Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e1765a92-9888-36f9-85ed-a357dbd30cf6.roa
File:                     e1765a92-9888-36f9-85ed-a357dbd30cf6.roa (raw, json)
Hash identifier:          u0zfWGEqWSzGKkZOOJlKfXLijJXNMde3usfK7dExmaM=
Subject key identifier:   24:04:17:BD:B4:A5:82:CB:E1:B3:2A:31:C3:16:BE:9A:D2:4A:D3:17
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848BBBB7AEE367F627A98C9B260
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e1765a92-9888-36f9-85ed-a357dbd30cf6.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     852
IP address blocks:        173.181.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:7a:ee:36:7f:62:7a:98:c9:b2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=7ee1ae8e-d1c3-4218-b9ba-ef1906cc5d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c8:99:22:8e:24:e1:0f:ff:c6:fa:aa:d1:fc:
                    52:11:68:8c:f1:f0:3a:ba:23:be:65:c7:69:01:14:
                    06:56:7d:ae:07:d1:6c:17:00:a2:f6:86:0e:eb:d5:
                    cc:e1:5d:6a:6f:97:73:cc:db:da:e2:d6:26:f1:1b:
                    f7:63:fb:2d:c1:83:ab:13:2b:65:ef:05:fd:d2:00:
                    49:4e:54:60:b6:a0:b2:3c:db:2d:27:89:78:3c:9c:
                    51:9b:b3:c1:2a:3f:b3:0b:ba:c0:48:39:ad:2c:68:
                    7c:c3:bf:02:09:c2:35:42:1b:33:98:91:93:07:d7:
                    88:24:7b:16:71:9c:5c:8d:2f:37:42:d4:b5:89:a6:
                    7e:41:57:aa:7f:3e:76:b1:94:d1:e8:23:6b:bc:64:
                    0f:c9:59:af:b8:93:d2:5d:bd:d9:dc:e2:dc:85:04:
                    1d:09:61:25:67:ff:06:4f:d6:5d:cf:84:36:46:72:
                    cc:34:21:32:db:86:68:0c:b8:40:ac:d0:dc:a0:15:
                    a7:53:22:45:78:b2:45:9f:4f:af:91:4c:ec:a0:60:
                    c2:cf:03:be:59:b9:d3:39:d9:28:69:72:9b:ed:bc:
                    c2:73:fc:48:c3:40:e9:f9:21:b7:85:55:5f:f3:0d:
                    5a:23:4c:e3:cb:57:26:57:e8:8d:d8:87:34:86:ce:
                    c4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:04:17:BD:B4:A5:82:CB:E1:B3:2A:31:C3:16:BE:9A:D2:4A:D3:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e1765a92-9888-36f9-85ed-a357dbd30cf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.181.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:ad:37:48:b1:e9:71:2e:9c:e9:73:a2:f0:a4:6a:17:85:eb:
         a4:65:b6:fa:e0:6b:81:31:6a:b3:36:66:12:35:27:56:6c:d8:
         2e:d2:66:92:11:29:92:fa:da:b1:7b:61:28:23:29:d3:85:4d:
         90:97:28:84:a1:74:11:2f:94:87:cb:67:d8:a2:ea:08:e6:9f:
         0a:22:8f:82:ab:00:3b:5b:2a:99:e2:03:38:1e:6b:0b:c2:f8:
         68:93:17:33:91:cc:e0:55:f9:54:f1:2b:54:ea:ef:dc:0f:bf:
         b2:e4:52:ff:a3:65:c0:82:20:6a:13:42:f8:95:83:a5:e7:6b:
         a9:92:66:c2:86:ce:ac:bf:7c:1b:0a:53:8f:28:13:c2:6d:6a:
         87:a8:92:6b:eb:13:bf:20:e9:75:11:b2:79:1c:2d:e3:ea:5e:
         0c:26:d3:b5:43:58:26:70:cc:9b:6e:cd:50:dd:fd:02:e3:65:
         a9:88:bd:ad:52:6b:9c:96:2a:eb:2d:48:c6:24:1c:18:48:99:
         42:ed:ae:0d:10:e6:1d:43:39:a4:91:78:f6:16:a6:70:74:15:
         78:92:c8:93:49:97:a2:5a:66:cd:b3:8d:e4:be:2c:0a:d6:d4:
         7b:44:72:4e:85:95:61:ba:af:d7:d9:20:ad:c8:83:01:7f:5c:
         68:fd:6f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:41:30 2025 by rpki-client