Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/79fdc6be-ec03-3930-b9cc-85802fd5a519.roa
File:                     79fdc6be-ec03-3930-b9cc-85802fd5a519.roa (raw, json)
Hash identifier:          KelifBF8/g4IVcnjeuXc+mBStp32Nkx+EvbucvWUJi4=
Subject key identifier:   AE:CB:18:C6:7B:8B:4A:B8:5A:45:3F:22:B2:48:1F:0B:41:4B:6D:1A
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F432858492CAE8C501CFD2CF3C25C8D80
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/79fdc6be-ec03-3930-b9cc-85802fd5a519.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     25645
IP address blocks:        137.239.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:8c:50:1c:fd:2c:f3:c2:5c:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=127c1ce0-c37a-4fce-ae2a-5151a1362279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f0:01:7b:78:ed:35:1e:71:ba:bc:29:ca:d4:
                    e5:a9:b9:a3:12:13:fa:cd:91:16:4d:7d:e8:9c:9d:
                    af:43:7f:2f:bb:6b:ef:4c:b9:46:21:ce:1d:9e:53:
                    37:09:5f:59:ab:97:f3:af:3f:7d:ba:47:6a:42:0a:
                    e2:ce:63:32:82:82:b9:4a:c2:36:c3:e0:8d:de:2b:
                    a6:77:84:88:38:68:39:4c:c8:42:bf:3c:f6:8e:27:
                    7b:38:b5:d2:b9:42:5d:87:bf:e3:6b:f2:eb:df:87:
                    32:a6:a4:ba:d4:37:1d:41:38:d7:35:c8:c4:16:4c:
                    15:54:88:2b:42:84:2f:27:75:6e:c9:d3:5f:aa:cc:
                    71:89:f1:95:07:69:d8:c7:d8:d9:6a:09:3a:7b:b0:
                    a4:32:f7:2b:04:4c:01:16:1d:2f:ab:a1:2a:b7:d0:
                    22:e7:d1:54:42:fe:b8:04:aa:7a:4b:47:fa:d0:1d:
                    f9:8e:86:c0:46:93:79:fc:71:c0:40:28:2a:c8:79:
                    dd:ba:cb:ff:ef:d7:e7:da:87:5f:53:fa:89:79:04:
                    6c:88:7e:e4:2e:50:c1:f0:9b:64:46:49:84:7e:ac:
                    9a:5b:56:d4:33:31:04:3a:50:f4:e0:80:bb:c9:b6:
                    a8:0b:b9:58:ec:db:16:6d:2e:c3:3f:2e:36:4b:c7:
                    94:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:CB:18:C6:7B:8B:4A:B8:5A:45:3F:22:B2:48:1F:0B:41:4B:6D:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/79fdc6be-ec03-3930-b9cc-85802fd5a519.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.239.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:01:96:43:74:6f:ff:dc:f7:ec:5a:bd:58:2c:72:0f:08:ac:
         f0:69:f3:ed:86:8a:b3:e0:6e:7b:51:a7:6b:d3:4a:66:a5:e3:
         1c:17:86:46:b9:f1:ce:e7:e8:f0:c1:ce:99:82:1b:16:48:0d:
         ff:7f:8b:12:cf:fd:35:79:fa:00:ba:ac:60:97:e3:13:7a:39:
         fa:d4:45:17:27:ef:2d:81:12:89:40:58:f5:56:59:a3:f5:2d:
         f7:d5:67:8f:c7:e8:a4:3b:45:0f:86:2d:57:bf:4d:e1:e6:ce:
         67:94:e7:9b:c2:0b:fa:a0:92:2e:39:65:51:66:db:fa:63:7a:
         c8:f5:5e:25:39:a8:e5:1a:38:77:00:ad:e1:bd:95:04:ed:4b:
         fe:6f:34:dd:58:39:c5:d7:a4:0d:f8:b6:a5:4f:75:8f:c2:10:
         29:e8:3b:ad:2e:c1:95:ef:30:2d:45:53:33:a4:5b:79:d3:7f:
         a1:07:b4:17:c7:1c:3b:86:d5:20:5f:e3:4f:44:12:5c:94:69:
         4f:a1:03:09:90:46:ba:82:3c:20:4d:88:dd:f9:39:14:64:af:
         2e:3a:2e:85:52:67:85:b1:7f:77:f9:9d:c5:34:7a:5f:24:ef:
         3a:a8:17:08:f5:b9:3e:a4:16:9d:e9:4f:39:a1:28:a4:f6:ba:
         ba:21:a6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:51:18 2025 by rpki-client