Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/0177c457-8123-3122-9946-667a61adf363.roa
File:                     0177c457-8123-3122-9946-667a61adf363.roa (raw, json)
Hash identifier:          bYTiGMt4EzkOhGqN1Wb0hcxkfThhM+M2ulozH3uYRBo=
Subject key identifier:   73:76:87:4D:08:0D:69:75:E6:89:5C:55:B9:C7:25:25:29:9C:D9:74
Certificate issuer:       /CN=a8f51da8-e3ca-4fc9-acce-94103c57aebc
Certificate serial:       010D0C9F432858490F7C00E8D085A15CF0DF24C0
Authority key identifier: 3A:72:E5:B7:27:34:1C:D3:AE:09:F2:9E:7D:BF:99:D5:A0:41:FD:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/0177c457-8123-3122-9946-667a61adf363.roa
Signing time:             Mon 03 Mar 2025 02:00:39 +0000
ROA not before:           Mon 03 Mar 2025 02:00:39 +0000
ROA not after:            Sun 01 Jun 2025 01:00:39 +0000
asID:                     62862
IP address blocks:        81.21.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/a8f51da8-e3ca-4fc9-acce-94103c57aebc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/a8f51da8-e3ca-4fc9-acce-94103c57aebc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0f:7c:00:e8:d0:85:a1:5c:f0:df:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8f51da8-e3ca-4fc9-acce-94103c57aebc
        Validity
            Not Before: Mar  3 02:00:39 2025 GMT
            Not After : Jun  1 01:00:39 2025 GMT
        Subject: CN=a117590b-ed05-4b53-a73c-21329c4353b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6a:6b:28:25:97:85:71:fb:d3:b5:84:74:27:
                    d7:c7:dc:4c:99:78:f6:77:5b:43:68:66:e0:fa:98:
                    a8:b3:9f:05:1f:ac:af:00:b9:c8:8b:96:4b:3c:23:
                    39:ff:e9:fa:c1:09:06:e4:e1:18:13:bb:37:7f:7c:
                    bb:d2:f3:5b:09:e2:ec:d9:4d:0f:9a:8a:fa:77:2e:
                    05:02:27:9b:3a:31:bc:58:6a:17:9e:94:fe:b2:dc:
                    6c:75:14:31:3e:9f:71:36:16:49:65:cc:40:b9:c2:
                    b8:65:7c:08:ff:51:28:2d:05:5b:44:6c:4b:c0:16:
                    90:46:59:4f:0b:89:cb:62:32:ad:a1:bb:9c:6f:2c:
                    b0:e9:50:99:c0:c6:ef:9c:b5:cc:77:d6:0f:14:06:
                    4f:69:5a:c2:3b:64:6f:65:93:04:c2:7a:4b:9a:0f:
                    a7:ba:e7:26:96:09:9d:14:db:2b:55:e1:b2:f9:8a:
                    32:18:7d:ca:0e:51:d6:15:11:e6:68:45:03:69:03:
                    85:1c:47:02:d9:e6:63:10:55:f9:a4:4b:40:e5:af:
                    5f:1a:68:08:a0:d1:c6:2a:38:48:2b:ad:cf:bc:34:
                    18:81:64:53:38:e7:c9:d9:6b:8d:36:42:c3:bf:74:
                    33:4d:aa:f8:28:6f:32:f2:9f:6d:16:2c:2b:cd:25:
                    e2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:76:87:4D:08:0D:69:75:E6:89:5C:55:B9:C7:25:25:29:9C:D9:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/0177c457-8123-3122-9946-667a61adf363.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/a8f51da8-e3ca-4fc9-acce-94103c57aebc.crl

            X509v3 Authority Key Identifier:
                keyid:3A:72:E5:B7:27:34:1C:D3:AE:09:F2:9E:7D:BF:99:D5:A0:41:FD:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.21.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:05:82:6b:c1:dc:66:c0:1c:41:d2:8d:75:2c:a4:c2:46:5f:
         01:78:ac:e0:41:aa:d4:22:64:de:52:c1:f2:62:b8:37:4c:5d:
         c5:5a:83:bf:93:5a:1e:1f:b1:12:0b:d4:d0:2c:1d:5e:3d:d9:
         cd:0d:d3:5d:21:52:86:43:73:88:48:30:c6:60:f9:df:ac:7e:
         e7:af:85:07:89:8d:27:1b:99:3d:97:fd:06:4e:cb:cf:7e:bc:
         b9:21:77:31:cc:49:ea:c7:9d:81:95:ce:15:27:30:55:42:a1:
         14:e5:3c:cd:94:aa:ff:f9:8d:dc:64:cd:ef:7f:a0:a4:f7:87:
         33:d7:e2:1b:17:1f:11:5e:e0:27:f5:36:c1:22:83:3f:aa:e2:
         ec:b9:3c:ce:2f:68:25:ad:84:e5:cd:8d:9a:ff:78:37:b7:20:
         ba:2a:be:e5:f0:36:48:84:3f:ce:c5:9d:c4:2d:de:78:e2:97:
         1a:aa:d9:33:ad:a4:9f:ed:35:3c:48:94:4b:a4:ed:b9:6c:fd:
         b7:4b:8e:ae:6c:dd:22:ac:59:10:bf:1e:b1:3d:51:10:af:1b:
         99:31:82:90:51:82:93:2e:d4:d5:02:f6:34:af:b2:50:9f:e0:
         66:a1:2c:fe:17:62:39:50:70:37:8f:b0:03:79:82:36:32:96:
         43:c2:d0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:29:06 2025 by rpki-client