Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/b1663796-dc94-35f3-89b7-7c4c3b605604.roa
File:                     b1663796-dc94-35f3-89b7-7c4c3b605604.roa (raw, json)
Hash identifier:          0p74EmdPlNvSleU8tz3AXzGJN2OsPNl4VPBI7mzAeCM=
Subject key identifier:   C0:CB:C7:93:62:FE:7E:93:08:2A:F5:E2:65:0B:72:21:31:F7:67:7C
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285848E2D116E3AAA9FDC03CB6A2C0
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/b1663796-dc94-35f3-89b7-7c4c3b605604.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     13599
IP address blocks:        173.251.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:16:e3:aa:a9:fd:c0:3c:b6:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=c5ebe491-4c06-45a0-ab2f-9dbf50e1c151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:41:66:13:96:c7:42:48:42:cf:48:d8:f2:ac:
                    d3:b7:48:3e:a9:95:2a:d1:08:60:a9:45:92:71:9d:
                    2c:ae:eb:62:21:7b:c4:df:bf:73:2d:6e:c1:32:b7:
                    2a:81:f4:53:b6:4c:8c:89:b5:0d:4f:15:db:24:ab:
                    21:ab:bb:05:1f:7f:b6:6b:36:53:43:8a:2d:dd:da:
                    7a:db:e9:42:46:96:13:fd:08:de:9a:79:90:55:10:
                    10:cf:06:06:ca:89:ff:1e:a9:be:b8:e5:2c:8f:bf:
                    27:84:66:d1:af:fd:1c:cf:2e:67:d8:88:86:fb:bf:
                    b6:69:b6:47:7d:74:74:0c:2c:4b:ea:21:34:4a:ea:
                    50:4e:a9:e2:5b:83:c2:77:25:f1:e2:55:ab:8d:e6:
                    0d:26:4d:87:35:9a:e9:ce:f3:15:c3:a4:34:25:ed:
                    5d:40:af:9e:19:6b:62:7a:47:40:22:dd:e9:69:84:
                    cf:2c:ae:cc:2b:bc:dc:2c:50:2c:42:25:0a:9d:1e:
                    fe:2d:84:a6:86:7f:9d:6b:c7:fd:d9:99:d9:86:aa:
                    01:b4:d4:c7:c5:cc:fa:99:96:75:05:11:49:fa:12:
                    01:cf:90:27:b5:a9:7c:b3:e5:bf:8c:3f:c8:66:70:
                    4f:34:2b:e6:6e:65:d5:dc:c9:70:9c:39:e9:30:06:
                    02:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CB:C7:93:62:FE:7E:93:08:2A:F5:E2:65:0B:72:21:31:F7:67:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/b1663796-dc94-35f3-89b7-7c4c3b605604.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.251.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:2a:84:21:2f:75:80:8f:d3:22:f7:b7:86:92:27:69:a7:b8:
         87:36:af:88:0a:4c:f2:73:61:ae:41:9f:e4:62:7f:62:d7:a1:
         59:80:34:3a:28:f3:93:83:8f:3a:44:0e:ec:61:62:88:46:94:
         aa:a9:a4:f0:fa:b6:a4:31:b6:be:53:34:ee:bf:c1:70:c8:9f:
         f2:46:ac:1a:6c:cf:28:14:af:31:4a:5b:32:de:4b:3b:4d:e1:
         80:48:40:eb:56:32:0b:98:7f:d1:6d:b0:86:a1:80:86:9b:e0:
         49:92:9b:7a:eb:85:41:9c:1f:b7:a8:11:0d:70:55:bd:c0:41:
         01:9e:fe:49:34:a6:7b:31:c0:72:74:b7:3c:40:dd:bd:6b:06:
         6c:48:35:68:c2:4f:ac:42:c4:c2:40:c9:02:ce:6f:b5:7c:f5:
         34:42:54:7b:b8:db:28:e3:ff:11:3a:c8:c2:af:80:cb:26:67:
         f8:7a:7c:cc:9d:ea:76:ac:04:61:8a:9a:45:3d:60:30:c9:be:
         ed:5c:8b:0f:c1:63:18:06:49:79:5b:74:ba:ce:34:97:98:c3:
         2b:71:e8:52:42:7c:42:95:6d:03:f0:24:c8:fd:b1:e6:82:6c:
         cb:33:74:c7:9e:5b:d6:a2:f3:03:2c:cd:c7:59:75:41:a6:59:
         d3:a8:97:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:55:15 2025 by rpki-client