Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/d967d62e-ad0b-3ec5-885d-d5a9420c4481.roa
File:                     d967d62e-ad0b-3ec5-885d-d5a9420c4481.roa (raw, json)
Hash identifier:          kfhRuEqEDslaD0ymKIOqCE/p1iY74YE6hhvGsOuzVqE=
Subject key identifier:   0B:47:2C:63:8B:23:F0:FB:6F:0F:23:0C:25:61:8D:C0:DA:9B:CF:09
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584917DC3A619207318301B0A1B2
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/d967d62e-ad0b-3ec5-885d-d5a9420c4481.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     376
IP address blocks:        132.219.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:3a:61:92:07:31:83:01:b0:a1:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=518abccb-cdf1-4ee4-a6b9-9578cb035eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c0:10:dd:25:12:9c:c3:1e:35:d0:76:97:08:
                    c6:01:af:75:a9:d8:92:e7:e4:6f:27:c4:ab:eb:ac:
                    a0:34:4b:73:97:9a:b1:3b:78:24:95:f9:11:6d:c8:
                    fc:db:ca:67:61:3a:70:c4:08:66:40:40:71:63:2a:
                    12:ce:fa:cf:7c:37:4a:d7:e7:ad:74:7c:c1:4f:7c:
                    93:fb:7e:95:32:c7:de:90:17:12:9c:2d:b8:81:12:
                    97:1b:f0:13:26:28:49:8c:47:ee:07:09:d0:d3:3a:
                    9d:b0:1a:75:5c:16:ad:80:88:80:a0:39:04:c6:29:
                    ea:66:01:d8:7c:9b:50:32:1d:62:33:2b:22:8f:cf:
                    99:b6:5d:18:90:f6:85:36:43:70:e0:d1:59:45:07:
                    70:60:2e:8e:06:26:fa:9c:8e:42:b7:7d:14:b1:bb:
                    f7:06:49:9a:e1:59:dd:b3:d0:e2:bf:78:8c:fb:06:
                    74:8f:b7:34:a0:ca:fc:43:41:3e:9a:8f:89:d6:bd:
                    d5:55:c5:56:71:6c:ed:18:04:fd:0a:48:ee:cc:b7:
                    4f:47:7a:60:cb:7a:82:95:23:b0:b7:49:94:ae:42:
                    3e:2f:d9:98:99:63:0c:7d:e4:f4:01:8e:15:b5:fb:
                    27:67:23:37:55:c3:68:2a:a6:06:0f:62:6f:b2:24:
                    34:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:47:2C:63:8B:23:F0:FB:6F:0F:23:0C:25:61:8D:C0:DA:9B:CF:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/d967d62e-ad0b-3ec5-885d-d5a9420c4481.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.219.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:75:ea:34:cf:50:fb:29:ed:e0:28:29:14:41:11:4e:b6:67:
         a7:ad:3a:dc:88:6c:c8:e2:63:89:b8:d9:aa:dc:7d:42:56:ae:
         22:18:5e:0a:73:7e:46:fc:1e:fd:6c:75:83:49:ae:92:37:b8:
         9e:c1:6d:5e:cf:87:4d:8e:85:72:5f:b3:a3:8c:b6:8f:c2:fc:
         91:ef:42:97:34:49:2d:59:9f:b8:a9:06:d9:f9:46:f4:d7:0c:
         59:8f:a7:39:76:87:56:f1:5b:21:79:19:0a:d4:50:53:d6:ab:
         b4:75:58:50:1b:12:68:95:c7:11:8d:1b:e3:6f:6f:f3:23:be:
         42:59:58:ec:ae:ac:3a:38:4e:96:94:c3:a8:cb:6b:77:af:64:
         71:0e:e5:57:75:da:c9:56:05:19:ca:6c:d5:13:8a:6f:1c:93:
         49:bf:4a:6d:69:69:be:f1:b9:d4:89:80:1c:5d:77:d7:71:81:
         81:81:19:2d:2b:fa:6a:98:78:08:ab:ef:af:ed:2c:40:42:e9:
         02:25:7e:7a:23:b1:5f:02:58:c0:15:fc:2a:fc:e6:c3:9a:4e:
         31:68:ae:fb:8a:38:a4:ce:75:c0:d0:b6:3d:7f:a1:d9:47:69:
         9c:8a:4d:9f:01:2d:02:c3:36:79:3c:83:2e:04:f2:31:a4:4e:
         c4:52:5f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:13:26 2025 by rpki-client