Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/7bdb138e-f133-35f7-aafc-98f7d4428755.roa
File:                     7bdb138e-f133-35f7-aafc-98f7d4428755.roa (raw, json)
Hash identifier:          xOMGJgOk7eBnnH9geEXjaVQif29bqsixx8fwWjkkyD4=
Subject key identifier:   76:AE:79:B6:C6:D0:5F:EC:BC:46:06:75:9D:BC:A2:C1:77:F0:E8:5E
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285849631EC3708464A0F5799C1D00
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/7bdb138e-f133-35f7-aafc-98f7d4428755.roa
Signing time:             Wed 02 Apr 2025 01:00:46 +0000
ROA not before:           Wed 02 Apr 2025 01:00:46 +0000
ROA not after:            Tue 01 Jul 2025 01:00:46 +0000
asID:                     16509
IP address blocks:        170.114.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:63:1e:c3:70:84:64:a0:f5:79:9c:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Apr  2 01:00:46 2025 GMT
            Not After : Jul  1 01:00:46 2025 GMT
        Subject: CN=6df4e1ce-eb00-4dcc-aa0e-47c5ddb097de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ae:1b:71:ba:f8:ec:4d:08:de:88:7a:09:34:
                    52:82:03:51:2e:02:53:3d:91:7f:7f:37:d8:48:92:
                    85:9e:09:b4:27:d1:75:58:43:80:ca:56:ea:7e:24:
                    c0:2b:42:8b:fe:ff:4c:ca:6d:82:45:10:67:64:8b:
                    13:05:81:5b:d2:39:96:31:fa:63:86:bd:88:5f:a6:
                    30:cc:37:39:d7:fb:d5:25:f1:a0:65:01:43:6e:04:
                    53:00:4c:73:bc:12:28:34:49:35:da:81:37:4f:cf:
                    3c:c3:8f:35:c3:e9:8e:c1:ad:9e:6c:68:63:8e:37:
                    90:cc:50:08:1e:11:50:0c:40:44:7c:27:e4:77:68:
                    ed:8e:4f:1d:5c:17:fc:85:e8:71:52:9d:e1:db:70:
                    9c:83:ce:8a:74:e2:fc:84:52:b7:6a:b2:88:51:d9:
                    6a:4f:98:63:30:54:45:e6:f1:15:60:8b:85:23:0e:
                    45:4d:cb:34:97:3e:81:b6:73:bf:b1:f3:e3:bc:c4:
                    7c:3c:73:f0:68:44:69:00:d4:55:4e:e2:6c:f0:56:
                    50:a5:25:7c:f3:b1:0a:85:f3:78:e8:85:1b:aa:9c:
                    52:2b:53:94:a8:f0:4b:84:fb:65:2b:f3:2d:71:34:
                    3d:f6:7f:d9:e3:31:43:88:70:12:f4:d2:4e:4e:58:
                    1b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:AE:79:B6:C6:D0:5F:EC:BC:46:06:75:9D:BC:A2:C1:77:F0:E8:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/7bdb138e-f133-35f7-aafc-98f7d4428755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:87:fb:c2:2f:11:11:9c:5b:b2:24:67:27:bb:6d:8d:c8:59:
         5b:a6:b6:95:24:5d:a4:48:c5:9e:e2:40:5c:0a:85:42:8d:d5:
         f0:31:7f:c0:b3:30:3a:8c:be:9c:83:62:c9:bf:1b:8b:a6:92:
         d3:bc:54:11:f7:31:d6:f2:a3:28:49:b2:26:2c:fd:20:6d:f9:
         b2:6d:4f:10:ad:ec:35:48:a6:1d:3b:be:50:69:f1:f8:ea:f2:
         00:53:62:71:8e:f2:45:84:ea:b2:45:2f:c5:47:c7:a4:3e:5f:
         a0:19:d1:55:bb:9f:74:c4:5b:06:42:e2:f6:a0:23:3e:5d:06:
         ab:9a:90:d3:6a:43:1a:93:66:c7:d7:dc:32:63:f5:98:f1:2d:
         ae:a3:ff:f3:2e:92:f0:87:8b:71:d7:55:b3:9c:ba:e4:22:87:
         75:2e:48:3f:78:1e:d3:a8:0f:bd:82:b9:bf:db:a9:a9:82:bd:
         a2:f3:89:b3:b5:57:2e:f6:36:8e:84:c7:0d:61:00:c5:6e:2e:
         ee:c0:21:15:3f:37:48:c7:14:c5:ff:69:ed:f4:b9:3f:d7:0e:
         e6:4d:79:f0:ef:1c:56:2c:61:3a:e9:a2:52:9f:8c:3b:6b:e4:
         97:29:62:ee:37:67:ae:f3:51:70:e0:39:55:a3:b7:85:aa:37:
         e4:17:83:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:02 2025 by rpki-client