Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/61e79cf2-6370-36b1-96fa-2602d07cf72f.roa
File:                     61e79cf2-6370-36b1-96fa-2602d07cf72f.roa (raw, json)
Hash identifier:          BEz1/te7vMLr7ddJkZehOAgocbuHuqPDoOKIKuvoRDA=
Subject key identifier:   57:C2:28:0C:E0:A5:96:8E:43:3E:C6:69:45:57:E9:E1:75:05:F2:E8
Certificate issuer:       /CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
Certificate serial:       010D0C9F432858490021635C0590B053BFCB7C00
Authority key identifier: C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/61e79cf2-6370-36b1-96fa-2602d07cf72f.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     54392
IP address blocks:        173.235.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:63:5c:05:90:b0:53:bf:cb:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=1fb2e8f5-a90b-402c-b001-323f85bfc910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f4:be:13:a4:77:c2:8a:82:39:78:6c:20:cb:
                    1c:94:fc:f2:fd:99:cd:b8:a8:9a:d5:4a:23:dd:f1:
                    5a:d6:6d:24:0c:18:37:ec:3a:dd:ce:a2:df:03:ec:
                    f4:bc:ed:4f:11:87:03:de:b2:1f:0b:d9:e1:f5:80:
                    32:f7:97:44:74:dd:41:4b:97:3c:4a:ea:51:2b:7f:
                    bf:93:bf:e3:47:db:41:39:83:3e:25:98:cf:30:f4:
                    ae:27:98:07:5e:5f:d0:08:66:7e:0b:26:26:83:88:
                    be:6b:8f:2c:61:9a:b5:a9:d1:f5:ca:e5:16:28:92:
                    e3:b6:26:cb:87:ef:ca:a3:0a:89:2c:a3:93:a8:98:
                    6c:39:da:4f:ed:31:12:e1:3a:5f:20:70:3d:80:71:
                    44:ad:be:d7:38:e0:f4:22:f4:32:ae:87:15:3d:d0:
                    24:0a:8b:e2:ae:36:53:b7:20:0c:6b:1b:a7:50:63:
                    98:9b:f4:b5:4c:07:bf:6b:38:c4:1d:10:17:ee:3d:
                    d1:df:7a:df:e0:bd:3c:71:0d:b7:96:1a:8e:25:f8:
                    31:6a:88:af:00:f1:e3:02:fe:d0:c4:30:23:ae:88:
                    f0:fc:f0:58:6b:29:02:0e:cd:39:c3:f3:c0:15:e8:
                    fe:d3:3e:36:05:13:6f:8c:cd:ac:4d:9f:84:1a:97:
                    63:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C2:28:0C:E0:A5:96:8E:43:3E:C6:69:45:57:E9:E1:75:05:F2:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/61e79cf2-6370-36b1-96fa-2602d07cf72f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl

            X509v3 Authority Key Identifier:
                keyid:C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.235.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:2f:f9:d6:f3:90:1e:20:d3:27:54:c0:e6:6c:cf:bc:f4:a2:
         89:90:8f:32:b1:48:09:ec:39:bb:8e:4a:83:69:61:b6:40:42:
         a0:3e:3d:e2:7f:9b:16:ea:82:c1:cc:70:a2:4a:86:b0:ed:40:
         97:91:61:41:db:73:53:de:ba:19:19:c8:37:4d:ea:ac:0c:8b:
         ea:98:f1:de:04:3f:a6:50:e1:5f:e2:09:5b:32:7c:29:1b:f0:
         35:9d:7c:3f:fd:b3:01:f0:75:8c:b1:20:5f:2b:20:e4:dc:f3:
         16:31:7a:e0:cf:82:94:14:32:66:cf:6c:dc:2f:66:83:92:21:
         99:d0:c7:f4:96:a9:46:44:93:16:ad:f6:9b:1e:3d:86:b9:89:
         fd:67:34:28:00:af:13:32:15:23:ba:cb:fd:e8:7d:5c:be:d2:
         bd:ed:ef:90:a2:5b:ca:e2:05:06:2a:c8:22:44:50:cb:1f:18:
         c7:90:77:bf:40:56:25:61:73:25:e6:97:0a:c6:bd:2a:87:a8:
         a3:41:cd:29:8d:8d:4b:d5:fa:4d:f6:8f:4a:a5:15:c2:3f:eb:
         7c:06:79:f8:e4:5a:3d:a7:23:e0:54:ff:b0:e5:c0:24:84:21:
         12:6a:cb:de:d3:5f:7b:ad:40:38:c2:8f:e9:2e:c0:b3:2f:49:
         b7:35:7a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:18 2025 by rpki-client