Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/e003425d-3460-3b54-b4cb-c53aee15bc2b.roa
File:                     e003425d-3460-3b54-b4cb-c53aee15bc2b.roa (raw, json)
Hash identifier:          Y5BqPTFmrjipeh9h3qv0Bt5rGoMJ6a3jxe7t8P7Ijvw=
Subject key identifier:   9A:53:8C:61:0A:5E:4F:CE:47:0C:3A:32:E9:84:8D:34:85:38:95:05
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F43285848E2D10EC6DF0A570A4225431B
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/e003425d-3460-3b54-b4cb-c53aee15bc2b.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        192.161.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:0e:c6:df:0a:57:0a:42:25:43:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=3ca18a95-1ea8-4a42-bc2f-820b5423d57c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e2:16:2c:f6:94:8c:94:70:d5:1a:8c:9f:04:
                    3c:ee:fb:d1:c4:ec:18:c9:88:43:d9:6e:b0:53:ac:
                    09:71:d8:fc:22:37:34:f7:19:d5:35:13:4d:92:49:
                    e5:ab:3d:c0:c7:0b:f9:08:27:62:90:64:53:cf:6c:
                    f5:70:ca:59:26:80:6b:08:bc:e4:fb:b8:f0:44:4f:
                    88:8b:cf:40:c6:c0:a7:b8:45:a3:e4:54:29:3e:0a:
                    3c:c1:0a:2a:8c:5c:1b:35:1d:98:a9:c8:4c:98:46:
                    ec:04:03:f8:7b:79:f1:7a:08:74:48:01:cc:85:a0:
                    e4:e2:ad:16:4f:be:85:77:c6:56:47:35:cb:27:13:
                    34:32:53:c2:6b:58:d7:16:6f:0f:9e:00:82:ea:89:
                    28:c8:a0:6f:ef:2e:92:0d:4e:b5:7f:7c:c9:fa:31:
                    35:9e:9c:f8:94:e1:77:f0:27:bc:4f:4c:e8:4d:36:
                    99:31:09:71:14:83:50:54:ea:06:c0:a5:82:aa:75:
                    4e:38:a6:07:bf:fa:d2:91:ec:01:07:ff:a9:34:bc:
                    b4:2d:a2:d5:f6:a8:6e:0d:51:b8:e0:59:1e:59:2d:
                    90:bc:bb:7c:cd:4c:b5:13:06:fd:4e:c4:dd:93:3b:
                    7a:80:e8:26:4b:09:77:b7:67:ae:fb:0c:75:30:e7:
                    f2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:53:8C:61:0A:5E:4F:CE:47:0C:3A:32:E9:84:8D:34:85:38:95:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/e003425d-3460-3b54-b4cb-c53aee15bc2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.161.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:d0:6b:ee:6a:d9:29:bb:51:0d:8a:77:d8:b9:ed:20:50:68:
         6c:2b:7f:87:3b:e2:8d:db:71:c0:37:d4:ba:01:69:4e:c3:b4:
         a1:e3:c4:55:39:6c:06:c4:c4:a5:41:af:c1:66:39:bd:a2:fc:
         61:ec:85:63:25:a2:a0:fc:9b:86:2b:b4:6d:8a:b4:c9:a4:0f:
         41:bf:0a:21:d9:2a:2b:3c:a2:44:0a:44:6d:39:c8:d6:8d:2e:
         78:8f:cf:3d:a5:f0:d5:5a:fe:93:47:e0:48:f1:31:d2:24:b9:
         83:9c:03:e5:f0:d9:e5:b6:a9:47:4e:e9:15:11:da:e3:63:96:
         b9:7c:9d:b7:f5:c6:4f:b3:98:6c:36:4c:3b:08:91:4d:f4:a3:
         7c:cc:dc:03:9f:64:46:11:44:e3:08:75:11:54:e6:95:8b:5c:
         b1:75:16:05:31:70:4b:92:81:fd:c8:97:39:f9:73:a0:30:42:
         34:1e:27:7f:e5:85:ac:23:6d:03:9e:ef:00:da:8c:64:51:43:
         7a:ac:80:00:52:83:ed:ef:03:c3:7e:cc:14:0a:b3:87:7d:14:
         87:e3:a5:6e:27:44:4a:49:77:19:58:c1:e2:cd:e0:50:65:c8:
         0c:06:74:dc:26:5d:6e:c8:15:a7:05:69:4e:7d:15:49:e7:85:
         c8:7b:e2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:52 2025 by rpki-client