Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ad917844-6dd3-31a2-bfbf-cbab9c36c02e.roa
File:                     ad917844-6dd3-31a2-bfbf-cbab9c36c02e.roa (raw, json)
Hash identifier:          8hfqa7me9aKrgqKN4CHLIXkMLn/Rw2sCBGfeOujZtfQ=
Subject key identifier:   7E:A4:01:37:59:A2:0C:1A:7C:37:50:88:ED:4B:99:E2:CE:26:02:2B
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584900214F2263F6571F70EDD810
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ad917844-6dd3-31a2-bfbf-cbab9c36c02e.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     32431
IP address blocks:        108.179.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:4f:22:63:f6:57:1f:70:ed:d8:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=ef95394a-6865-4227-8e8f-1021db62c0f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5b:af:cf:24:24:3d:9e:51:6c:67:c2:3c:3b:
                    01:bd:ab:6a:7d:09:99:ae:0b:a3:56:a9:76:2a:d8:
                    71:e6:3f:61:16:93:fd:db:22:81:f9:39:8b:d3:09:
                    79:df:68:cd:88:f9:73:4f:75:0b:36:99:1e:c0:e9:
                    e7:1c:55:f3:2a:da:a6:9b:57:71:0a:5c:20:e8:d9:
                    ba:8b:d1:f0:2f:0a:44:92:ac:7d:e5:71:61:8d:5d:
                    ca:f7:0f:26:7a:d6:c3:58:f6:08:bc:e0:b2:ae:90:
                    0b:51:4b:38:4d:26:cc:79:99:10:c3:64:d2:2b:53:
                    79:2a:53:13:39:81:ed:7e:aa:ec:7e:c3:82:10:36:
                    73:1f:d8:59:9e:fd:0f:36:95:e7:1a:0f:73:4a:6a:
                    ed:17:bb:cd:ed:cd:36:e0:ad:1d:7c:bf:d4:4e:7c:
                    01:0c:2f:94:fc:aa:cf:64:f2:07:5b:c7:c7:49:fd:
                    1e:a3:5d:3c:3a:b2:9c:dc:f8:c9:a6:04:e5:6c:95:
                    c6:57:83:5e:a8:f4:05:9b:0b:6d:4a:c0:85:bd:86:
                    2b:4f:b1:29:20:45:cb:ba:ff:81:76:8a:ff:07:fc:
                    88:b0:d6:59:c4:7c:66:db:bf:90:33:57:fc:79:03:
                    46:8a:88:b3:e8:ca:4e:04:23:03:ee:96:cd:d5:16:
                    68:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A4:01:37:59:A2:0C:1A:7C:37:50:88:ED:4B:99:E2:CE:26:02:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ad917844-6dd3-31a2-bfbf-cbab9c36c02e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.179.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:51:d0:37:99:3f:e0:6e:42:eb:07:23:16:34:b3:71:26:07:
         f4:9a:10:75:41:d0:87:58:d6:99:a4:4c:26:8d:34:d0:84:5b:
         b5:51:72:12:c4:e5:f4:7f:c6:3d:67:f9:8d:d6:0f:2e:75:38:
         d8:d6:0a:cf:c9:c3:26:9b:3f:42:c8:41:58:67:fe:60:f3:f3:
         1b:e5:af:82:f3:ca:2c:33:71:4e:3a:ea:63:f5:73:44:49:32:
         f9:a1:0e:ae:ea:2c:31:41:3a:3b:1c:3c:fc:df:92:4e:d4:7f:
         e1:c3:a2:2d:66:99:f5:f7:16:02:ff:34:60:a7:db:b1:14:de:
         62:71:f3:1c:62:e5:83:1c:4a:23:eb:d1:5b:0b:14:60:d2:cd:
         25:45:c1:72:2a:13:a2:de:33:a4:2d:ee:8a:3d:f1:7e:5b:f8:
         fb:75:eb:1d:5c:7c:30:3d:8b:29:82:80:e7:f1:83:42:8d:7b:
         3a:7b:24:c0:26:2d:19:0c:bf:93:1c:4a:68:9e:4d:3a:db:8c:
         07:e0:db:ce:90:43:2b:bf:4b:c0:9a:e4:25:0f:0c:59:de:56:
         c1:aa:cb:cc:45:7f:b6:bc:10:34:ff:2a:7a:af:8a:93:39:d6:
         e5:0b:e2:84:19:58:2a:c7:1c:a0:cf:9f:e3:d2:92:95:d4:cc:
         c0:0e:42:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:46:33 2025 by rpki-client