Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/a513202b-5857-314d-b395-1f9cd8e033e0.roa
File:                     a513202b-5857-314d-b395-1f9cd8e033e0.roa (raw, json)
Hash identifier:          GkVVIRGbP065iEdl/LcS+5JITNwQ/FKKGaeUNgThv+g=
Subject key identifier:   C7:DB:56:D6:2D:64:92:AD:30:8A:D9:A8:B7:EF:65:CA:B6:E5:26:5D
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584B0E414FF6CA630B81B74F3200
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/a513202b-5857-314d-b395-1f9cd8e033e0.roa
Signing time:             Tue 02 Sep 2025 01:00:32 +0000
ROA not before:           Tue 02 Sep 2025 01:00:32 +0000
ROA not after:            Mon 01 Dec 2025 02:00:32 +0000
asID:                     14618
IP address blocks:        167.234.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0e:41:4f:f6:ca:63:0b:81:b7:4f:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Sep  2 01:00:32 2025 GMT
            Not After : Dec  1 02:00:32 2025 GMT
        Subject: CN=5dc63f0a-b5c9-467a-ad32-85690b25e909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0b:38:0b:ee:2d:ef:ee:b9:b5:a3:65:09:47:
                    01:47:35:5f:cf:84:d3:56:bd:3a:99:af:87:db:3e:
                    52:a0:e6:c2:b7:89:b0:7b:03:a6:2c:f9:78:75:fd:
                    9a:d7:8f:7c:4a:59:27:b0:53:25:b6:d5:4b:02:67:
                    f6:5a:f5:82:ba:b4:35:c2:92:02:30:67:f3:93:44:
                    7e:07:60:80:c1:47:7b:ac:d1:6f:fd:99:02:b9:0d:
                    81:30:be:7a:c8:b5:66:0c:80:b5:e4:6c:4e:78:fb:
                    7c:2f:fc:0d:af:61:b7:05:c8:1a:50:1f:63:1d:82:
                    e6:6a:03:c5:be:72:59:5a:d6:ab:b6:ff:12:57:f7:
                    85:b4:3c:a7:93:1c:3b:f5:f2:bd:59:33:b9:0a:0d:
                    86:ad:6c:6c:d8:19:6f:04:b3:9a:c5:b3:75:9e:6a:
                    22:28:8d:85:d4:e4:e2:c9:c9:7b:b9:ee:08:97:97:
                    43:d8:cf:d6:f1:22:5d:8c:b1:63:a2:20:88:66:97:
                    f2:62:02:50:46:f0:13:11:4e:e4:16:6e:6f:6e:ea:
                    71:02:91:96:79:41:bf:41:7b:c6:0f:da:d9:47:bd:
                    b8:47:02:35:fc:ac:1c:92:e6:28:b0:48:d8:99:e6:
                    8c:dc:b9:26:62:91:8d:ce:0f:85:5f:a9:18:bd:69:
                    67:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:DB:56:D6:2D:64:92:AD:30:8A:D9:A8:B7:EF:65:CA:B6:E5:26:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/a513202b-5857-314d-b395-1f9cd8e033e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.234.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:01:28:04:86:5a:d1:5b:bd:f4:bd:20:f7:0b:f0:f2:42:b9:
         d4:16:71:46:45:a3:a3:64:5c:64:00:54:ce:d7:dc:ce:b6:25:
         bf:4f:bd:5b:9b:48:88:3d:6a:fb:3e:e3:93:25:d3:8b:c4:c2:
         e5:93:d1:f8:59:73:6a:f9:ab:d8:5b:22:47:c3:37:40:70:f6:
         3b:f8:ea:7a:f9:09:11:c4:06:78:3e:23:a2:4a:34:ba:82:76:
         26:14:a3:44:a4:09:4f:b4:1d:ae:77:fc:2c:e6:0d:83:50:f8:
         30:a0:f8:00:7b:1a:44:51:ce:e5:d1:ca:41:eb:c4:93:9a:0b:
         16:3b:de:91:3d:ca:70:78:ee:4b:4e:ea:29:2e:c6:8f:2d:9f:
         94:f9:c6:e3:e8:06:c4:be:9a:b8:0c:e8:23:ad:b2:4b:5e:24:
         3b:72:81:a7:b8:11:77:4a:dd:e0:14:94:22:5b:15:b5:70:44:
         be:ec:69:96:ce:51:84:32:76:6c:20:77:b9:d9:2a:15:be:18:
         ff:42:a9:00:25:12:03:b3:b6:d6:5f:a8:b5:ca:67:ae:87:d0:
         8e:c4:b3:43:2a:be:ab:a0:4c:c7:1d:08:42:d6:86:2c:f9:be:
         e7:f4:03:f7:15:04:1f:30:6b:6b:9a:5b:bc:fc:ef:3d:a6:4b:
         5f:97:63:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:45:24 2025 by rpki-client