Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/03efb475-2734-343c-823b-4efaee05cc2c.roa
File:                     03efb475-2734-343c-823b-4efaee05cc2c.roa (raw, json)
Hash identifier:          IQHFVUrlsTdYeLi8vMjTbWNEmbvlo/Gde8fPW6SZKxw=
Subject key identifier:   50:05:EC:2B:D1:79:22:EB:AC:CD:38:91:03:25:2C:8E:FF:55:13:8A
Certificate issuer:       /CN=f0b45f79-612d-4c7e-8c24-5f64ac75c113
Certificate serial:       010D0C9F432858491246B421CA3AD7F6E29DBE40
Authority key identifier: C2:00:C2:3A:7C:C9:49:2C:CE:F7:9C:29:EC:5E:9D:60:97:58:62:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/03efb475-2734-343c-823b-4efaee05cc2c.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     11978
IP address blocks:        199.255.252.0/24 maxlen: 24
                          199.255.254.0/24 maxlen: 24
                          199.255.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:b4:21:ca:3a:d7:f6:e2:9d:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0b45f79-612d-4c7e-8c24-5f64ac75c113
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=42edb3d0-a758-4c2f-9f98-1dd80c1cdda7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b4:5e:ec:02:60:eb:25:b7:6b:a8:6f:18:a9:
                    2b:be:2a:33:3d:46:8c:13:96:24:ec:66:be:ee:32:
                    30:c6:51:51:a5:51:2d:8f:89:92:8e:f9:cb:30:df:
                    7b:45:8c:88:81:c0:17:35:d7:03:c4:0d:4b:84:6d:
                    87:6a:e5:3e:5c:e7:63:6f:72:8d:7a:d6:aa:29:0c:
                    f6:fb:ec:39:29:87:83:3b:b1:50:c8:7c:4a:42:93:
                    4d:07:a1:79:e0:43:55:a4:40:c9:46:99:88:56:55:
                    14:d3:51:e0:43:d5:69:e3:27:98:e3:e1:c0:6a:59:
                    aa:ee:be:10:e4:d2:b4:ce:a4:f0:3d:24:1c:35:02:
                    0d:e1:79:ad:1b:61:0c:f5:c5:ce:bc:8a:20:53:de:
                    cf:ed:f5:bf:8b:01:be:84:18:1e:b4:52:e1:7a:c6:
                    bd:20:f8:56:86:59:9b:24:88:fb:1e:3c:51:44:62:
                    31:a1:f8:c3:05:19:81:01:97:cf:80:e0:d9:c2:0f:
                    c1:0f:bd:2f:75:be:ce:c9:f7:96:fd:40:34:ff:e4:
                    ef:1b:47:10:40:b1:f8:80:7f:24:68:b9:d3:25:61:
                    da:da:c0:19:9e:9b:b4:7b:76:13:36:0a:ec:17:51:
                    54:7d:ae:1e:de:7b:aa:46:97:5a:c0:ec:89:c9:03:
                    33:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:05:EC:2B:D1:79:22:EB:AC:CD:38:91:03:25:2C:8E:FF:55:13:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/03efb475-2734-343c-823b-4efaee05cc2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.crl

            X509v3 Authority Key Identifier:
                keyid:C2:00:C2:3A:7C:C9:49:2C:CE:F7:9C:29:EC:5E:9D:60:97:58:62:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.252.0/24
                  199.255.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:ef:2c:78:72:4d:e0:3a:cf:90:b7:e2:a9:ab:dd:4e:20:53:
         8b:1c:0f:5a:10:34:37:f5:20:59:5a:f9:61:33:03:ae:f2:8c:
         d5:c1:4e:8c:14:28:1e:88:51:a6:6e:2c:9d:d8:c8:ff:ea:7e:
         95:8c:c5:86:7e:17:bc:98:6b:bd:ec:3d:ea:5f:47:9a:61:31:
         40:bc:b4:d1:c0:af:da:1e:35:c3:91:fc:a5:a5:35:3f:ad:44:
         b9:45:4d:aa:49:d5:d1:c0:0c:fa:b0:aa:a2:90:a9:8b:f9:0d:
         9e:db:80:23:7c:84:04:02:d5:3d:f1:54:3d:08:a1:57:90:3c:
         97:66:ba:69:95:c6:d1:fb:b8:8c:6f:87:a4:60:a9:f9:12:28:
         2e:20:3c:e5:40:9f:ec:50:46:e0:f2:f6:48:19:b0:42:89:bc:
         e5:d6:49:60:ea:1c:ce:17:5d:2b:ab:3a:f7:07:72:07:90:84:
         fc:2b:71:6d:dd:ac:57:15:4f:7d:e5:5a:ba:6c:bd:fd:f6:e8:
         e0:ec:61:79:5c:68:55:e6:78:a1:d9:ba:f6:2a:3d:6d:9b:ef:
         cc:98:73:55:0e:1f:1c:1f:0a:c5:e6:3d:98:e7:67:15:4f:df:
         f6:0b:7c:d8:2e:09:50:ab:7f:50:68:7e:e4:ab:9d:ab:67:16:
         a2:48:a8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:12:21 2025 by rpki-client