Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/1d07058c-91e1-3e8c-b855-66b4e81e6476.roa
File:                     1d07058c-91e1-3e8c-b855-66b4e81e6476.roa (raw, json)
Hash identifier:          84we38dQ4AxsjCCWLp2tWpwzTPYWIZRspGPoxTe32uQ=
Subject key identifier:   7C:E8:F8:6E:34:C3:0B:F4:FD:7D:22:ED:FD:CB:E0:2A:8B:F7:92:77
Certificate issuer:       /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
Certificate serial:       010D0C9F4328584953C44B71D797BBF066500D51
Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/1d07058c-91e1-3e8c-b855-66b4e81e6476.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        170.225.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:4b:71:d7:97:bb:f0:66:50:0d:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=858f62a5-7452-4375-a0a1-5d742d112733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:79:32:31:6b:e0:c4:d2:b8:fd:47:27:c7:60:
                    49:a7:fa:20:21:0e:50:e7:ef:13:a1:4d:52:ed:78:
                    74:34:6e:31:95:73:27:48:98:80:c2:e8:cb:28:6d:
                    da:5e:0d:a0:2c:99:2f:71:2f:dd:7d:5f:01:26:07:
                    99:50:f6:35:c4:1d:2f:23:f3:03:1a:60:72:59:d7:
                    53:f1:1d:82:8d:81:8b:e3:71:d2:42:26:49:67:be:
                    f3:78:ad:f5:82:ce:a1:4c:67:df:ad:fd:54:bc:6a:
                    8a:1c:e8:d7:3b:67:c0:e5:ad:2c:dc:ed:7c:76:b9:
                    b2:c0:b1:f6:08:34:3f:ec:75:12:27:36:a2:a0:73:
                    3c:44:c8:89:43:11:73:4f:1f:30:95:38:c8:b0:dc:
                    75:dc:8b:e2:8c:55:83:e6:7f:80:35:62:82:2b:77:
                    62:d3:41:db:1b:42:56:f1:64:c7:87:c3:0b:72:3e:
                    ab:9c:5d:43:4f:5a:cc:51:9e:a6:c0:b7:ee:79:f5:
                    66:4b:18:c2:67:42:8b:56:db:45:d7:f5:90:77:ec:
                    40:e4:8e:00:c2:44:66:12:9d:8c:ee:42:b2:93:1d:
                    6f:03:31:7d:bd:d7:5f:be:62:ee:88:2d:dc:50:dc:
                    8d:fb:64:50:44:20:ac:8c:15:2c:26:78:00:de:02:
                    1a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E8:F8:6E:34:C3:0B:F4:FD:7D:22:ED:FD:CB:E0:2A:8B:F7:92:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/1d07058c-91e1-3e8c-b855-66b4e81e6476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl

            X509v3 Authority Key Identifier:
                keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.225.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:e3:b5:03:c9:ad:14:fa:f3:f9:95:89:69:eb:eb:c8:9a:8f:
         cd:60:9e:5a:6a:36:c7:c3:b7:84:f2:66:50:bf:a6:ce:af:91:
         80:c7:24:e3:f1:ea:68:ea:f0:cf:20:b0:4e:a3:42:73:63:39:
         f5:8f:b8:0b:3e:85:3e:89:b5:57:71:82:dd:5b:e1:3e:23:44:
         c6:c8:f9:42:28:b8:b4:1a:e6:a7:48:2a:a6:f4:bb:cc:83:1c:
         79:2b:2f:ea:98:25:bb:a5:fb:7e:34:9a:b1:25:fa:95:ad:c9:
         b9:51:c8:d2:60:6c:23:c2:ce:a9:14:ee:bf:32:71:46:eb:4e:
         ea:d6:a7:59:94:e2:0a:1a:ce:62:ff:65:67:1c:b6:61:36:50:
         67:be:70:ba:ae:17:95:b8:95:8a:67:42:ba:a8:ed:cc:25:7e:
         02:ff:b6:23:ce:ae:83:db:a6:ec:49:38:9d:50:b2:e7:1e:35:
         8e:4e:03:bc:b4:cc:db:12:02:1a:6d:a4:25:aa:7f:27:c6:d5:
         75:0f:af:f1:d9:7e:5a:e6:f2:eb:e3:f0:0b:70:f8:53:06:5c:
         44:5a:b2:06:e5:b3:2e:b6:16:c7:b1:8e:7f:d5:0f:43:d1:aa:
         94:52:00:e3:c8:ec:f9:05:1d:52:d1:09:8f:f0:30:7c:7d:34:
         c2:9c:08:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:38:17 2025 by rpki-client