Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/7adf562f-a8f9-3e57-883e-c14ae2958c57.roa
File:                     7adf562f-a8f9-3e57-883e-c14ae2958c57.roa (raw, json)
Hash identifier:          UNKfLOinCowlnqfqyDRvbD0757g7ZcT0cqOs9gwEw+4=
Subject key identifier:   EF:00:F6:9C:E2:F2:4E:F6:8D:66:E4:92:B8:50:24:49:0B:F9:A7:01
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F43285848E8667C82420FD7E709A3A800
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/7adf562f-a8f9-3e57-883e-c14ae2958c57.roa
Signing time:             Mon 17 Feb 2025 02:00:38 +0000
ROA not before:           Mon 17 Feb 2025 02:00:38 +0000
ROA not after:            Sun 18 May 2025 01:00:38 +0000
asID:                     395761
IP address blocks:        198.252.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e8:66:7c:82:42:0f:d7:e7:09:a3:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Feb 17 02:00:38 2025 GMT
            Not After : May 18 01:00:38 2025 GMT
        Subject: CN=cf5bfd04-a2bd-41db-aefc-41612b987fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:97:db:68:dd:cc:4b:83:c5:0c:79:70:92:7e:
                    db:86:46:b9:58:62:72:2e:5a:af:b6:ba:3d:f2:7d:
                    67:f9:9f:52:b4:f6:43:50:a1:56:9c:35:7d:07:1c:
                    1b:8b:53:6b:d8:41:8a:e0:db:13:7b:72:27:a5:5e:
                    8d:46:ea:c4:d4:8e:47:1e:30:5e:ed:ca:40:d4:ee:
                    32:05:1e:b7:91:85:8f:8b:f0:d7:c4:b5:0a:6e:b3:
                    a2:3f:7d:2f:ff:e3:dc:60:44:e3:0f:90:11:09:00:
                    90:7c:43:6b:3d:ab:73:ea:6d:6e:15:13:60:1f:1e:
                    ef:97:13:95:d8:ee:c2:bd:a1:00:b9:f0:ce:d1:c4:
                    45:46:6a:9c:85:0f:d3:94:a8:37:7c:6d:d0:5f:38:
                    81:29:9c:80:56:75:09:d4:ef:a1:3a:43:7e:45:2d:
                    59:35:90:1e:0e:1d:e2:26:9f:c8:37:81:9a:11:3e:
                    53:da:71:60:1e:92:3b:c7:68:ef:71:96:b6:92:16:
                    e4:8e:66:28:f2:24:08:56:f6:96:54:5c:d8:e4:dd:
                    fa:aa:00:f0:16:85:d5:6d:b8:1b:d4:f3:8a:b9:19:
                    8a:cd:6a:f2:bf:6d:40:be:d1:bb:4a:37:45:60:7e:
                    fb:9f:bf:19:35:4b:71:f3:62:d4:57:06:24:38:89:
                    a2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:00:F6:9C:E2:F2:4E:F6:8D:66:E4:92:B8:50:24:49:0B:F9:A7:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/7adf562f-a8f9-3e57-883e-c14ae2958c57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.252.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:64:1f:92:be:0b:35:23:b2:27:41:94:8d:6f:ac:b6:c1:e8:
         eb:45:ff:c6:2e:d9:e6:dc:5d:7b:1f:58:53:8f:3e:7c:ca:90:
         98:13:69:ef:f2:b3:2c:99:2a:2f:d8:2e:8e:e7:9d:95:d4:7f:
         0b:40:6b:30:31:63:dd:b4:df:e6:f8:3f:7e:4e:42:14:d0:b0:
         ef:96:39:24:a3:82:ff:f4:94:3f:1b:e2:8c:13:56:3e:3b:76:
         1e:7c:99:da:e2:35:1e:a2:50:d1:30:27:10:1d:15:c4:06:e7:
         9b:9b:a0:7f:c8:e9:ef:0d:ba:e0:43:54:9e:f4:98:28:b9:f2:
         fb:c7:f2:f9:ac:7c:4d:21:75:11:18:c0:f5:67:6a:33:67:f3:
         a0:56:11:42:6c:d9:cd:71:19:a9:4e:3b:7e:52:30:5c:34:72:
         33:7e:e6:e9:cd:66:99:05:70:a5:8e:d5:bf:b2:b0:7d:bf:e5:
         bb:02:b0:cf:f1:2e:3e:be:91:61:97:67:ab:70:53:02:10:b3:
         dd:a9:a7:d8:9c:ba:4c:08:45:87:64:fd:41:72:63:57:09:bf:
         1e:b0:ae:4d:8a:3d:8e:16:c5:61:20:aa:a4:b1:05:28:58:21:
         c0:a7:77:61:a2:20:2e:6b:25:91:0e:fc:ab:c0:15:b3:7c:a1:
         39:4c:af:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:23 2025 by rpki-client