Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/59dc03e5-ce18-3759-89a6-357fcdff5974.roa
File:                     59dc03e5-ce18-3759-89a6-357fcdff5974.roa (raw, json)
Hash identifier:          eCZh/45gubp9gCH4IslFtKqrFy4W7Ih2F9KJTPT++Kg=
Subject key identifier:   E5:ED:40:BF:82:C6:60:80:7D:61:4E:B0:71:B0:C0:A6:89:D6:92:3A
Certificate issuer:       /CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
Certificate serial:       010D0C9F43285848D90BB801824FFA1C9543B700
Authority key identifier: 80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/59dc03e5-ce18-3759-89a6-357fcdff5974.roa
Signing time:             Tue 11 Feb 2025 14:00:52 +0000
ROA not before:           Tue 11 Feb 2025 14:00:52 +0000
ROA not after:            Mon 12 May 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        159.242.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d9:0b:b8:01:82:4f:fa:1c:95:43:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
        Validity
            Not Before: Feb 11 14:00:52 2025 GMT
            Not After : May 12 13:00:52 2025 GMT
        Subject: CN=54c5901f-7f52-4bac-90e0-7e6e4935c79d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9a:8d:bf:e3:a0:99:f1:94:3b:95:d5:3a:d2:
                    e9:68:69:33:26:72:08:5f:07:8c:73:97:35:31:66:
                    98:98:23:cb:fd:da:89:95:f5:da:d2:e5:da:e8:d9:
                    f6:61:40:2d:ec:bd:df:ab:aa:7f:3a:43:27:ee:72:
                    41:1b:91:3c:00:a6:03:3e:62:00:90:28:d3:6c:d8:
                    81:53:a6:39:ee:52:bf:2c:3f:1c:76:a2:f1:17:52:
                    16:69:18:e8:f7:8a:12:4c:0d:6a:f8:25:20:45:d5:
                    c3:7f:ac:7e:58:c3:64:f0:44:31:e3:5b:9a:33:a7:
                    81:69:a4:9e:e9:b6:07:3e:33:ea:2f:9d:09:3e:02:
                    0c:e4:53:a4:7d:24:c6:44:e2:f0:92:8f:f6:c4:7b:
                    c3:4c:0c:f5:4c:e4:d9:21:1f:7f:cb:49:3f:25:f1:
                    1b:d4:15:8d:04:d0:d4:da:73:45:2a:45:49:eb:c1:
                    6b:32:23:62:7d:43:5c:63:ca:b9:7d:ce:60:09:90:
                    24:e7:37:f3:48:02:32:df:2f:ff:9f:10:32:8a:59:
                    eb:57:19:cf:59:9d:40:67:8b:9e:dc:b3:ef:fe:a9:
                    df:81:10:38:d4:f6:a6:8e:11:7d:86:75:71:f6:e2:
                    b6:f5:25:a9:f7:8f:ee:ba:3b:f3:ca:7f:44:88:26:
                    6f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:ED:40:BF:82:C6:60:80:7D:61:4E:B0:71:B0:C0:A6:89:D6:92:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/59dc03e5-ce18-3759-89a6-357fcdff5974.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl

            X509v3 Authority Key Identifier:
                keyid:80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.242.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:ad:52:52:88:3d:0e:e5:62:1d:41:5c:23:1f:7b:60:25:88:
         90:41:21:ce:6a:12:62:73:ac:91:c0:2c:f7:db:9a:e3:d1:fa:
         fe:15:f4:03:02:0d:39:8a:bd:be:bb:d8:be:59:74:7f:01:d0:
         60:cb:20:4d:00:08:ad:c8:85:5b:45:22:ce:9e:b6:b5:42:32:
         6e:13:10:a1:31:db:d5:24:8b:af:1e:f8:c0:c5:4d:f4:fc:fe:
         29:8b:51:3b:24:90:e1:b8:a0:32:8b:cb:4b:59:d1:41:7c:89:
         2e:44:6c:77:94:6d:45:44:44:3c:4f:25:88:68:4c:c3:65:be:
         1e:61:6f:68:51:ae:68:1a:c2:34:7d:6b:fc:44:cf:09:2b:00:
         b7:dc:a7:af:f9:e5:bc:b7:ed:c8:c1:3b:50:da:f0:fe:b2:f0:
         74:f5:4f:07:87:f2:28:24:d5:3b:6d:be:57:7b:50:0a:3f:79:
         59:6d:da:73:be:dc:c6:35:8e:9f:5f:46:78:c0:5d:e6:06:22:
         f3:35:91:e2:03:4b:66:87:58:06:67:c0:a1:73:41:2d:f6:f2:
         64:2a:24:95:6a:78:0f:33:0a:fc:e9:6d:59:5d:1f:92:3c:de:
         25:3b:22:2c:33:34:28:11:10:e5:3d:46:25:fb:e7:16:07:46:
         96:35:bf:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:59:42 2025 by rpki-client