Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/6cbb2fe5-29ce-387b-aa07-6bb4fc99e94c.roa
File:                     6cbb2fe5-29ce-387b-aa07-6bb4fc99e94c.roa (raw, json)
Hash identifier:          49KI8mqgGG1C/7i6Dw0vsiiiopCmR90Iu6C9Dc7OM+0=
Subject key identifier:   B6:C1:7E:2E:E6:2C:4A:14:21:89:A4:4C:9A:67:51:92:81:76:1E:25
Certificate issuer:       /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Certificate serial:       010D0C9F4328584845158323AF987D06B47C5400
Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/6cbb2fe5-29ce-387b-aa07-6bb4fc99e94c.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     16509
IP address blocks:        164.55.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:83:23:af:98:7d:06:b4:7c:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=35d6bbbe-7bab-4c27-bbb8-415ac2528e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:05:9a:6c:15:87:47:2a:44:0a:5f:49:e4:bd:
                    7b:ef:06:71:60:f5:75:21:43:9f:0b:68:a5:87:fe:
                    03:32:d1:88:ce:77:74:40:ae:76:56:72:68:f6:ff:
                    7b:a9:7e:6c:30:40:df:3e:e1:c0:14:54:ab:ce:18:
                    30:13:33:77:74:4f:56:04:3b:32:ba:a8:d4:07:9f:
                    2b:2b:18:fc:8c:65:17:fc:49:0c:0c:71:7b:cc:dd:
                    9e:17:76:a8:7a:1c:1f:23:1c:4d:02:bf:dc:1b:71:
                    00:1d:99:2f:dc:1d:73:39:96:73:b9:d7:78:df:d8:
                    1b:70:82:df:75:0f:67:0a:94:d5:82:69:a7:7d:59:
                    59:3e:2d:bd:7f:d7:85:06:57:6e:91:a3:36:c4:81:
                    3b:2f:77:2e:6a:87:c5:43:4e:d4:38:73:ee:8f:74:
                    b1:b0:95:b9:69:23:cd:ac:09:ed:80:fb:5c:c3:0e:
                    5a:dd:32:4e:24:ff:f9:8f:89:73:a1:99:7a:a7:e9:
                    08:2f:c0:41:f2:f2:26:c9:f0:eb:7b:3b:56:43:8e:
                    69:cf:df:2d:a7:13:80:45:7a:82:33:bc:05:53:c7:
                    8b:4f:87:b1:2d:07:e2:56:1d:5d:e1:06:84:fd:1c:
                    7a:50:af:dd:ec:e5:5a:00:44:c9:3b:9b:9f:7b:27:
                    30:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C1:7E:2E:E6:2C:4A:14:21:89:A4:4C:9A:67:51:92:81:76:1E:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/6cbb2fe5-29ce-387b-aa07-6bb4fc99e94c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl

            X509v3 Authority Key Identifier:
                keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.55.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:cb:95:8d:76:69:ab:9f:bf:ea:43:76:4d:6c:63:dc:21:83:
         91:9f:7f:a1:13:64:9d:de:bd:6b:42:f4:d0:48:30:2c:ba:10:
         ed:c5:81:fc:05:33:81:f9:08:2a:25:48:dc:33:1a:0f:9e:7b:
         c7:46:61:d6:62:3b:c0:c6:b8:87:93:c1:41:c1:b3:e5:43:c6:
         8b:a9:82:03:c4:09:1e:94:99:0b:dd:c7:a1:99:04:b1:e7:1d:
         8e:f5:48:e0:a4:06:f9:ce:f6:b5:11:83:17:4b:f4:7b:7f:94:
         f4:d8:0d:4d:38:28:a8:49:40:9d:f5:d7:73:50:0b:03:9e:de:
         4d:f4:fa:7e:61:ad:a9:e5:b5:37:14:3b:3e:69:0e:ea:34:04:
         79:c5:43:1c:cc:3d:e7:64:48:9a:7a:e6:a5:e3:ca:3c:10:17:
         2d:f8:a1:e2:6a:a5:34:53:54:d7:aa:41:3c:02:2c:af:c8:f1:
         55:5e:1b:50:cd:6c:98:a3:1b:a0:29:b4:26:57:b3:39:05:43:
         74:d7:1f:38:c3:f9:77:50:9f:18:21:bf:0e:fd:80:71:4c:d7:
         c7:2f:7c:16:ab:06:4e:67:db:cb:80:b3:74:95:de:4a:db:b1:
         cf:5a:81:5b:8b:bf:82:b1:9f:d9:c6:68:e7:8d:1e:ea:16:11:
         f8:c9:a4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:47 2025 by rpki-client