Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/1e4ff8e1-a54a-3a6b-b607-d418c38829d4.roa
File:                     1e4ff8e1-a54a-3a6b-b607-d418c38829d4.roa (raw, json)
Hash identifier:          /AG62q6eHIROvPCtreao7e0Gizt/zfFgCx/jDZO1Iek=
Subject key identifier:   8C:84:12:9B:EA:9C:03:B7:3C:42:D4:3C:C7:58:9D:CC:19:DC:3C:40
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F432858491ED6E16AD8F0AA72B752B440
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/1e4ff8e1-a54a-3a6b-b607-d418c38829d4.roa
Signing time:             Sat 08 Mar 2025 14:00:52 +0000
ROA not before:           Sat 08 Mar 2025 14:00:52 +0000
ROA not after:            Fri 06 Jun 2025 13:00:52 +0000
asID:                     46126
IP address blocks:        65.51.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1e:d6:e1:6a:d8:f0:aa:72:b7:52:b4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Mar  8 14:00:52 2025 GMT
            Not After : Jun  6 13:00:52 2025 GMT
        Subject: CN=1b8cc175-f792-49d8-a451-7ce2d784a0eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a7:30:c7:c8:31:f8:25:27:f3:29:59:26:0c:
                    e6:bf:00:5f:d1:60:08:af:fa:14:f7:c7:71:10:7e:
                    b0:bd:ea:43:47:4a:28:27:d7:c1:01:62:9a:48:b3:
                    2d:1a:8f:48:5f:89:db:5b:4b:3f:05:e3:c9:7d:7b:
                    58:45:ec:fb:d5:09:3a:32:37:cf:e5:31:b4:fb:94:
                    09:ef:a8:5f:cd:e7:12:c2:6f:0a:da:52:c1:dc:97:
                    73:01:18:a2:bf:36:c0:8f:51:43:28:37:d1:f7:f7:
                    40:03:c1:79:10:41:2c:3c:9e:1a:31:3c:8b:55:fb:
                    15:95:a6:fd:9e:12:03:4c:53:5d:a0:7a:b3:c9:5a:
                    5c:6f:eb:9c:80:35:98:2f:c9:42:3d:38:cc:7d:93:
                    b6:96:bd:c2:1e:73:40:05:82:ce:91:b7:39:b9:0d:
                    e6:4f:e2:63:5d:de:73:b0:70:73:08:86:ac:d6:cf:
                    a2:15:2c:26:b8:30:28:80:18:a7:a2:07:a5:9d:37:
                    42:46:4c:9d:93:5d:86:01:96:7e:47:eb:b4:90:8f:
                    ac:14:08:3b:1b:12:5f:d5:79:78:40:15:44:9e:38:
                    5e:f7:fb:9e:46:e5:20:9e:41:d6:67:c2:5a:47:fe:
                    50:73:5c:7c:8b:b1:a7:5e:35:64:9b:01:36:bb:b2:
                    b0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:84:12:9B:EA:9C:03:B7:3C:42:D4:3C:C7:58:9D:CC:19:DC:3C:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/1e4ff8e1-a54a-3a6b-b607-d418c38829d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:a6:86:54:c8:8c:6a:07:8a:f9:7b:3a:f4:eb:54:cf:35:e4:
         22:bd:fc:d1:93:7a:ec:ad:6e:46:cb:55:a9:77:e9:10:17:7f:
         f8:0c:6b:26:ab:86:b0:6a:0f:0c:34:ad:c2:65:a0:fe:c6:80:
         2a:9e:c0:0c:c1:cf:c9:5d:26:9a:ff:35:dc:ec:30:d7:da:d0:
         9f:81:f8:2f:24:6d:5a:cf:e9:c4:d3:89:ad:8c:9d:70:0d:e9:
         74:be:82:a2:1c:54:eb:4e:d3:2c:7f:eb:97:e3:cd:d2:5e:1a:
         15:4f:10:13:c9:6d:50:93:48:2d:4b:98:d7:29:67:7c:1a:bb:
         fc:c0:82:ee:4a:e9:7a:8e:04:5c:6e:e9:14:45:31:a1:15:bb:
         7e:c8:5e:0c:1e:a9:3c:46:05:34:97:e5:eb:f6:0b:a3:61:30:
         ed:9a:1b:f0:c8:11:57:84:c0:86:c2:85:a2:09:93:bb:d6:11:
         c1:4e:38:de:0d:ad:f7:d6:4c:95:6c:e1:8c:b9:d6:94:e7:ea:
         7d:25:a2:fc:67:1d:0d:18:e8:56:5d:ba:4e:1f:8c:cf:bc:11:
         e4:bd:7a:32:6e:23:31:37:a2:a4:15:da:8b:80:fa:7b:26:d9:
         65:66:8e:c1:c8:a3:b4:c0:ca:fd:df:c4:0f:68:de:be:48:a1:
         ad:9f:f7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:02 2025 by rpki-client