Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/75d67716-50ab-36d5-8294-d9fe9807e30a.roa
File:                     75d67716-50ab-36d5-8294-d9fe9807e30a.roa (raw, json)
Hash identifier:          l3cdYN3vq2NW8CZpn1TRYlHJkL5Y1rH0EtccqBkyf5c=
Subject key identifier:   D6:44:35:79:AA:D3:31:CF:DD:C5:F1:EF:2B:55:21:DB:09:4B:81:01
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584910E1775FB5EBBB1FEE6CC6C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/75d67716-50ab-36d5-8294-d9fe9807e30a.roa
Signing time:             Mon 03 Mar 2025 14:00:53 +0000
ROA not before:           Mon 03 Mar 2025 14:00:53 +0000
ROA not after:            Sun 01 Jun 2025 13:00:53 +0000
asID:                     13335
IP address blocks:        173.245.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:10:e1:77:5f:b5:eb:bb:1f:ee:6c:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  3 14:00:53 2025 GMT
            Not After : Jun  1 13:00:53 2025 GMT
        Subject: CN=0c950c72-835f-48bb-ae12-378bd618edcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:00:6b:7e:ad:be:3c:ac:57:05:b9:94:9c:ef:
                    e9:57:51:e8:9e:5f:7c:55:a2:a8:b7:52:c0:1d:fb:
                    82:f6:06:7a:dd:88:8f:dd:59:46:f8:3a:c3:95:bd:
                    0e:e5:eb:10:47:4d:4c:81:c6:a3:cd:f6:53:55:29:
                    46:16:a6:60:fa:95:0c:d8:dc:e8:f4:39:81:a1:ba:
                    a5:70:41:86:30:a9:cb:09:13:2a:61:d7:7e:f3:65:
                    46:46:fb:82:6d:6d:41:c3:04:00:da:c5:3a:d4:43:
                    82:d4:69:e5:7f:1d:8b:57:23:d6:55:0a:22:49:7a:
                    f5:ae:4e:1f:18:14:f0:3d:59:af:f3:b6:ae:b8:af:
                    7b:fb:de:3d:1b:cc:54:12:71:ef:bc:c9:e8:67:46:
                    0e:fb:a0:19:06:20:12:e3:af:0f:a6:f7:d1:82:68:
                    f3:a4:83:0c:a2:d4:f8:4c:6b:7a:df:23:ca:66:0d:
                    43:88:05:c8:f0:8d:61:67:20:13:c8:49:f9:a4:0f:
                    78:a6:03:51:0e:ad:9a:82:1f:70:2a:aa:c0:cc:f5:
                    78:62:d1:67:c1:9d:21:fd:c5:78:36:82:4e:4f:87:
                    68:e9:48:ad:c8:76:a1:ca:b7:dd:d8:65:eb:21:88:
                    93:71:83:6e:a2:e2:93:08:63:1c:ff:73:60:bc:de:
                    63:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:44:35:79:AA:D3:31:CF:DD:C5:F1:EF:2B:55:21:DB:09:4B:81:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/75d67716-50ab-36d5-8294-d9fe9807e30a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.245.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:31:7c:66:d2:ea:b1:91:0c:8f:f9:22:66:57:de:68:ed:58:
         36:f7:f1:e9:8f:41:39:be:38:99:f3:0f:16:8b:f6:ed:13:55:
         4f:cf:94:4e:bb:8f:4f:98:1c:b6:85:64:52:a8:e9:77:9d:29:
         c5:c6:6a:8d:c0:ac:ea:29:37:38:37:bd:a1:05:bc:20:1b:df:
         c1:5d:ab:19:b0:b3:ef:9e:90:88:e2:3f:fb:9f:96:58:a6:fa:
         65:2e:b8:36:b1:75:ca:c5:2f:01:c6:51:2c:26:6d:95:39:d5:
         3c:cf:33:9e:83:59:8f:5e:98:6c:72:04:7d:de:c3:32:18:92:
         ff:10:fb:3a:dd:03:73:5b:fa:bd:81:9c:cf:29:47:43:d2:2b:
         d2:be:54:8c:f2:c8:4d:b3:16:9f:2c:04:15:73:34:be:59:dc:
         2d:d5:b7:18:43:44:ff:22:9a:f5:fd:94:df:f5:65:b0:c6:2c:
         a8:33:3f:59:5b:4c:97:79:9b:83:88:d4:d3:94:07:92:42:6f:
         b3:a6:36:e1:48:f7:26:35:7c:f0:bf:84:e8:46:14:29:15:60:
         a3:1f:a8:24:71:35:36:71:70:c3:c4:60:ff:2b:11:6f:bb:35:
         83:ab:ed:6a:fd:6e:ec:fe:61:83:ac:45:88:95:91:07:b9:a4:
         df:04:af:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:59:48 2025 by rpki-client