Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24798a7e-934a-3a88-8723-95fb8c3ae114.roa
File:                     24798a7e-934a-3a88-8723-95fb8c3ae114.roa (raw, json)
Hash identifier:          K9KWSEiz+9SZPPmvojwmfmEDdI5tmncYnUC6YpdrSfQ=
Subject key identifier:   4D:3F:72:5F:9E:A5:CE:EA:A9:15:4C:51:E9:11:62:57:15:FC:7D:7B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492184176CC77597979EF45BCC
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24798a7e-934a-3a88-8723-95fb8c3ae114.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     33656
IP address blocks:        68.86.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:17:6c:c7:75:97:97:9e:f4:5b:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=7c4debe5-4add-4396-a562-096ee5ad42f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6b:9f:c9:eb:0e:96:67:37:47:96:c4:63:fb:
                    98:61:f6:1e:3a:79:6a:a2:af:aa:51:a2:67:69:e9:
                    46:7b:5a:55:04:9b:15:09:53:b5:3f:0b:88:40:63:
                    37:e9:01:6d:84:6b:ee:9d:81:50:fd:28:f8:77:91:
                    23:b0:36:e3:83:34:99:c5:70:be:82:85:e0:e0:e1:
                    8a:9a:69:49:0e:ed:1b:11:dc:19:ff:2e:e5:37:ad:
                    5a:fa:51:b7:47:f8:a2:2f:d6:8d:70:d1:40:d6:69:
                    7c:ac:53:56:2c:61:51:95:9c:81:cd:2f:8c:17:95:
                    04:3d:8a:11:22:0a:db:51:91:95:33:5c:0a:e5:76:
                    6d:5b:3a:26:a5:26:76:69:63:3f:7f:ca:a2:a4:65:
                    8a:be:72:ec:de:bb:7e:70:1c:ce:24:29:d4:9d:2e:
                    ff:b6:88:34:43:3d:3d:7a:da:76:03:f1:5c:37:05:
                    42:37:d3:c3:ab:cb:e6:45:c1:a4:ad:cc:e0:18:fa:
                    1b:e7:af:7d:0d:c4:d5:fe:8b:c3:86:e2:0b:bf:ad:
                    6e:ab:8e:09:8e:50:d1:ad:7f:d1:cd:3d:fa:c1:9b:
                    e7:4b:ee:63:59:ae:5b:88:87:e4:bd:78:2e:23:06:
                    00:6d:9b:6b:f3:a5:3f:50:6f:fd:de:16:0f:7e:8b:
                    8a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3F:72:5F:9E:A5:CE:EA:A9:15:4C:51:E9:11:62:57:15:FC:7D:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24798a7e-934a-3a88-8723-95fb8c3ae114.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.86.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:8b:99:b0:bd:15:f5:29:22:d5:d9:9e:0a:c8:a3:13:60:c5:
         ab:74:d4:c4:58:af:0e:a1:11:1b:d3:d4:51:72:fe:ef:e8:25:
         85:3a:9f:67:bd:b8:42:78:fa:98:fa:ff:75:a5:b7:62:82:2a:
         e9:ec:df:c0:02:45:39:b2:47:7a:09:0e:a9:6f:04:0d:01:4d:
         73:ab:e4:42:49:90:3b:c0:27:1d:23:a4:5a:c4:5c:3a:4d:d3:
         75:93:d6:72:66:93:51:77:98:44:52:15:e4:8f:af:33:11:bf:
         94:1a:33:fe:66:bc:f1:ab:59:7e:9e:70:fd:7e:a1:0c:7d:24:
         e6:7b:d1:98:cf:ad:b8:68:46:bb:2e:ed:96:ec:1c:9d:b8:67:
         f2:87:da:39:aa:cf:85:13:62:43:89:4f:cb:cd:b9:bb:c4:b7:
         7b:99:42:90:b5:b6:d0:18:63:82:ee:a0:dc:1b:c2:fd:47:80:
         8c:34:86:d2:05:7b:19:e5:32:59:5a:89:cd:58:46:2a:74:f8:
         c3:69:85:f5:0d:3f:ee:99:74:93:87:44:d9:e9:2d:44:40:81:
         6c:c5:3f:9d:54:33:cc:de:37:15:0e:d7:55:75:dd:c5:3c:fc:
         a9:4b:5d:a4:d6:08:7b:1f:46:19:64:48:bd:61:cf:0c:b9:35:
         52:40:1a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:36:36 2025 by rpki-client