Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/90f8ae9b-c3b9-34b4-9b38-179d6e5a0326.roa
File:                     90f8ae9b-c3b9-34b4-9b38-179d6e5a0326.roa (raw, json)
Hash identifier:          essz9t/hntCfEtURP4ulptUqMKkZW5HThiVwriTUuIQ=
Subject key identifier:   D4:F5:B0:37:CD:AE:B2:2C:85:49:1C:0D:39:60:F8:78:06:26:2E:61
Certificate issuer:       /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb
Certificate serial:       010D0C9F43285848E59BBFD5D7EE7FDB2520B580
Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/90f8ae9b-c3b9-34b4-9b38-179d6e5a0326.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     16509
IP address blocks:        192.111.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:bf:d5:d7:ee:7f:db:25:20:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=33f305cd-c50e-45fe-9f60-181d3fac0abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:88:59:99:cc:3e:6b:41:3e:e6:de:4e:3c:f3:
                    ee:90:a3:e7:47:30:34:be:ec:34:a1:41:f2:46:77:
                    c3:d7:e8:b5:e9:9b:dc:5b:7e:82:da:01:a2:70:4e:
                    d0:a4:89:47:9d:be:c4:c1:f4:f9:2d:c7:a8:3f:1a:
                    11:cc:bc:1f:c1:a2:72:36:b3:08:6d:10:05:a6:e7:
                    c6:75:d8:aa:e7:d4:2b:a5:d4:9a:3e:e9:61:18:b6:
                    41:09:cd:b5:bf:0b:a4:b6:f7:3a:80:a9:2a:16:ba:
                    fe:e2:f2:70:da:3e:9e:24:94:2e:6c:81:b1:5c:d1:
                    96:69:76:53:18:06:04:0b:49:ed:92:49:e1:e0:8d:
                    6e:e3:6f:0b:e3:8a:68:be:d1:af:5d:23:7d:76:a6:
                    74:70:58:75:a2:02:8c:ac:db:60:e3:ed:0c:99:19:
                    6f:4c:fd:be:fe:41:db:50:52:a4:e3:0f:e8:73:0d:
                    c6:3b:6b:07:3d:39:1e:06:21:c2:ba:f8:69:cc:7e:
                    49:8b:e7:b7:40:6e:92:40:ab:b8:91:97:f6:af:ff:
                    ed:ec:c3:cd:ed:9d:4f:7a:0c:65:fc:e4:8c:c7:2f:
                    f5:72:2f:80:8b:67:09:5b:39:23:a8:59:9c:47:7a:
                    8f:b4:6d:3e:44:7a:ee:9a:ea:48:04:92:c9:cb:8c:
                    bf:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F5:B0:37:CD:AE:B2:2C:85:49:1C:0D:39:60:F8:78:06:26:2E:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/90f8ae9b-c3b9-34b4-9b38-179d6e5a0326.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl

            X509v3 Authority Key Identifier:
                keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:22:67:22:d3:fd:d6:f6:bf:d9:f9:4e:90:27:9b:a2:c4:4b:
         5a:cb:20:3a:43:4b:48:87:4a:03:d4:15:2d:a6:a7:69:46:17:
         81:31:ca:28:29:2c:60:18:8a:46:ed:51:c9:07:bd:cc:94:92:
         68:84:b8:42:54:a3:88:35:44:f5:8b:87:ad:f5:e9:fc:23:cf:
         8e:76:97:a4:f0:98:2a:d5:d5:b2:2a:68:af:1d:3e:3b:5a:5c:
         34:5c:7d:a0:55:b5:f3:34:0b:af:e0:43:25:32:9d:a4:b0:ad:
         8e:af:b2:3e:df:d0:3a:93:7f:ed:96:c8:80:ac:5c:43:ae:23:
         e1:ff:28:ad:cd:32:e4:88:be:b8:f9:82:aa:fb:4e:7f:1c:4e:
         6a:96:09:4b:d0:a1:a6:69:69:9d:26:d8:3a:40:a8:ad:81:5d:
         64:49:a7:c6:c2:ec:c8:93:8f:b8:1a:cb:70:e5:16:40:5e:b4:
         5a:55:90:d7:d5:a9:33:b0:9a:2b:9f:fc:43:ef:14:0b:a1:58:
         b4:e3:cc:af:60:ef:d6:35:29:a8:16:37:9c:b2:3a:a8:21:64:
         7e:4c:4d:81:7e:cc:05:83:f3:ad:fd:75:ce:a1:d5:3a:fa:e4:
         25:c5:12:ae:42:30:10:0e:ec:80:04:7b:82:6d:b1:5d:71:3a:
         21:c7:bd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:55 2025 by rpki-client