Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/b00dcb04-4078-3c85-9c69-ec3d51f2b5bf.roa
File:                     b00dcb04-4078-3c85-9c69-ec3d51f2b5bf.roa (raw, json)
Hash identifier:          75rchOg7O5y82xdFRrt5DK3xMpB8o51obDWuCRso2Oo=
Subject key identifier:   80:B5:FF:F0:48:9A:43:CC:BF:28:0E:5F:19:5F:FD:25:54:13:DD:03
Certificate issuer:       /CN=68dde036-7a4c-4a69-930a-c6ac94a87e56
Certificate serial:       010D0C9F4328584944694D1F1064F2C88A7C1100
Authority key identifier: 6C:C2:8C:B2:DE:FF:56:76:1D:35:CF:47:00:09:3D:94:61:40:B0:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/b00dcb04-4078-3c85-9c69-ec3d51f2b5bf.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     0
IP address blocks:        192.111.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/68dde036-7a4c-4a69-930a-c6ac94a87e56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/68dde036-7a4c-4a69-930a-c6ac94a87e56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:4d:1f:10:64:f2:c8:8a:7c:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68dde036-7a4c-4a69-930a-c6ac94a87e56
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=f9fcb6bc-cf5c-42d3-8eb8-62c14c317b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d2:7b:de:09:a5:65:00:d9:7f:5c:89:0d:73:
                    81:af:35:eb:27:cd:10:d6:da:ae:28:00:87:c8:b1:
                    ba:ec:2b:1e:42:20:7f:11:29:ef:6e:7b:b5:a5:88:
                    f3:7d:0e:ab:c0:14:39:b7:ff:b9:e1:28:95:4e:35:
                    52:e3:8d:33:b2:d2:db:2b:6a:cb:fd:90:70:6e:b0:
                    1c:05:28:1c:47:18:6b:44:96:91:65:54:36:83:08:
                    61:8b:66:e6:11:30:05:c0:11:a3:8f:fd:25:91:05:
                    c2:f3:8e:56:e2:3b:af:c8:7f:7a:3b:6c:6c:6c:f5:
                    cd:91:f2:89:38:10:bf:18:ec:96:4a:8d:e2:db:62:
                    f0:f8:9f:e3:c5:be:1a:c3:f7:c6:80:45:9e:27:17:
                    25:ba:49:a8:ec:00:fc:c5:64:d6:97:f0:65:45:5e:
                    26:42:dc:da:44:9b:47:ab:94:ad:f2:6f:64:4b:3b:
                    f7:6d:7f:7a:0f:9d:41:f7:e0:df:7f:bf:d4:8c:15:
                    a4:64:65:18:21:6c:47:d8:ba:2b:f3:f5:02:cd:69:
                    5f:f4:90:e4:5b:94:65:00:8e:75:6f:4e:6b:6f:eb:
                    fc:29:51:09:02:d9:f3:cc:83:06:4b:a9:b7:a5:71:
                    9a:a4:0d:f8:7f:49:1d:af:92:77:94:d2:92:5b:35:
                    c3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B5:FF:F0:48:9A:43:CC:BF:28:0E:5F:19:5F:FD:25:54:13:DD:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/b00dcb04-4078-3c85-9c69-ec3d51f2b5bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/68dde036-7a4c-4a69-930a-c6ac94a87e56.crl

            X509v3 Authority Key Identifier:
                keyid:6C:C2:8C:B2:DE:FF:56:76:1D:35:CF:47:00:09:3D:94:61:40:B0:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:d8:a3:a2:04:a8:b3:ab:40:70:85:f0:55:6c:a9:8d:55:3f:
         79:55:cb:fc:4b:0e:29:f7:ef:19:ea:e9:73:cc:26:11:2d:98:
         07:5f:dd:85:53:56:2d:10:7e:dc:5c:af:c4:fa:6b:3a:dd:30:
         9b:f4:fb:9e:69:e7:51:c3:70:11:3c:64:52:5f:01:1c:8f:68:
         b7:09:82:8c:f8:ad:21:80:04:49:a4:2e:c9:be:35:19:6b:04:
         c8:fa:5c:57:88:1f:94:6d:ab:f5:69:f0:e1:fa:27:a1:58:04:
         76:f3:2d:85:18:67:b6:72:36:0f:ae:1a:3a:3a:26:8b:6e:18:
         01:d6:bf:cb:74:25:32:b6:d1:59:16:bf:01:32:6a:de:7a:b8:
         5a:e4:f6:10:88:37:1a:3c:4a:6d:61:87:8f:c9:df:e7:dc:fc:
         77:a9:76:4e:7f:e3:cb:4f:63:0f:36:95:ef:2b:fa:1f:34:5a:
         2e:51:29:92:cf:d4:b2:8c:de:e6:42:e3:09:df:fa:25:c7:df:
         1b:c0:fa:01:47:08:7c:f8:2d:79:72:f9:9a:54:b1:01:ee:3a:
         45:0a:a2:96:4f:70:7c:c0:f9:34:db:6f:86:e3:a6:1e:c1:c3:
         02:fc:e0:63:5e:0e:b8:71:97:db:38:20:9d:7c:5b:c1:bb:4a:
         54:a0:79:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:33:31 2025 by rpki-client