Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55/5857385c-87b0-34b3-a0f5-855b37c1bd2f.roa
File:                     5857385c-87b0-34b3-a0f5-855b37c1bd2f.roa (raw, json)
Hash identifier:          k1T+pJtm6DfrTlR1+IVpD3UnJj1RjLbllGgsBkW4p9s=
Subject key identifier:   88:95:1E:8C:0F:E2:87:57:3E:97:46:C2:CB:24:F0:23:FC:CF:6E:BB
Certificate issuer:       /CN=054cd560-1f7c-4ac0-bbeb-7cceeefb5e55
Certificate serial:       010D0C9F432858495ABEE6DC1975F89802C9AF80
Authority key identifier: 76:90:60:51:89:83:11:47:15:70:BA:67:C4:27:D6:0C:4F:D0:81:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55/5857385c-87b0-34b3-a0f5-855b37c1bd2f.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     399051
IP address blocks:        190.211.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:e6:dc:19:75:f8:98:02:c9:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=054cd560-1f7c-4ac0-bbeb-7cceeefb5e55
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=abe31807-4def-41ee-b271-6ab4792da3a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5c:00:7b:13:80:a8:3c:40:bb:9f:1d:92:c5:
                    0f:06:f4:c1:2e:e4:a1:d6:5d:21:26:29:30:f4:76:
                    23:5b:43:29:46:f9:51:a8:72:18:5a:85:45:92:a7:
                    e0:af:43:3a:69:b1:e1:d2:fa:6f:95:36:5c:1a:7a:
                    1d:60:63:f9:cf:38:15:1c:b1:f6:60:f6:f0:4f:04:
                    2a:81:8a:9b:8b:52:17:ad:28:fa:88:46:d3:70:1c:
                    39:f4:e4:0a:c4:15:3b:33:1c:e2:13:a7:71:cd:c2:
                    8c:63:07:67:df:2f:2e:69:52:26:cd:c7:17:11:6a:
                    5d:5a:9b:d6:2e:1b:bb:7c:57:b2:b9:58:93:09:6f:
                    af:ca:71:1a:c1:fa:38:e1:fe:d2:e9:a3:76:80:81:
                    8d:bf:ae:04:18:cf:25:d4:4a:e7:fd:f2:dd:ef:38:
                    d3:1d:aa:41:c1:16:6a:20:49:f3:0e:1e:bc:ca:3c:
                    0e:35:42:d6:ce:57:ee:e0:df:1f:a5:6b:06:91:9d:
                    63:51:ae:03:f5:89:15:65:0f:c9:06:65:4e:f1:81:
                    e7:d1:67:a8:ef:e9:2a:ed:4a:88:97:69:76:ab:c5:
                    1d:68:ac:c3:08:7b:f2:8b:c2:88:f2:d1:6c:f8:2a:
                    c7:6f:fc:10:4d:0b:e5:4a:69:6a:2f:26:c1:60:c5:
                    9c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:95:1E:8C:0F:E2:87:57:3E:97:46:C2:CB:24:F0:23:FC:CF:6E:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55/5857385c-87b0-34b3-a0f5-855b37c1bd2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55.crl

            X509v3 Authority Key Identifier:
                keyid:76:90:60:51:89:83:11:47:15:70:BA:67:C4:27:D6:0C:4F:D0:81:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:f2:f2:72:f2:97:69:2b:a2:47:ad:1a:2f:16:b3:6b:61:df:
         4d:d4:71:05:4b:1d:f4:d2:90:7b:63:c3:32:d5:16:bf:1a:5b:
         b0:b5:21:58:bb:de:f9:a0:32:73:02:bd:40:c5:a9:71:7c:5c:
         0f:6d:09:58:04:14:9a:e0:cb:89:a8:c5:cd:ca:c6:72:ec:82:
         36:30:6d:d2:78:20:5a:9e:94:44:8f:72:d7:e0:67:40:10:5e:
         01:71:21:39:f9:95:b5:ab:a5:08:1b:de:87:92:dc:d9:ad:aa:
         6f:68:40:71:40:ad:61:9a:33:b5:36:dd:07:63:a3:6b:78:ef:
         c0:c9:17:ee:2c:90:f6:28:21:87:35:aa:ff:d0:d4:e0:5f:63:
         0c:e0:dc:e5:1a:b4:17:4d:4c:fb:15:d3:ff:64:29:40:8b:0d:
         a0:08:5d:08:c0:ef:ff:3b:df:49:56:8d:14:06:a5:ac:41:62:
         a5:63:67:ba:54:ce:fd:73:5d:31:03:6e:05:3b:c9:ea:ee:37:
         18:93:d3:9e:a2:af:80:ad:29:36:19:a4:bd:41:93:2f:f2:cd:
         c9:9a:79:c9:3b:ed:98:20:20:69:4d:dd:86:71:63:c7:fb:b2:
         8e:eb:dd:3d:37:35:05:9d:ec:a4:12:86:7b:1b:7b:76:3d:82:
         b3:3a:4a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:21:21 2025 by rpki-client