Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/78493978-30fa-398e-a703-c2ee60aff3f0.roa
File:                     78493978-30fa-398e-a703-c2ee60aff3f0.roa (raw, json)
Hash identifier:          Ke6UsL15GRL0z/1e+H5RHeYmCYhRvRQcpMzUqoGHn1U=
Subject key identifier:   4C:7F:E3:4D:F1:28:2B:DB:8B:8E:E4:0B:DC:ED:0D:E7:FA:06:C1:92
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285849393E838725A480343AE1C580
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/78493978-30fa-398e-a703-c2ee60aff3f0.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     5650
IP address blocks:        168.93.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:83:87:25:a4:80:34:3a:e1:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=2500a6c3-fa48-4b74-8c9e-da8279eda62f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:30:79:d9:c5:41:4c:b9:81:4e:3a:9a:5d:ab:
                    e6:10:d1:40:21:49:8d:25:cb:a3:e5:54:f7:f0:60:
                    9e:a3:d4:e3:4e:3e:f0:0e:9d:4a:81:84:ad:fa:95:
                    17:73:4f:8a:03:35:18:2d:46:75:91:19:44:e8:f4:
                    9e:c7:00:71:6f:60:89:f3:d1:3a:aa:8b:ca:ee:da:
                    66:2f:64:95:c8:8c:c2:b4:1b:0c:37:eb:71:3f:f1:
                    2a:cf:43:71:63:53:06:31:36:a4:4e:0c:f2:5b:a6:
                    8b:99:3b:07:d6:1a:24:d7:5d:f0:f1:e9:d7:a7:52:
                    e2:a8:60:e8:cd:32:e3:26:69:11:94:7a:51:d1:94:
                    f2:aa:45:da:88:cd:7f:b8:c0:6d:20:fa:ec:f2:c8:
                    3f:51:bc:37:0c:1b:b4:f2:c5:14:40:93:a2:29:1a:
                    9a:f7:e6:e3:23:a6:ee:90:7f:d3:33:6d:54:0c:c6:
                    fe:ed:35:81:26:83:1a:9a:75:83:70:d9:b3:8a:66:
                    35:7e:f9:c4:21:cf:ee:ac:47:ab:71:8c:2d:67:94:
                    4e:83:a1:ed:85:68:eb:33:b0:0d:41:d2:73:14:8b:
                    3a:ea:be:5e:fe:4e:ba:9f:c2:83:80:1d:6f:ba:d0:
                    7d:09:4f:32:8d:70:15:16:d8:74:e4:4f:c2:98:ae:
                    73:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:7F:E3:4D:F1:28:2B:DB:8B:8E:E4:0B:DC:ED:0D:E7:FA:06:C1:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/78493978-30fa-398e-a703-c2ee60aff3f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:19:60:3a:c2:6e:0f:a7:4b:91:68:0e:8a:79:23:e9:e3:4b:
         03:62:df:81:bb:38:3b:cb:df:f0:29:86:fd:56:1e:21:49:62:
         f6:9d:ea:88:1b:be:c2:c8:e8:a1:3d:f2:bd:9b:c7:5f:2c:32:
         ef:fb:37:4c:a8:2f:d8:b2:0b:82:ed:a7:aa:23:65:14:27:3f:
         90:d3:02:36:c4:bb:3a:6a:bc:5f:e8:a5:74:0c:0b:67:b9:1d:
         59:44:15:6f:12:65:76:9d:96:05:be:04:77:ce:d9:b1:aa:77:
         bf:3a:ad:ae:85:1c:b1:c3:65:91:db:dd:5d:87:2e:89:e8:58:
         57:61:d7:68:0f:45:b2:0c:e6:f5:2d:b8:f2:f4:54:4c:73:f0:
         d6:5c:63:1a:e4:c1:82:00:5e:f2:06:56:a1:c8:c9:fa:07:e5:
         6c:25:2e:bc:ba:35:df:c5:94:b2:76:21:a9:c9:63:3d:29:ca:
         4a:ba:b6:9c:1a:10:d2:0c:95:db:40:13:69:1c:59:8e:a0:63:
         be:e6:eb:82:e1:c3:8b:cb:78:f8:1a:84:92:03:54:d6:58:d0:
         93:e2:76:70:3d:94:d7:02:1b:31:0a:35:64:ed:f5:b8:cb:2c:
         34:b9:2b:8b:92:fc:0e:45:6b:1e:ab:50:d6:ca:c7:a0:77:d2:
         a0:7f:8b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:39:36 2025 by rpki-client