Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/48f1c7a9-7c6b-38ee-af5e-03a70ac11bac.roa
File:                     48f1c7a9-7c6b-38ee-af5e-03a70ac11bac.roa (raw, json)
Hash identifier:          xwCEIaEb5xglIgeRCI2fIvMEnuVmifOKvZRH+OTQj+Q=
Subject key identifier:   3C:7D:95:E5:CA:FA:3E:DD:2B:89:73:97:FD:A7:31:3F:51:02:1C:15
Certificate issuer:       /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
Certificate serial:       010D0C9F4328584940394F72349764A76DB71800
Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/48f1c7a9-7c6b-38ee-af5e-03a70ac11bac.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     14618
IP address blocks:        170.225.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:4f:72:34:97:64:a7:6d:b7:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=83b7fe8d-33a6-4055-88e6-b84d02e67ddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:44:51:66:3f:65:90:67:4c:5b:db:98:fc:7f:
                    7d:c0:e6:9a:57:f1:da:da:07:75:3b:29:2c:79:c9:
                    1b:03:67:dc:31:91:47:2d:eb:9d:a4:33:58:4d:27:
                    8a:e3:cd:ac:64:74:58:0f:7d:3a:6b:93:d1:31:56:
                    54:fd:04:14:9e:6a:42:36:77:b6:04:83:05:10:3a:
                    2a:d1:34:02:e7:a3:6f:e1:7b:4e:e3:97:04:6b:cf:
                    1a:ab:07:98:7e:72:fe:08:e5:91:9c:65:39:08:15:
                    e6:dc:1f:26:e4:6e:89:7a:38:5a:13:cb:93:21:37:
                    a2:34:5f:a2:1b:7a:2e:0f:79:f8:c3:0e:59:dd:7a:
                    44:48:0e:33:ea:17:f5:3e:4f:34:3a:e5:35:03:a1:
                    82:c1:95:fa:b7:ca:72:e1:82:a1:50:4c:fc:e6:d9:
                    71:52:3e:b9:44:c9:96:ea:1f:16:03:82:7c:50:78:
                    c2:bb:3c:97:03:5f:d7:69:c5:80:b6:4f:9d:64:0a:
                    f5:a5:42:a2:4e:26:a7:3f:81:40:a5:d1:0d:21:0a:
                    b4:20:84:6c:bd:a8:4e:ca:78:4b:ff:ab:8d:76:4b:
                    92:91:34:48:ba:a4:6a:37:b0:60:d5:46:75:fa:4a:
                    5b:b2:57:d2:04:cb:13:15:ae:76:c1:04:bf:8e:f8:
                    93:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7D:95:E5:CA:FA:3E:DD:2B:89:73:97:FD:A7:31:3F:51:02:1C:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/48f1c7a9-7c6b-38ee-af5e-03a70ac11bac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl

            X509v3 Authority Key Identifier:
                keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.225.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:00:fb:09:59:50:a9:e7:82:85:07:27:7c:db:63:5c:30:b2:
         50:b0:64:11:f1:41:8b:82:bc:74:a9:ee:fc:a4:af:49:6a:0d:
         a3:36:0f:69:e3:44:29:fc:09:82:d6:76:5a:b7:9e:75:6e:10:
         bf:74:c6:af:59:af:ec:82:9c:70:16:3b:ca:58:ce:93:49:49:
         94:27:05:d3:44:fc:79:2c:e4:02:dc:93:cd:a7:f3:58:f8:b9:
         31:3e:f2:de:d6:c3:4e:6d:3d:bd:62:f8:54:32:e1:8a:50:d3:
         b2:64:3b:13:26:91:0b:0b:4c:a8:40:a5:f8:ab:24:d8:43:18:
         47:df:e9:fb:20:74:df:de:e1:43:9d:a9:c3:92:61:58:6b:02:
         8a:ac:50:09:3b:b5:7e:3e:44:62:62:98:0c:4e:b9:96:ae:23:
         19:ac:b1:1b:ae:a0:b9:a7:27:21:71:46:eb:2a:62:26:70:3d:
         f4:0a:4c:35:d3:9b:93:68:61:84:3f:7f:56:88:57:90:f4:20:
         4c:bb:d5:ad:92:19:68:de:26:8d:70:18:9c:ae:47:68:3e:d2:
         ee:ad:3f:9d:ad:fa:b5:3b:88:7a:a1:e5:44:c9:fc:77:b0:ca:
         15:38:52:04:4e:79:ba:3c:a9:0b:58:80:cd:f0:1e:3f:1f:fc:
         a0:3e:40:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:47:49 2025 by rpki-client