Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/6ce768b5-d60f-3189-83e9-957251f4b838.roa
File:                     6ce768b5-d60f-3189-83e9-957251f4b838.roa (raw, json)
Hash identifier:          FPtGgqyJ1jbjqc3jfPWNfSWlNj39l7EQYAU5sTr/brk=
Subject key identifier:   19:45:E3:C5:E7:1C:9F:65:A7:21:C4:9B:22:D6:40:B4:04:B6:E8:B6
Certificate issuer:       /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Certificate serial:       010D0C9F432858495ABEC78C0C289AEB8A2D2D00
Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/6ce768b5-d60f-3189-83e9-957251f4b838.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     399102
IP address blocks:        164.116.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:c7:8c:0c:28:9a:eb:8a:2d:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=ebb9f5a4-4afb-4b32-9ee0-e703ccbe3ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:bb:1d:aa:54:ee:15:3f:ca:ab:b0:e4:82:56:
                    a5:b3:b6:30:82:00:ee:09:5c:09:d3:c0:79:3b:33:
                    65:b9:17:69:ef:57:29:96:f1:d7:d0:25:10:34:12:
                    76:6a:a9:87:cc:3a:bd:6b:50:37:5f:35:4d:3b:e5:
                    97:71:d0:c2:61:1f:69:81:31:4b:00:99:3b:9b:da:
                    fb:f9:73:5f:52:34:47:cc:e4:b8:c4:c0:43:79:69:
                    a8:1d:37:c9:f9:02:9b:b8:c4:f7:3f:e7:41:09:0f:
                    6c:48:aa:27:94:26:f9:e0:2f:e9:48:4f:10:1e:c1:
                    d8:d8:46:4e:76:ad:1c:23:07:35:73:b2:cc:c7:c3:
                    af:7f:05:14:d1:a4:6e:1e:6d:91:ad:8d:53:32:3f:
                    11:f4:bc:16:03:b4:88:1d:85:0c:bd:71:ff:db:3e:
                    ba:df:81:60:a4:9c:eb:3c:2d:21:73:68:69:6d:58:
                    ff:88:bb:d9:68:85:5f:24:e2:48:dc:4f:e6:a8:15:
                    74:01:cd:19:86:04:7e:0d:d3:7b:1a:f8:6f:ef:79:
                    75:23:ef:31:6c:dd:76:2e:7f:b8:ca:04:da:80:9d:
                    a2:a9:ad:3b:3e:21:83:08:c2:05:98:d6:2a:a7:3b:
                    82:15:b1:0f:9e:60:da:c4:fd:58:45:34:13:80:94:
                    9a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:45:E3:C5:E7:1C:9F:65:A7:21:C4:9B:22:D6:40:B4:04:B6:E8:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/6ce768b5-d60f-3189-83e9-957251f4b838.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl

            X509v3 Authority Key Identifier:
                keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.116.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:50:dd:ba:23:79:d6:65:49:fb:b2:21:f4:db:51:3d:10:1e:
         81:83:82:94:1a:2e:9b:b7:14:e4:be:51:9a:53:61:72:68:df:
         a3:2d:6e:34:69:99:e6:c5:33:a5:cd:e3:ec:91:e2:f3:ef:c4:
         9f:1c:47:4d:87:71:3f:58:13:5b:90:c5:5d:72:e0:19:55:be:
         f0:14:0c:02:cb:41:ed:f6:48:cf:5e:4f:5c:9a:b5:0f:20:61:
         db:1a:24:0c:5a:12:f1:e9:06:38:24:65:37:4e:71:dd:0a:dd:
         2b:54:cf:82:c7:86:60:43:e1:ae:37:5c:c0:58:93:18:f0:5a:
         70:f6:6e:e4:29:8f:60:83:c0:1f:48:3f:41:53:ec:d6:70:88:
         07:59:4f:3a:ee:e1:b2:ab:89:ff:9c:27:d5:c1:c3:07:04:07:
         cb:02:f4:81:73:4e:88:29:03:71:a4:9f:31:7d:cb:97:7c:3a:
         88:67:b2:ee:11:fe:8a:94:e1:62:8b:35:31:e7:c2:49:26:d9:
         51:bd:53:a5:f3:02:e1:f8:87:80:29:f0:93:ef:4e:53:e2:72:
         8d:6c:40:c3:bd:73:37:b4:49:3e:ca:bd:de:92:f0:d8:00:98:
         5f:7a:56:bd:c5:dc:c8:99:f1:bc:f7:df:98:6f:c3:45:4b:fa:
         5a:b9:e0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:40:39 2025 by rpki-client