Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/6b955808-a91b-3cc3-9b3c-a2e723cf04a7.roa
File:                     6b955808-a91b-3cc3-9b3c-a2e723cf04a7.roa (raw, json)
Hash identifier:          OM4kvmGg7thPqXK0WH7zBuRHRL7ot3bO5uQNwwHCq3A=
Subject key identifier:   30:B0:B4:57:84:9B:CD:C3:EB:7B:D3:3B:88:9B:DE:91:85:0E:AB:2D
Certificate issuer:       /CN=2f9f859b-6735-4c5f-8f00-0526da777ec4
Certificate serial:       010D0C9F43285848D6410ABDF87D5A240AC81A00
Authority key identifier: 58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/6b955808-a91b-3cc3-9b3c-a2e723cf04a7.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     140543
IP address blocks:        170.205.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:0a:bd:f8:7d:5a:24:0a:c8:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f9f859b-6735-4c5f-8f00-0526da777ec4
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=f05ceba9-de5d-440d-a0f0-78671af27dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:48:96:9b:f1:b9:35:84:f7:2a:8b:66:52:3c:
                    85:e3:58:2e:eb:78:fe:6a:f7:1a:10:27:75:18:8b:
                    88:54:0b:0e:29:f9:bf:e3:00:bb:b6:25:16:e9:ad:
                    e6:dd:fe:95:5e:0e:ac:8d:38:33:30:f5:f4:d4:a1:
                    ec:c7:a2:b8:3f:33:d4:0e:93:c8:71:b0:51:48:fe:
                    77:d7:d4:0a:0a:a5:1f:3e:25:77:e3:5d:f5:f4:6e:
                    ff:e2:fe:b4:19:fa:dc:13:81:f2:b7:e9:b0:19:1a:
                    9a:48:40:0a:34:2d:76:4c:52:05:2c:e8:b7:a2:05:
                    00:ef:fb:67:cb:92:88:6e:35:80:17:86:11:c7:64:
                    49:bb:b7:95:b3:03:a0:d5:6f:56:a8:c8:ce:d3:47:
                    f2:0e:90:23:4e:3e:f2:95:ac:0f:e3:d6:3d:69:89:
                    dc:bb:4a:51:13:98:5b:09:16:3c:61:89:c7:92:fc:
                    33:30:be:c3:f8:45:bb:2b:d8:52:da:ba:a9:c7:e7:
                    2f:91:03:90:31:2d:42:25:e9:12:1e:4f:6a:ae:dc:
                    f7:a9:aa:25:f2:82:c5:04:3e:da:97:40:b1:da:f1:
                    2f:38:0b:26:cd:be:5b:e7:00:d1:55:0a:f9:37:2f:
                    c1:ea:03:01:26:8a:29:67:01:30:af:7d:c3:05:63:
                    6c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B0:B4:57:84:9B:CD:C3:EB:7B:D3:3B:88:9B:DE:91:85:0E:AB:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/6b955808-a91b-3cc3-9b3c-a2e723cf04a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl

            X509v3 Authority Key Identifier:
                keyid:58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:fc:96:f2:3d:37:9e:69:79:a7:4e:15:02:86:ce:3b:38:ff:
         50:5d:2e:fe:bf:3d:be:4a:1d:3b:a7:ff:cb:7a:09:a1:b0:34:
         68:78:b4:ab:47:6b:6d:e0:14:0d:c7:71:44:5f:ec:86:7f:8c:
         94:5e:b1:32:35:61:c4:d4:d4:40:3a:d3:bd:cd:33:5f:d0:aa:
         5f:54:a9:b1:d9:3e:38:97:80:46:51:62:dc:72:ff:2a:b5:85:
         86:da:8e:28:cc:c9:33:fd:c2:78:82:6f:5e:9e:ef:62:c3:e6:
         5e:8a:58:14:19:49:76:2b:d4:20:c9:13:a5:13:80:a0:43:b5:
         84:7d:1d:bf:2a:04:5c:f8:b1:14:9c:06:db:b8:5b:26:85:ad:
         3d:f7:67:59:d6:ab:fc:5c:95:54:08:9d:50:a9:58:ba:89:25:
         89:a4:d7:7e:e4:02:39:ca:25:ca:00:d0:8c:95:52:9a:fa:8f:
         9f:28:73:91:b9:69:99:66:59:cf:35:f8:f6:ae:93:3e:29:27:
         62:fc:43:69:3a:0d:1f:6e:c0:dd:7b:35:41:4c:42:80:88:9d:
         3b:e1:88:f0:e1:da:5a:aa:92:79:a0:b0:1e:fc:fe:5b:db:f9:
         be:a6:c3:fb:f5:43:1b:ca:e3:c2:8c:92:bc:aa:0d:73:e5:c1:
         6a:cb:14:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:04:01 2025 by rpki-client