Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/540b4125-24a3-3589-9314-18a5200c0692.roa
File:                     540b4125-24a3-3589-9314-18a5200c0692.roa (raw, json)
Hash identifier:          O+CZG4dkUbyDeLlCj/pELXlSbmFVaJJjBx6J+7jVVDI=
Subject key identifier:   9F:65:C3:45:16:0E:F6:29:EC:92:D7:8C:DA:CE:18:79:EE:95:B9:06
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584917DBFDD6612F6F97A4E66C00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/540b4125-24a3-3589-9314-18a5200c0692.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     63147
IP address blocks:        128.177.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:db:fd:d6:61:2f:6f:97:a4:e6:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=f24fb815-7e7d-4e13-b196-66d9333bf867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e0:de:2b:ab:a4:46:33:ec:1e:d7:9e:36:a9:
                    79:9b:ab:60:00:ba:21:d9:49:d4:bb:ba:e8:6f:2d:
                    c1:62:94:fb:b2:47:20:ad:da:88:d7:0a:65:c1:94:
                    af:0c:25:d9:9c:22:e0:da:7c:10:ee:ce:ac:b1:7e:
                    33:5e:4a:e6:96:6a:37:f3:88:85:38:03:82:f3:2a:
                    9b:3e:8f:bf:43:83:e5:ea:3e:ff:15:0a:17:48:fb:
                    94:13:00:a4:f1:c1:1e:35:a5:ed:a9:7c:c2:1f:9c:
                    11:09:70:b7:5b:01:ec:c8:fa:ef:e7:8f:a2:65:2c:
                    f0:34:12:62:0e:53:37:3c:27:a8:8a:3e:c4:f7:e1:
                    e9:d7:d5:a6:7f:96:8d:47:e8:d7:ef:02:bc:e0:15:
                    66:4e:c5:11:2b:9a:6d:2e:7d:e8:25:57:b1:51:c6:
                    71:bc:4a:5b:39:00:df:3d:90:59:77:96:1d:5a:e4:
                    7c:29:d5:e6:3e:a6:24:3a:56:da:49:9c:40:91:b4:
                    ca:a7:f1:06:83:91:b0:ee:7b:c4:3e:1a:f0:13:32:
                    b2:b1:07:75:78:2c:6e:78:00:af:74:c1:50:bc:c7:
                    4d:82:f2:5e:40:98:cf:f6:2f:7c:6f:52:55:de:cc:
                    25:be:bf:e4:c3:0d:8c:49:43:1d:95:bd:ee:59:aa:
                    aa:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:65:C3:45:16:0E:F6:29:EC:92:D7:8C:DA:CE:18:79:EE:95:B9:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/540b4125-24a3-3589-9314-18a5200c0692.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.177.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:e1:b7:78:cd:63:73:21:92:c0:43:ce:7b:15:77:fa:a1:37:
         7a:c1:f3:92:9d:be:28:d5:c2:68:27:70:c0:a0:bf:63:71:c9:
         ae:99:6c:62:e5:be:75:62:09:38:12:d4:ba:12:3d:0f:c8:86:
         84:49:06:aa:a6:33:ea:9c:f8:d3:96:c7:07:4d:82:57:e6:b5:
         25:cb:5e:82:b0:2e:e7:17:34:43:ed:8a:a2:5f:ba:0b:99:81:
         93:6d:71:41:76:75:77:1c:41:ee:b5:67:86:00:e8:34:f7:08:
         d0:0b:e3:41:6b:c6:ae:c1:7a:31:bc:fb:30:81:4a:1a:06:62:
         29:79:3f:26:f2:26:e9:b2:8f:15:c8:56:0d:08:32:1c:01:8b:
         d9:1d:09:5c:14:c4:da:0c:f0:85:f2:3a:d8:ca:cb:23:fc:23:
         2d:5e:fe:8f:11:e5:11:93:62:2c:f8:17:e3:1c:ba:4f:cf:70:
         87:99:00:60:4c:d6:f7:21:34:a4:3b:23:24:a0:09:dc:9c:0d:
         20:a0:e0:13:0d:13:84:dd:fc:95:fd:70:0e:b5:6e:ad:90:4c:
         c1:a9:da:4f:87:73:08:d2:ea:d4:66:c8:56:cc:3e:b2:83:6f:
         a0:23:f6:d9:a6:4b:f6:db:7b:85:a4:70:33:10:f2:58:03:0d:
         f3:48:73:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:17:44 2025 by rpki-client