Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/42774cc5-f493-3b45-87ec-2ece7a3128b4.roa
File:                     42774cc5-f493-3b45-87ec-2ece7a3128b4.roa (raw, json)
Hash identifier:          uYb5cQHplP0AO0DAt433FDOlx8z1Ydv5uZo+9BPgFFk=
Subject key identifier:   A0:8B:14:A5:B5:74:96:8E:72:F5:30:12:9F:D3:8D:78:1C:77:76:5C
Certificate issuer:       /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial:       010D0C9F4328584921F0EBC97F24471E562D2880
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/42774cc5-f493-3b45-87ec-2ece7a3128b4.roa
Signing time:             Sun 09 Mar 2025 16:40:56 +0000
ROA not before:           Sun 09 Mar 2025 16:40:56 +0000
ROA not after:            Sat 07 Jun 2025 16:40:56 +0000
asID:                     834
IP address blocks:        173.249.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:f0:eb:c9:7f:24:47:1e:56:2d:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
        Validity
            Not Before: Mar  9 16:40:56 2025 GMT
            Not After : Jun  7 16:40:56 2025 GMT
        Subject: CN=4f37a3e2-9e32-4c0b-a533-229d4c023c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:07:b7:f3:3d:fd:90:64:ca:a7:50:7b:3e:09:
                    54:73:fd:02:6a:de:cf:46:ad:ca:59:24:d0:c2:6f:
                    dc:e0:1d:80:ca:f5:b0:54:31:91:46:60:a3:42:75:
                    5c:14:db:22:28:25:c2:68:8a:f8:f6:1b:73:74:2f:
                    ed:4f:44:3a:d1:fb:9b:a0:40:ac:e3:9b:1b:59:b7:
                    95:4f:c9:1e:86:87:08:4c:d0:09:61:82:35:a6:2e:
                    ae:ce:c9:a5:a5:63:ce:a3:29:2e:29:67:93:ba:a2:
                    98:7a:1d:6e:78:7d:5f:a0:9c:d0:e4:13:9c:e3:7c:
                    81:8b:a9:a2:a5:38:af:18:89:5b:fa:38:95:07:e3:
                    3b:79:6f:6f:45:e7:7a:6d:95:b0:d9:a9:41:7d:e7:
                    18:43:78:a0:f5:44:cb:79:d7:40:c7:93:f5:05:1a:
                    73:dd:fd:f7:84:61:eb:3c:1c:b9:93:c4:22:5f:b7:
                    a6:cd:6b:2e:c9:8c:b3:0f:62:2b:f1:8a:6b:86:d2:
                    f5:9b:f8:d3:d9:79:60:e7:e2:65:de:3c:6d:41:b5:
                    38:80:f9:a8:3d:7a:31:55:87:7f:7f:96:02:0c:db:
                    65:0c:26:0b:60:00:10:97:65:89:48:0e:fb:dd:9a:
                    96:0d:a0:ba:0c:ae:12:ce:9e:be:91:1e:65:58:32:
                    b6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8B:14:A5:B5:74:96:8E:72:F5:30:12:9F:D3:8D:78:1C:77:76:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/42774cc5-f493-3b45-87ec-2ece7a3128b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:44:c2:e0:94:c5:52:b3:ba:30:d8:e7:0c:6f:ea:7d:dd:ff:
         2a:52:b8:12:33:c9:71:34:48:52:97:cc:df:f2:72:af:cf:23:
         0a:be:51:b9:26:eb:0d:19:ae:f8:4e:c6:9b:53:9a:1f:3f:fe:
         ce:c0:6d:15:3d:8f:5d:42:e6:b3:c4:d5:7c:d8:04:33:ba:99:
         43:75:02:b3:5b:05:9d:16:6e:0d:49:f8:e5:b9:8f:01:02:41:
         52:bb:08:e2:4e:b6:a7:2a:a0:6c:70:69:58:3b:5d:1f:59:0f:
         8c:8e:8d:63:76:08:8a:74:bd:a7:df:77:ae:18:78:1c:df:43:
         76:b5:04:e6:9a:83:cf:37:61:cf:f1:40:be:c5:a5:48:50:7f:
         7d:57:f4:85:70:a7:c4:7f:c4:92:e7:e9:65:64:df:cf:47:c3:
         84:b9:de:0b:de:ec:23:7b:b1:94:eb:62:25:aa:0c:3e:52:06:
         a7:c7:66:c2:4a:51:69:ca:2f:ca:3b:1d:45:b9:d7:7d:b3:36:
         5b:fc:32:a8:95:13:43:58:2f:86:29:50:dc:95:6d:f8:1b:3e:
         27:ac:2e:f5:66:d4:cf:ff:2e:c3:b2:4b:87:e4:16:02:09:ce:
         fe:7d:96:36:07:2c:5b:6c:11:c5:0c:60:7e:81:b1:1f:70:58:
         98:fa:ec:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:07:00 2025 by rpki-client