Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9058792c-d385-3406-9564-e21ff759e4f1.roa
File:                     9058792c-d385-3406-9564-e21ff759e4f1.roa (raw, json)
Hash identifier:          JnftC4cSpPTVh/lvhyk85ITxEJQy8nbrNGCHO9LCnE0=
Subject key identifier:   D4:55:02:13:61:5A:B3:8C:D6:5C:C6:5E:40:0B:68:09:30:AE:3A:D1
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858492CAE84CEE06E0606C7BF8430
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9058792c-d385-3406-9564-e21ff759e4f1.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        170.114.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:84:ce:e0:6e:06:06:c7:bf:84:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=3bc910b0-9cef-4d7d-96f3-aa0be5976dad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:75:ee:61:3b:fb:16:3a:af:8c:82:0f:7b:18:
                    a0:80:3d:12:13:cd:93:f3:48:4e:0e:93:7e:51:22:
                    a6:d4:46:54:d5:15:63:50:5d:9e:27:50:a6:42:f5:
                    e5:23:1b:a9:56:02:48:72:35:cb:f5:7a:b0:9f:44:
                    15:68:71:b2:b4:7c:d9:70:19:d9:74:95:a9:1d:0e:
                    27:fb:9f:d2:6c:f1:3d:70:c7:e9:70:84:0f:80:fd:
                    bf:71:91:75:70:46:b0:18:30:c4:bb:e7:fb:91:78:
                    47:ce:97:80:e6:c6:63:c9:95:4b:61:4d:93:bc:a5:
                    b3:68:c3:00:e2:ff:4e:19:51:94:b5:55:a9:bb:94:
                    16:66:48:af:87:62:41:9b:fc:15:3a:e8:b1:1e:3f:
                    05:37:4e:97:f1:96:35:46:3c:ad:fc:c3:33:a9:c6:
                    f3:83:2d:32:fe:e5:96:68:87:e0:db:07:e2:f2:48:
                    20:28:be:dc:78:19:89:8a:8b:9f:05:24:8d:85:af:
                    f1:5f:5b:4f:f2:6b:2d:3f:5a:0f:8f:78:ad:85:ab:
                    c6:c2:fa:9a:75:68:99:4d:da:64:01:36:dd:8e:b3:
                    49:4e:e5:a9:9e:85:2f:69:31:73:53:0c:8b:3b:20:
                    91:b0:2a:77:82:98:fc:26:24:2b:cc:47:7c:96:2f:
                    cc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:55:02:13:61:5A:B3:8C:D6:5C:C6:5E:40:0B:68:09:30:AE:3A:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9058792c-d385-3406-9564-e21ff759e4f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:aa:f5:55:c2:a0:59:10:90:f1:9e:28:d6:30:eb:e5:0c:fe:
         b6:9b:6c:ff:f1:af:cc:b8:06:c9:f9:2c:f4:93:f6:1d:fd:81:
         68:4f:29:5f:82:f2:c2:85:86:c6:51:04:7a:49:07:04:9e:d2:
         5f:43:f0:8a:6b:82:90:32:43:ff:a4:d1:04:02:36:3b:f2:99:
         e3:e8:ae:ff:ce:e9:e2:b8:ba:5e:7a:ad:86:14:ca:b9:54:2b:
         03:92:ba:5b:81:ba:f5:47:06:35:cc:e2:00:4a:0a:b2:6a:70:
         fd:d3:c9:5f:bd:2f:1e:16:b3:39:0b:6d:38:d1:5c:73:21:95:
         7e:e2:b4:92:e2:68:bc:3e:c9:02:ce:90:6c:ac:74:37:33:ce:
         65:91:d6:25:09:81:33:4b:41:4c:84:7f:35:a2:6d:a2:df:1d:
         be:ec:4f:4f:d6:bd:eb:a0:a8:0b:2a:1d:9c:e7:9a:86:ae:91:
         fa:49:d8:06:b6:87:32:f3:71:c6:ee:59:38:b4:6b:23:db:fb:
         6d:15:22:b5:e6:e3:0a:4f:0f:70:ef:6d:5e:be:44:07:e3:f5:
         67:49:11:f0:70:79:be:03:10:10:63:32:0c:00:53:a2:92:49:
         aa:c6:3f:2d:42:13:cf:86:21:c6:7b:cc:f7:9e:c0:27:e5:b2:
         cf:62:7a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:47 2025 by rpki-client