31:53:04:aa:02:d1:88:d8:ec:2d:
                    a5:a2:b4:5a:b4:5f:e1:73:22:63:eb:24:f1:cd:4f:
                    2a:b7:b0:69:8f:cb:51:20:ab:4c:8f:4b:f6:d8:78:
                    55:3c:a1:13:48:46:41:e9:22:27:ba:80:c0:9c:d4:
                    3b:78:0b:63:ec:f6:7c:6e:7b:62:c6:31:4e:8d:3e:
                    13:b5:dd:69:11:38:e1:79:f9:dc:27:6d:f3:bb:f7:
                    29:00:62:16:2f:d0:cd:a3:9f:b9:06:a2:77:ab:2c:
                    29:ab:c1:1f:6a:e1:7a:b3:43:01:eb:c8:ac:a7:79:
                    b7:c7:30:73:f9:5b:dd:3f:7d:df:01:93:97:f4:59:
                    ff:75:d2:19:a7:32:09:b1:92:56:65:6b:fc:c0:b6:
                    da:53:58:e7:82:04:4c:3b:db:24:18:40:ee:e1:6e:
                    3c:6f:ff:77:16:c2:33:71:75:0b:ca:aa:c6:92:c4:
                    84:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:01:BE:52:08:C1:48:BB:41:39:CD:87:49:11:32:86:C3:D4:12:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/0e5db1f3-b3a1-3597-99f3-28ec533ed3e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.158.240.0/20
                  148.64.0.0/19
                  168.149.128.0/18
                  170.176.240.0/21
                  199.247.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:70:2b:f2:6e:dc:45:1d:bd:1f:d4:af:ad:db:8f:e6:3a:b2:
         df:cf:87:8d:81:f0:7f:a3:aa:7c:df:16:2e:2d:b5:f5:b8:7d:
         8c:26:7a:a4:46:7f:66:a6:f6:2b:65:91:5d:97:b1:d0:81:2b:
         a2:5e:76:96:a8:44:46:1e:57:3e:6c:04:77:41:0b:66:66:0b:
         33:e6:2a:02:95:4d:7d:f1:41:a0:3c:09:b6:53:f6:07:0e:93:
         4f:46:de:c1:8c:78:ec:12:1c:25:fb:10:05:11:7d:e9:bd:cb:
         c2:ca:e5:3c:88:87:f0:f8:00:27:5a:ea:9e:d2:13:10:59:ab:
         64:7c:07:1e:c4:5a:5f:d8:91:2e:35:47:e7:f4:7f:0a:b5:fa:
         c5:59:bd:d7:e8:a2:0e:ea:73:58:39:7e:68:a7:1b:f9:7d:f9:
         16:96:81:f5:cf:56:05:a0:b9:a6:f1:16:c2:6c:6e:05:3f:f0:
         43:00:5d:ec:e1:72:31:5e:eb:e9:b9:79:18:ff:7c:37:28:cc:
         11:ba:5f:2f:e0:3f:79:6f:99:55:36:82:45:8f:1f:a7:11:38:
         bc:3c:e4:55:89:d8:ea:22:4f:ea:ef:5f:a0:b4:85:e1:ed:53:
         07:36:ff:4f:f4:42:94:08:ef:ca:91:96:52:44:ac:15:27:a6:
         f6:3c:01:a8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:35:01 2025 by rpki-client