Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/e8c4cc7e-63bf-3afb-823a-7886acddfc5e.roa
File:                     e8c4cc7e-63bf-3afb-823a-7886acddfc5e.roa (raw, json)
Hash identifier:          9es1rCxh8pVg52evAlHXYTuBQxEjSxWCUAgcNA57rGA=
Subject key identifier:   C8:BC:97:C8:04:3E:54:C8:23:2A:4E:BA:AC:C6:48:79:DA:25:3A:19
Certificate issuer:       /CN=2f9f859b-6735-4c5f-8f00-0526da777ec4
Certificate serial:       010D0C9F432858490CB1711A7FBE5B88451B0500
Authority key identifier: 58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/e8c4cc7e-63bf-3afb-823a-7886acddfc5e.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     397966
IP address blocks:        170.205.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:71:1a:7f:be:5b:88:45:1b:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f9f859b-6735-4c5f-8f00-0526da777ec4
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=d6654393-e080-4903-86fa-df89cc85e291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:24:10:d4:da:c9:4d:8b:04:7b:53:ea:d5:53:
                    6d:d3:e6:15:aa:1a:83:f9:c8:8c:67:43:2f:62:2a:
                    1d:22:fd:25:f8:e3:bb:96:03:a2:25:cb:71:d5:8f:
                    63:00:38:40:93:c9:9a:43:49:50:cd:34:2f:99:33:
                    ac:de:0d:2c:7a:a6:85:c7:9f:7d:69:a1:92:a8:87:
                    0f:02:c1:0b:c0:ec:e3:3d:33:73:f1:d6:78:6f:0b:
                    35:a7:71:36:17:9d:ce:6e:93:42:3b:79:40:96:1f:
                    29:e7:0f:06:24:61:50:0f:8c:c0:5c:ad:a8:4f:9d:
                    45:c3:6f:5b:68:8d:98:8a:15:96:e2:7c:39:15:45:
                    9b:58:3c:81:30:bb:7a:0c:9d:c9:53:06:f0:b2:43:
                    1b:db:fe:79:44:ae:73:6b:e9:77:79:b7:25:97:82:
                    de:c1:23:d5:3f:f2:9a:ae:3e:fa:82:69:74:da:79:
                    f0:9d:23:ab:27:8d:01:5f:1b:d5:da:4f:eb:86:f0:
                    72:ec:01:06:f5:5a:83:ed:e4:91:40:d2:6b:7b:aa:
                    44:e7:35:54:46:1e:9b:c1:d7:94:69:7e:53:8c:e3:
                    f3:57:9b:22:f2:e3:1a:11:45:b1:01:41:fd:3e:fb:
                    21:66:c7:63:ae:04:ab:16:a8:b0:c5:d7:80:d5:fd:
                    f2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:BC:97:C8:04:3E:54:C8:23:2A:4E:BA:AC:C6:48:79:DA:25:3A:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/e8c4cc7e-63bf-3afb-823a-7886acddfc5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl

            X509v3 Authority Key Identifier:
                keyid:58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:f1:29:4d:cf:9c:cd:49:d6:db:68:e8:7b:9d:75:bb:6d:73:
         39:49:44:68:a8:20:3f:92:b6:cf:54:99:53:b0:a4:60:67:fc:
         6e:60:25:f0:98:a9:51:fa:af:d8:62:89:f8:71:62:87:01:5c:
         e1:44:90:db:e1:49:f4:93:ac:44:8f:c7:0b:5e:c1:fe:64:f7:
         2e:d2:64:08:7c:78:90:8a:50:cb:5e:1d:ba:96:a0:64:90:b8:
         c3:06:b4:be:b2:b7:4e:57:6c:34:ef:12:93:04:56:b9:0f:a7:
         cd:c3:5f:5f:1d:04:98:2d:a4:c1:0c:cf:4b:b7:b2:d1:a8:c7:
         e7:e4:5a:1f:36:6a:e3:78:b7:73:51:8f:b4:1f:5d:8b:98:07:
         67:62:0c:65:06:c3:59:ac:4a:7d:c4:69:74:95:1f:75:dd:f5:
         d3:0d:1a:7e:4c:70:29:77:9e:56:53:82:a3:14:f8:b4:fd:d4:
         fb:45:6f:43:2b:10:eb:4f:9d:cc:aa:78:da:ac:f4:3f:10:ad:
         58:85:1f:cf:99:cc:f0:3f:90:e0:07:6f:6e:00:8d:bd:61:0f:
         eb:b6:63:fd:70:56:1f:8c:ac:89:de:30:64:28:fa:8a:cb:d6:
         9f:6c:3b:f8:f6:68:5b:04:78:05:5a:20:43:04:b1:7a:8b:e8:
         1c:4c:b7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:34:00 2025 by rpki-client