Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a/d96871f3-2611-3819-9adb-b7081454f9f8.roa
File:                     d96871f3-2611-3819-9adb-b7081454f9f8.roa (raw, json)
Hash identifier:          9eeYbo6944qEYAnXXxvuejjLjUrL70Wwj58Wy1z/s+c=
Subject key identifier:   C3:25:03:A2:DD:42:8B:BC:79:1F:24:20:CC:CB:9A:F5:B9:17:AE:43
Certificate issuer:       /CN=b3a75266-06ce-463f-bfbd-1da0c867f18a
Certificate serial:       010D0C9F43285848FD56D0197E69144A8C770CC0
Authority key identifier: BB:30:9A:65:E0:81:49:49:64:B4:87:E8:4C:93:36:77:10:84:CC:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a/d96871f3-2611-3819-9adb-b7081454f9f8.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        198.177.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a/b3a75266-06ce-463f-bfbd-1da0c867f18a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a/b3a75266-06ce-463f-bfbd-1da0c867f18a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:d0:19:7e:69:14:4a:8c:77:0c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3a75266-06ce-463f-bfbd-1da0c867f18a
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=609d670c-935e-4d2c-9724-89c4ac4d6c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0a:09:8d:45:11:88:f6:dc:c0:55:0b:d0:36:
                    2a:f1:86:c9:00:42:0a:5f:6f:f0:4a:8c:38:7b:7c:
                    a8:ac:7b:af:03:1e:dd:e2:64:86:d0:6a:fd:02:00:
                    ca:72:5c:2f:89:79:94:d2:21:a9:4c:82:b2:8e:cb:
                    33:d6:3d:28:44:c7:02:42:aa:4e:0f:a4:51:c5:b0:
                    85:72:9c:ce:9d:6c:fb:a3:40:48:87:39:87:99:ac:
                    a3:4a:3e:8c:b4:2c:47:e8:38:52:11:86:2b:1f:f2:
                    9e:9d:5b:04:9f:9a:7c:6c:b2:b9:4c:88:49:78:a8:
                    77:bc:08:d8:da:a9:ea:70:6f:61:58:e0:b5:a5:85:
                    48:de:42:b3:2e:c1:8a:c2:cf:5a:7f:f2:7e:d3:9a:
                    cf:60:0c:26:e7:4e:ee:9c:81:48:cb:fa:ff:a7:3c:
                    e3:29:4c:45:15:2a:f1:ae:82:59:7c:ab:0e:39:cb:
                    7e:3d:06:e0:bd:d8:e4:b6:17:35:38:1c:66:b1:5e:
                    62:cb:9a:18:a9:7d:62:5c:72:6d:d7:49:bc:9d:51:
                    45:7c:e5:a9:b4:e4:98:8d:42:f9:8c:ca:9a:65:a2:
                    fa:59:09:3e:55:51:ee:21:f4:8a:a2:f3:4c:55:26:
                    80:37:fc:82:ee:6a:17:2a:90:27:9b:f9:b2:81:e2:
                    75:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:25:03:A2:DD:42:8B:BC:79:1F:24:20:CC:CB:9A:F5:B9:17:AE:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a/d96871f3-2611-3819-9adb-b7081454f9f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a/b3a75266-06ce-463f-bfbd-1da0c867f18a.crl

            X509v3 Authority Key Identifier:
                keyid:BB:30:9A:65:E0:81:49:49:64:B4:87:E8:4C:93:36:77:10:84:CC:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:2c:09:8d:d8:bc:e8:96:23:1f:ee:66:ee:21:98:ed:4e:cb:
         93:93:f5:74:cb:0e:db:a2:d9:28:08:80:1f:83:a2:3a:7f:0b:
         2d:92:d7:2f:95:6a:af:c7:69:3c:97:8f:0e:c8:89:0d:d2:5d:
         ba:61:f8:00:fc:f8:11:e0:a7:e4:d9:14:e0:6d:21:23:da:26:
         93:07:8e:4e:47:da:a6:50:c9:e7:66:4e:9a:86:23:01:83:b9:
         37:b7:c2:15:fc:0d:7e:ad:f7:f8:70:05:6b:f1:ac:1b:b4:e0:
         e2:0e:17:1e:4d:8c:71:23:b0:c1:bf:c7:05:c5:88:5b:97:29:
         d9:e7:a0:99:0c:c4:3d:96:28:dd:08:73:5b:a3:f2:40:23:05:
         e5:a4:82:99:0c:f4:57:36:8f:14:ed:12:b9:1b:a7:36:dd:03:
         13:2f:d2:bb:8e:5e:01:4b:8f:70:48:ae:07:12:4a:c9:d4:ab:
         3c:00:8d:3d:36:2f:ad:ca:b0:a3:49:96:15:5e:8b:67:75:4f:
         b2:8c:28:88:76:29:3a:69:e7:c1:7b:df:eb:49:16:a2:43:98:
         4c:43:b4:6d:11:7e:f8:17:95:b9:23:85:e2:cf:70:1e:40:2e:
         e0:56:67:ad:dc:94:f4:e1:0c:c8:fb:aa:22:8e:01:df:19:c5:
         02:cc:39:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:00 2025 by rpki-client