Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/ed0d4fcb-99d1-3454-b169-336cb304a995.roa
File:                     ed0d4fcb-99d1-3454-b169-336cb304a995.roa (raw, json)
Hash identifier:          IdsKzO/LGIFmgO8IIPZ/pXHaVJxFQPVE9j9AUNxr1T8=
Subject key identifier:   0E:B6:C0:74:CF:56:45:AB:FE:3A:43:0A:93:8B:7B:B4:D7:7F:4A:15
Certificate issuer:       /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
Certificate serial:       010D0C9F432858494303EC11523D5834AE99BFA0
Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/ed0d4fcb-99d1-3454-b169-336cb304a995.roa
Signing time:             Fri 21 Mar 2025 13:00:50 +0000
ROA not before:           Fri 21 Mar 2025 13:00:50 +0000
ROA not after:            Thu 19 Jun 2025 13:00:50 +0000
asID:                     763
IP address blocks:        170.225.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:43:03:ec:11:52:3d:58:34:ae:99:bf:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
        Validity
            Not Before: Mar 21 13:00:50 2025 GMT
            Not After : Jun 19 13:00:50 2025 GMT
        Subject: CN=2d235858-2a9b-4f8c-879d-e2f421eeede3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:07:46:ea:ff:c5:4a:91:bb:39:2c:2a:d0:ce:
                    38:d6:a6:88:45:9c:38:9d:62:33:32:90:a5:c6:22:
                    f7:25:d7:84:1a:96:81:bc:56:9b:51:6f:1f:e8:70:
                    9c:f1:be:0d:37:61:79:de:99:21:e7:cb:07:91:1e:
                    27:29:59:8d:fb:dd:db:04:60:2b:af:77:c5:96:70:
                    db:72:40:60:39:d6:db:4a:5c:7a:64:96:26:78:ef:
                    06:d6:61:44:0c:e4:47:90:fb:83:fe:50:d1:a5:9f:
                    82:a7:56:0f:9c:32:74:fd:df:a8:2e:af:f6:19:1a:
                    3b:5b:8c:a3:3d:24:c9:a3:d2:6d:c5:1c:bb:b3:4f:
                    68:44:c8:06:bf:c7:e5:e7:5c:12:c1:de:59:71:b4:
                    96:ce:4e:c9:d6:a8:24:dd:d2:5a:ef:cd:3f:b5:9a:
                    70:50:44:ab:89:6c:c6:f6:49:f0:04:07:25:78:55:
                    06:08:71:7b:fa:c1:82:cc:3b:c0:0d:37:fc:fe:f1:
                    e4:0d:38:f8:c5:81:c9:c4:4f:95:e4:b0:7f:b2:c8:
                    e8:d3:9b:0e:4b:74:29:09:70:df:de:3c:aa:7c:a7:
                    a6:9c:31:5a:74:9c:19:7a:17:5e:ac:84:07:fe:38:
                    72:4a:82:13:80:fe:36:56:91:9f:e9:7e:73:f6:bb:
                    a0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B6:C0:74:CF:56:45:AB:FE:3A:43:0A:93:8B:7B:B4:D7:7F:4A:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/ed0d4fcb-99d1-3454-b169-336cb304a995.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl

            X509v3 Authority Key Identifier:
                keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.225.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:3a:5f:dd:07:04:8a:13:3a:a3:57:25:9a:ce:e5:32:9e:9b:
         ad:c1:cc:ec:f4:2a:7f:8b:62:0e:87:05:32:17:79:39:32:d2:
         82:95:21:6f:3b:39:50:88:c5:7b:a2:b0:3b:a2:68:c3:de:82:
         04:f8:09:00:3b:a4:c3:52:ca:cd:dd:9b:26:3c:03:8e:8d:46:
         10:c9:ab:04:6d:b5:ca:16:87:8f:72:b7:76:25:20:25:a2:f8:
         d1:24:b0:9b:ba:37:5e:54:23:57:0c:3b:cf:99:b4:1c:a8:db:
         e0:9b:64:d4:4c:1c:98:22:a8:8b:b7:43:49:5d:e5:54:ea:17:
         c0:db:83:9e:45:5a:d8:b4:b3:4d:2e:83:af:4c:ac:52:09:87:
         e9:fd:0a:da:c1:6f:11:65:a8:53:b2:d4:0f:78:18:00:fc:ba:
         f4:57:b4:87:59:b7:97:12:d8:cf:47:23:73:c7:80:c1:6e:d9:
         1e:e1:a3:3b:78:bc:85:15:53:08:ca:2e:12:42:f6:ff:1e:15:
         91:9b:12:91:b9:d1:53:31:93:f1:38:1d:78:bc:1f:ca:98:fc:
         94:7b:2d:b8:ac:0a:91:a9:ce:61:91:08:ed:2c:30:18:87:07:
         0e:e3:7f:9b:59:e8:f1:75:47:33:9e:cd:12:fc:59:eb:4e:0a:
         96:dd:ed:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:05:37 2025 by rpki-client