Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/77ab2105-a6f6-30c3-8791-31eb520ba6ae.roa
File:                     77ab2105-a6f6-30c3-8791-31eb520ba6ae.roa (raw, json)
Hash identifier:          WOL/7INw+prH3UNyGbWNeym0AbdFpSI5nUOAl0IeEEA=
Subject key identifier:   B6:C2:48:7E:C3:39:C1:3E:EB:75:0C:08:AA:20:F1:DA:60:03:AF:C9
Certificate issuer:       /CN=c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b
Certificate serial:       010D0C9F43285848D4DB9824707198A189045800
Authority key identifier: 60:87:0B:AF:04:2C:FC:75:F9:1A:BB:8B:C4:9E:4C:35:6F:F7:5F:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/77ab2105-a6f6-30c3-8791-31eb520ba6ae.roa
Signing time:             Mon 10 Feb 2025 02:00:38 +0000
ROA not before:           Mon 10 Feb 2025 02:00:38 +0000
ROA not after:            Sun 11 May 2025 01:00:38 +0000
asID:                     22252
IP address blocks:        167.153.193.0/24 maxlen: 24
                          167.153.196.0/24 maxlen: 24
                          167.153.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d4:db:98:24:70:71:98:a1:89:04:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b
        Validity
            Not Before: Feb 10 02:00:38 2025 GMT
            Not After : May 11 01:00:38 2025 GMT
        Subject: CN=217552c2-7956-451e-8c1f-ba2a117468d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a6:b6:88:c7:e9:c4:f6:ac:95:b3:b1:55:56:
                    f7:bd:3e:f1:41:7f:22:02:db:26:88:2e:ba:18:b3:
                    f2:b0:92:ec:5e:b2:84:0b:3c:f2:2d:87:10:56:7f:
                    05:c5:4c:05:8d:49:85:3a:3c:32:d1:8b:ef:a4:41:
                    50:3d:01:a4:96:d9:80:98:90:9d:52:43:5f:51:4e:
                    e8:14:f2:18:df:37:d1:ee:52:02:61:fe:5e:e6:28:
                    63:f6:a1:a0:a2:72:27:a1:15:7e:f9:b5:07:7d:ec:
                    fb:33:d2:bd:b2:9f:2d:35:a8:e2:c6:7c:2d:9d:b2:
                    ec:a5:0f:a7:e1:6e:a8:1b:c5:46:6a:13:6e:39:0b:
                    24:39:4e:10:85:76:64:54:f6:5b:6c:8c:2f:f0:e1:
                    cc:a2:e6:32:61:8c:5b:32:7a:8a:80:45:cf:01:98:
                    d6:27:76:fc:67:bf:5a:79:fe:44:28:46:f9:9c:77:
                    9a:4b:f4:8b:59:44:7a:6f:c9:25:5c:9e:4d:df:0a:
                    d6:08:88:91:c5:1b:00:c9:88:bb:7e:0e:94:ab:c1:
                    14:a8:00:da:96:89:68:68:bd:0a:a5:9c:bd:8f:09:
                    c5:b9:9b:ad:dc:15:28:da:71:b3:84:e9:c9:d6:79:
                    32:28:52:4d:40:8d:9e:58:aa:da:56:a5:b3:8d:72:
                    04:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C2:48:7E:C3:39:C1:3E:EB:75:0C:08:AA:20:F1:DA:60:03:AF:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/77ab2105-a6f6-30c3-8791-31eb520ba6ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.crl

            X509v3 Authority Key Identifier:
                keyid:60:87:0B:AF:04:2C:FC:75:F9:1A:BB:8B:C4:9E:4C:35:6F:F7:5F:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.153.193.0/24
                  167.153.196.0/24
                  167.153.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:5c:46:bc:8a:5e:cc:cf:61:72:62:c0:40:e7:b0:c4:e1:bb:
         64:fc:81:ad:fe:1c:e4:b0:79:d2:6c:21:66:02:70:dd:d9:f3:
         db:cd:c7:26:82:ab:84:07:f2:ca:33:d5:ef:a6:72:a4:e9:bd:
         be:54:26:fa:47:72:e5:f9:1f:fd:40:1c:b7:37:81:40:c6:d4:
         6c:1b:e9:0f:ea:1d:88:cc:61:25:ab:be:18:21:1c:09:45:17:
         87:20:34:d4:e2:41:4c:40:90:40:d4:33:f6:3a:a8:42:90:18:
         15:bf:60:00:05:d4:ac:d1:74:6e:8e:b2:e4:a8:4d:2f:94:4e:
         46:41:6b:a3:c0:e6:59:3f:06:a3:52:6c:50:f1:22:0f:02:1a:
         13:e4:18:f8:da:b4:73:77:a0:6a:c3:26:4c:10:29:7f:f4:ac:
         47:b1:6f:6d:79:da:a7:c7:52:cc:0b:ac:ad:15:e4:c4:e1:82:
         b2:02:cc:85:32:a0:9a:ea:90:ed:b1:e0:d1:ae:60:a2:94:e3:
         42:92:2a:ec:3a:63:c0:ee:1a:ae:0b:1d:c7:07:c3:5a:a4:31:
         69:ce:94:a2:a9:33:0b:c8:d1:29:1c:93:86:81:a4:d0:b3:b7:
         bb:f4:4c:0f:a2:de:7f:64:2e:76:9e:66:2e:44:4d:bf:e5:16:
         59:b4:3a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:04:54 2025 by rpki-client