Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/17d7e761-9bfc-3e8c-bff6-08bba8c78157.roa
File:                     17d7e761-9bfc-3e8c-bff6-08bba8c78157.roa (raw, json)
Hash identifier:          oddQ4geGmZw9rrmV6tZvqcY9oyT4GfjKXEsyPiwHYa0=
Subject key identifier:   45:8A:4D:58:F7:65:37:FF:86:49:1A:BF:66:0A:CF:07:C1:DD:75:FD
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858487A208962A5FD15D40FB10300
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/17d7e761-9bfc-3e8c-bff6-08bba8c78157.roa
Signing time:             Wed 08 Jan 2025 14:00:51 +0000
ROA not before:           Wed 08 Jan 2025 14:00:51 +0000
ROA not after:            Tue 08 Apr 2025 13:00:51 +0000
asID:                     30103
IP address blocks:        149.137.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7a:20:89:62:a5:fd:15:d4:0f:b1:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jan  8 14:00:51 2025 GMT
            Not After : Apr  8 13:00:51 2025 GMT
        Subject: CN=e29ded26-a6ea-4968-ac4b-4293af144f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f2:c9:db:5c:50:ef:ea:e2:7c:0c:a5:96:be:
                    3c:7f:a3:2b:eb:98:80:0e:a7:30:e8:f8:68:dd:95:
                    0f:41:b7:f0:30:e5:13:41:72:b0:3f:9a:91:d1:69:
                    fe:f2:15:f3:9f:9d:50:b7:da:ab:61:54:f6:1f:c0:
                    55:54:7e:74:ea:4d:f6:59:b8:11:7c:5e:7b:22:b2:
                    0f:1f:9f:ec:46:8f:db:11:65:6b:71:e9:1d:02:e6:
                    12:7e:c3:60:0b:95:a6:b1:68:42:d8:2e:ce:b7:30:
                    17:25:a3:8a:af:bc:66:16:5c:7a:21:0f:ba:6e:d4:
                    f6:aa:05:d4:77:05:45:5c:a8:53:1d:e2:f0:c9:14:
                    d5:c6:38:e3:40:c0:e0:15:08:38:f1:6c:a1:4b:34:
                    f1:65:94:77:62:d3:e0:a0:6a:37:2f:b9:d4:b5:6d:
                    dc:24:64:4f:07:72:37:ff:9a:13:77:11:f1:f9:c2:
                    0b:74:ac:d8:8f:c4:8b:82:e8:ea:c0:83:85:e2:cc:
                    2f:42:23:28:ee:5b:c4:8a:55:07:77:8e:2b:0f:81:
                    25:3e:d5:c2:31:66:b8:d9:ad:94:56:08:79:72:20:
                    f2:e5:16:65:06:ce:2b:61:dd:ef:33:87:77:aa:84:
                    33:ea:42:4a:77:a4:fa:67:ae:f4:d6:a3:77:f4:33:
                    d1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:8A:4D:58:F7:65:37:FF:86:49:1A:BF:66:0A:CF:07:C1:DD:75:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/17d7e761-9bfc-3e8c-bff6-08bba8c78157.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.137.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:ea:5e:e8:fd:32:a3:4e:ee:57:89:41:a3:ec:33:f2:93:8e:
         35:2d:6f:27:f1:d2:ee:f5:ea:47:be:3c:1b:a4:8a:1e:ca:06:
         39:cb:af:e0:b1:55:a6:f6:43:c8:67:ac:26:b5:83:3b:2c:78:
         c7:60:ef:93:07:5a:8f:93:93:56:45:32:b1:8f:9d:de:b6:6f:
         a2:77:ec:b6:63:09:e7:ef:70:c9:95:ba:e1:60:0c:86:a8:55:
         79:32:d4:6b:7f:01:25:81:48:4e:1e:f7:02:28:00:83:01:a3:
         00:08:ac:fb:a9:e3:80:d4:1d:25:27:31:6d:8c:ec:1e:39:d0:
         71:cf:58:aa:5f:dd:0c:de:31:ce:0f:48:4e:da:6f:c2:f9:8d:
         f2:6e:9e:04:8d:b1:e6:8c:e6:58:fd:e8:f3:20:7f:f1:27:2d:
         96:f3:1c:f3:12:20:42:e8:1c:a3:44:01:7e:21:6a:bb:15:25:
         18:89:3e:6a:9e:53:08:dd:c3:70:7f:6d:e5:e4:cf:50:04:2c:
         67:15:2c:12:b0:92:53:8b:a9:c1:0c:16:ee:5d:a0:af:52:1e:
         bb:88:16:02:5c:e5:35:f5:b4:42:9b:28:92:21:a2:63:24:7d:
         23:2d:9a:06:41:d8:d0:bf:c4:2c:ae:4c:55:d0:bf:0a:bd:8a:
         cd:04:5f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:21 2025 by rpki-client