Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/05ff12ba-9ccd-39d6-9c61-6f44daa2edd7.roa
File:                     05ff12ba-9ccd-39d6-9c61-6f44daa2edd7.roa (raw, json)
Hash identifier:          5as8K7calS7VbFwWnBkJgGI658t1sz37bS1HXEXQi6o=
Subject key identifier:   19:3E:10:48:D2:D4:00:65:94:E5:77:5F:E9:2C:AB:A7:AA:D1:86:F4
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F432858494CC93B87F1C6DD3EE84C90C0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/05ff12ba-9ccd-39d6-9c61-6f44daa2edd7.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     21859
IP address blocks:        107.151.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:3b:87:f1:c6:dd:3e:e8:4c:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=5a37545b-d007-4b0f-851f-149c494cd19b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a3:f9:48:45:25:24:e3:ce:ef:7d:78:54:99:
                    c8:29:f4:cb:0e:44:fa:91:11:ab:21:58:7b:cd:e3:
                    2e:5c:b7:c8:39:3a:91:00:e0:a9:7a:de:41:39:7b:
                    f0:4e:bd:51:37:27:04:87:eb:1f:c0:34:09:d2:c5:
                    55:a2:f2:a0:34:64:2c:dd:74:4f:af:af:0a:ab:38:
                    f1:e1:01:87:92:bd:12:af:62:96:ef:ad:8a:67:00:
                    c8:f7:23:82:6f:8c:c5:5d:48:7e:10:6f:22:0e:5a:
                    0b:b5:35:ce:7c:d7:ad:da:76:df:1f:43:a1:48:92:
                    94:19:77:c7:4b:10:ba:8a:c8:a1:8b:66:18:11:11:
                    f5:81:5f:be:3f:a3:0a:b5:cd:45:a5:07:c2:aa:2e:
                    42:03:c2:64:0c:8c:e2:c2:dd:c4:9e:f0:ec:70:ea:
                    20:d6:e1:df:1e:ad:7b:3f:52:d3:45:fa:56:e4:54:
                    7d:37:a1:49:c8:6b:64:dc:11:36:e4:cc:1b:e6:1a:
                    b4:95:63:47:64:36:34:8f:ed:de:8a:6e:79:e1:28:
                    45:77:17:12:b3:f4:a8:da:a3:26:1a:e3:5b:0e:3e:
                    0d:5b:65:bc:7b:df:f9:68:2c:07:f5:e8:e1:3c:a4:
                    79:af:79:8d:ca:38:9d:49:44:a0:73:76:ac:60:a0:
                    ca:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:3E:10:48:D2:D4:00:65:94:E5:77:5F:E9:2C:AB:A7:AA:D1:86:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/05ff12ba-9ccd-39d6-9c61-6f44daa2edd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:56:47:0b:6a:28:e7:de:a2:a5:b7:eb:bf:b9:ec:a6:29:0b:
         a9:33:ca:27:fb:de:83:d2:95:72:7d:80:b1:95:5b:7b:74:ff:
         82:5f:5d:64:86:94:9b:25:d2:3a:c7:09:47:ea:a1:df:af:c9:
         f2:45:1f:0f:e1:1a:74:95:3d:88:a0:f9:d8:31:6b:ad:8e:e9:
         cc:42:50:34:d8:76:fa:c0:6b:72:97:c5:28:25:63:3d:19:f3:
         13:67:37:7c:b2:d9:6c:17:21:fd:c0:69:5e:82:e6:df:53:ff:
         dd:3b:15:30:32:8e:25:db:bb:16:10:9b:a9:98:ca:f5:d4:eb:
         4f:c9:16:83:1e:a0:54:98:9f:4a:89:06:9f:50:d3:d0:5f:22:
         c2:2c:cb:2a:8c:be:c9:f6:18:7a:69:85:b8:80:8c:c6:bd:4c:
         63:6a:51:54:ef:1c:c1:8f:c1:24:6e:60:69:5a:bf:72:f7:7b:
         95:38:13:2f:bf:54:5b:08:4d:b3:5c:c8:02:7e:9d:dd:fc:af:
         42:dc:15:00:68:e1:78:2e:a3:84:9c:a2:f4:cb:a4:1f:3a:ff:
         69:7f:aa:f7:56:f7:d7:d5:ce:4c:88:1d:2d:93:fa:3b:f5:3e:
         f9:4d:96:23:c1:b5:8c:cc:48:db:64:da:9d:1e:b5:f0:bd:1d:
         c2:3b:42:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:51:56 2025 by rpki-client