Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675/a684e03c-762f-380d-9364-a51ce895efa3.roa
File:                     a684e03c-762f-380d-9364-a51ce895efa3.roa (raw, json)
Hash identifier:          MTeQjD7A9JPBkv+y244R+PH1TUqP1E/kN7pvxthSCEg=
Subject key identifier:   39:02:02:D1:95:CF:43:88:51:DF:75:D8:F3:1B:73:9F:79:49:C8:7C
Certificate issuer:       /CN=7a0faf4a-643d-4023-8090-81f838253675
Certificate serial:       010D0C9F43285848D4DB91C903C22AFFA1EA5CA0
Authority key identifier: EF:C8:A4:48:B5:9E:36:86:28:E9:62:B0:0B:D6:1C:92:8F:24:44:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675/a684e03c-762f-380d-9364-a51ce895efa3.roa
Signing time:             Mon 10 Feb 2025 02:00:38 +0000
ROA not before:           Mon 10 Feb 2025 02:00:38 +0000
ROA not after:            Sun 11 May 2025 01:00:38 +0000
asID:                     26214
IP address blocks:        148.59.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675/7a0faf4a-643d-4023-8090-81f838253675.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675/7a0faf4a-643d-4023-8090-81f838253675.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d4:db:91:c9:03:c2:2a:ff:a1:ea:5c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0faf4a-643d-4023-8090-81f838253675
        Validity
            Not Before: Feb 10 02:00:38 2025 GMT
            Not After : May 11 01:00:38 2025 GMT
        Subject: CN=b735eb54-6808-4bb2-a302-032d9cfa6f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6a:d9:a0:b0:f7:80:07:bb:2b:20:b4:5a:1c:
                    17:51:78:5a:b7:6b:5e:97:57:ae:21:58:ea:4f:3b:
                    5e:f2:2e:70:fc:bf:21:b2:e2:02:10:17:d7:7b:79:
                    e6:69:b6:fe:ec:03:b0:ba:fe:d9:aa:ab:d1:a8:50:
                    13:98:d8:ec:91:29:93:0e:92:e0:4d:20:24:28:2f:
                    a9:f9:fb:88:9b:25:92:dd:9e:66:97:49:91:a1:41:
                    92:e1:68:e8:6b:01:76:d0:f6:d4:46:9c:33:5b:9f:
                    66:55:6b:d2:e0:91:72:46:f1:88:5c:5f:ce:c5:25:
                    e3:a3:e8:03:d9:cc:ee:3b:98:7d:09:ae:72:e8:3e:
                    58:59:12:e6:ae:96:9f:e5:34:86:b7:11:ac:c1:3a:
                    73:b8:ec:21:16:e1:f6:d5:06:ec:c0:d3:2d:75:47:
                    7b:a4:ef:eb:d6:ee:d1:5e:17:71:a3:9b:07:c2:0a:
                    ac:c7:ec:16:46:bb:d3:8d:e3:b1:98:90:2e:29:79:
                    56:89:47:1c:62:74:57:19:37:d2:29:55:bb:c6:b9:
                    12:ff:7f:e5:8d:14:b7:98:74:61:ea:1e:e8:92:57:
                    1b:74:46:29:1e:97:0e:69:54:22:7f:eb:3d:99:04:
                    95:1a:9e:8b:4f:ce:d0:71:cd:48:b6:06:18:08:06:
                    d3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:02:02:D1:95:CF:43:88:51:DF:75:D8:F3:1B:73:9F:79:49:C8:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675/a684e03c-762f-380d-9364-a51ce895efa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675/7a0faf4a-643d-4023-8090-81f838253675.crl

            X509v3 Authority Key Identifier:
                keyid:EF:C8:A4:48:B5:9E:36:86:28:E9:62:B0:0B:D6:1C:92:8F:24:44:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:34:cd:b1:c6:01:98:52:bf:4d:de:17:4e:fd:bd:48:d3:b6:
         fc:ce:4a:63:f5:39:49:0d:81:fd:e0:ed:fa:6b:77:b7:dd:b8:
         d3:88:57:25:d2:9e:88:c0:4f:29:8d:22:13:e8:38:d2:78:11:
         8d:4f:ce:8a:a4:86:35:df:72:f7:45:ac:fd:75:8f:42:66:49:
         c7:ab:30:40:eb:54:69:b2:d6:69:b8:91:37:6e:5b:3a:21:b1:
         07:ad:c9:73:89:8a:91:d6:8c:ec:44:f5:a2:aa:1c:0b:d4:15:
         e4:8d:b0:ab:2b:d9:c9:dc:40:42:00:80:5c:39:31:f2:88:38:
         c7:6d:77:80:cd:18:87:5e:12:48:13:2a:b6:45:5f:f6:6d:ec:
         f8:b0:2d:17:52:d3:d3:02:af:8c:b6:6a:22:49:2b:75:91:f3:
         e1:87:1c:60:68:5b:a2:8e:a2:bc:00:5a:cb:86:2e:a1:67:d3:
         70:3c:aa:c9:f0:90:83:0a:d7:ea:04:1c:68:53:15:f9:ea:80:
         b9:56:a5:90:3e:f1:35:5e:de:a1:88:fb:d7:04:93:ba:10:81:
         98:a6:7e:80:b3:a8:04:81:63:bf:b7:5f:54:65:3c:64:b7:b8:
         ef:17:d7:6d:b2:e4:28:29:cd:f6:8c:97:53:0f:db:f0:45:b0:
         e2:b3:12:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:07:50 2025 by rpki-client