Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/0fb17b1b-6c0a-3447-9a1d-272c66438b8b.roa
File:                     0fb17b1b-6c0a-3447-9a1d-272c66438b8b.roa (raw, json)
Hash identifier:          BIJY5/XdntlVJgilF1hObXmlWOkAP393vgQU14i0OWc=
Subject key identifier:   01:BB:4B:21:6A:EB:29:15:0F:0B:8C:4A:76:2D:55:F8:0B:09:D3:71
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584905B6AB8E9D80227B03592E00
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/0fb17b1b-6c0a-3447-9a1d-272c66438b8b.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     395290
IP address blocks:        65.158.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:ab:8e:9d:80:22:7b:03:59:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=175fd080-4b78-4b69-9987-40f6c0b98fba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:90:3b:76:76:db:f2:a5:5c:3b:b1:50:a4:8c:
                    c3:c8:a6:c4:a6:92:52:d8:93:ac:c5:ec:82:a9:bd:
                    9a:83:e5:aa:ea:fc:99:b9:df:cd:78:a9:6a:d1:b7:
                    c8:96:d5:83:a3:5d:64:5a:10:ca:c1:9a:bc:a5:ce:
                    69:a7:d2:8d:30:13:d0:3f:97:8f:01:30:3a:91:6b:
                    2c:7f:ee:3b:2d:ce:bf:03:8f:78:d8:54:8e:7d:9e:
                    f3:2b:98:96:eb:37:27:8c:5e:16:5d:de:f6:d6:64:
                    2e:ad:e4:f1:aa:6d:d7:25:a1:a5:04:a7:b7:ea:5c:
                    9f:08:3b:d7:d8:bd:15:0b:0e:1c:a7:84:f9:7f:64:
                    49:a0:59:80:90:1f:aa:3a:09:09:da:13:21:50:1c:
                    81:57:74:0e:7f:83:3d:77:9c:d2:fd:46:b3:5e:ab:
                    99:f1:0c:90:37:e4:0d:83:95:bb:7b:19:0e:de:cd:
                    f3:1a:2a:66:5d:d8:c4:77:c2:76:b5:d5:79:06:3d:
                    37:12:52:75:0c:72:6f:db:6f:e1:71:fd:31:ad:03:
                    29:56:24:e6:02:e5:02:b2:48:63:53:a8:24:80:93:
                    37:f2:88:9e:b8:7b:e3:47:69:9b:d1:d3:38:ba:51:
                    81:ec:b7:b9:52:3d:a3:81:b9:18:8a:15:f8:f2:62:
                    f8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BB:4B:21:6A:EB:29:15:0F:0B:8C:4A:76:2D:55:F8:0B:09:D3:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/0fb17b1b-6c0a-3447-9a1d-272c66438b8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.158.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:67:d5:27:ce:b8:37:0d:b0:e3:36:62:b7:f6:fd:89:ac:42:
         39:59:54:41:a3:89:ec:35:f2:1e:5b:f3:8a:55:5a:ff:37:fa:
         79:cb:a1:b9:11:74:74:5e:13:5f:50:d4:57:ea:72:cf:7c:34:
         ed:df:a4:02:26:ed:ce:df:82:0f:5e:b7:71:41:e6:b9:25:07:
         73:23:86:4a:2b:b6:14:10:81:e2:54:2e:ca:33:ae:ce:11:66:
         aa:ad:86:91:a0:c9:41:7f:8c:02:0c:e9:d1:dd:50:fd:fe:99:
         f9:1c:76:09:c1:d9:48:e4:d5:14:e4:b7:46:72:93:78:c4:3f:
         95:09:24:af:9f:4a:31:77:4f:3a:2b:b6:b9:f0:d8:04:84:33:
         ee:24:ad:03:bb:13:29:5a:0d:f9:fa:98:f1:94:ff:c1:e3:c1:
         c9:6c:c3:46:8d:4f:61:f0:19:a9:95:f4:5a:99:93:39:d2:ba:
         07:1a:3d:ca:1d:1b:81:db:42:c7:f3:b5:3c:5e:cd:69:81:d6:
         00:cc:f7:37:14:53:3d:e7:bb:f7:25:8d:21:85:bf:7c:4f:0f:
         0c:00:3d:b4:6a:20:dc:f7:90:40:7a:db:33:0c:af:e0:d2:89:
         86:6b:00:fe:9d:9b:59:f9:e3:af:c0:78:cc:0d:5c:06:0f:5e:
         0b:53:e1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:28:47 2025 by rpki-client