Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/f3449d09-d701-35da-bb14-a8ab89190e72.roa
File:                     f3449d09-d701-35da-bb14-a8ab89190e72.roa (raw, json)
Hash identifier:          xuDHGJ8/OcAIzgDAEl+8t7MHxG1tvAut/RjQHMYNomI=
Subject key identifier:   6B:D3:2B:5C:3D:09:D7:D1:18:72:D7:9A:08:5B:7E:93:DC:E5:37:FC
Certificate issuer:       /CN=9050423a-b7ae-4879-a880-ea3be6e193a8
Certificate serial:       010D0C9F43285848FD56B599AD1E22532A06FD00
Authority key identifier: E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/f3449d09-d701-35da-bb14-a8ab89190e72.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        168.151.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:b5:99:ad:1e:22:53:2a:06:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9050423a-b7ae-4879-a880-ea3be6e193a8
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=b359a062-117b-408f-8dca-71684751833c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:86:b6:00:62:50:13:43:eb:a7:63:34:f9:3d:
                    27:9a:7b:da:17:4b:95:ac:72:a2:dd:d1:ef:16:28:
                    2f:15:f6:4f:e2:f6:c6:95:b7:c9:11:38:b2:19:93:
                    53:fd:f7:94:25:cf:26:6c:29:80:5a:8d:f8:f9:97:
                    02:34:6a:a3:43:a6:94:ef:1c:62:c2:8c:e3:be:f6:
                    8e:c9:15:a5:a1:6f:9d:63:80:7a:d5:81:f3:d9:11:
                    08:45:a3:c4:d5:35:b7:bd:11:da:3e:2f:23:51:aa:
                    39:e4:4e:5e:58:e5:5c:97:bc:9c:0a:75:9c:c0:e3:
                    38:57:c7:90:ac:64:dc:5f:f7:c5:26:1d:3d:25:3a:
                    4d:72:66:9e:e3:03:39:e7:df:6c:e0:47:fc:22:f8:
                    a3:5e:da:1a:68:7b:70:ee:1f:5f:a0:13:29:e3:ae:
                    50:d6:11:40:b9:2d:f5:6a:18:5d:f5:98:0c:f7:db:
                    36:cd:e4:6b:b6:2c:5d:28:06:a2:44:aa:d0:70:76:
                    41:07:4a:65:42:ff:77:00:96:80:c0:0e:56:b7:84:
                    81:b6:f9:b5:cc:07:d4:0e:c6:83:23:2a:13:04:2f:
                    07:06:aa:26:c8:1a:ed:85:47:a1:39:11:9a:47:1e:
                    c9:8b:82:2c:fa:9d:6f:7f:9f:eb:af:88:10:45:5b:
                    54:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D3:2B:5C:3D:09:D7:D1:18:72:D7:9A:08:5B:7E:93:DC:E5:37:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/f3449d09-d701-35da-bb14-a8ab89190e72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl

            X509v3 Authority Key Identifier:
                keyid:E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.151.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:f0:cb:b7:15:e6:32:01:78:08:34:80:66:b9:cd:0d:45:22:
         b5:86:a1:98:05:40:56:ce:84:3b:c5:fb:74:df:31:97:0b:96:
         9c:50:9d:a9:98:95:e2:98:db:0b:da:26:98:64:4e:73:7b:82:
         f2:3e:1c:57:dd:e9:ca:9b:6e:46:5f:98:ce:cf:bc:6b:4c:19:
         f4:59:15:4b:18:f6:39:b4:54:17:71:27:29:d0:ff:e9:3d:ff:
         c8:3f:a5:53:cc:12:2b:74:d7:fe:3c:73:e1:17:d1:10:6b:d0:
         40:3a:1c:b5:04:24:66:e5:67:61:6c:78:2b:3f:76:0e:2c:94:
         d7:8f:04:8c:71:cd:2e:0a:e7:5d:19:4e:5e:12:aa:32:7d:31:
         2e:a7:61:00:74:33:51:62:c9:d7:37:6e:39:ed:05:0f:ba:90:
         df:57:ff:3f:89:1b:b3:b6:0f:58:33:01:75:a5:0b:7e:43:aa:
         51:98:60:d2:46:56:47:8c:f6:1a:f9:fd:23:aa:8d:44:4a:70:
         43:6d:b3:33:78:7c:88:b8:56:0b:95:52:eb:1e:c4:a0:d4:53:
         e5:64:e6:97:c2:9d:54:69:eb:b9:16:c3:60:75:cf:3d:46:11:
         18:bf:2e:95:51:24:50:19:9d:04:00:4c:7a:03:45:37:3b:31:
         3e:bd:3b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:40:50 2025 by rpki-client