Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/a683fcd7-0f78-3d40-9b36-768300e92db9.roa
File:                     a683fcd7-0f78-3d40-9b36-768300e92db9.roa (raw, json)
Hash identifier:          GhZTwqrhkjkInDoPOvXgknmxx01/oTRu0r7PTyCQMgI=
Subject key identifier:   54:FB:10:8E:97:28:56:E7:0B:E6:A8:A5:40:B9:93:18:69:6D:A2:18
Certificate issuer:       /CN=552db743-b442-4066-8e02-0dcd47471dce
Certificate serial:       010D0C9F43285848E9CBE4B4F915648382890EA0
Authority key identifier: EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/a683fcd7-0f78-3d40-9b36-768300e92db9.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     212669
IP address blocks:        136.175.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:e4:b4:f9:15:64:83:82:89:0e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552db743-b442-4066-8e02-0dcd47471dce
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=d218dd44-aa95-44b8-a17c-e9edfa09c910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5a:0c:a1:74:91:ab:49:ba:01:e1:50:2c:8d:
                    b2:40:78:7f:47:f7:20:fc:f3:76:0b:f6:6d:ec:ef:
                    b3:46:01:fb:9a:4d:ee:42:2f:fc:40:75:f5:d8:02:
                    91:75:d2:b8:e6:b2:8a:98:77:78:6c:26:1f:08:54:
                    42:02:4f:2a:c7:74:90:ef:ca:95:eb:f9:ed:66:87:
                    41:54:e9:4e:88:a2:9b:2f:0d:63:02:bc:b2:ed:b8:
                    7e:e7:be:c4:60:2a:87:04:bf:28:bc:51:dd:13:85:
                    2a:d8:1e:f9:90:f5:48:5d:39:85:dc:4a:27:29:47:
                    9c:c2:3b:4b:1b:92:4b:0c:61:5a:aa:d7:bc:10:36:
                    4a:94:0b:b1:31:3d:a6:d2:26:71:20:a9:07:26:12:
                    8f:96:21:14:18:b0:b5:fb:45:b1:88:06:9a:e1:2e:
                    81:97:6a:62:79:ce:9e:e4:b4:98:27:5b:67:f8:a2:
                    fd:13:74:72:75:18:71:bd:e5:12:bf:99:a6:89:fb:
                    0b:d0:2d:04:93:93:55:9a:1f:57:cc:0a:a3:08:e5:
                    6f:9a:73:ef:4e:38:8a:86:76:5c:9d:26:a4:44:88:
                    16:2e:51:09:f5:f8:f6:9c:6c:95:5b:d6:57:b3:b0:
                    5d:e1:23:5a:d0:b8:4d:24:73:d2:38:a5:be:66:5d:
                    2f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FB:10:8E:97:28:56:E7:0B:E6:A8:A5:40:B9:93:18:69:6D:A2:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/a683fcd7-0f78-3d40-9b36-768300e92db9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.crl

            X509v3 Authority Key Identifier:
                keyid:EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:44:1d:20:fc:11:d0:f5:ed:83:e9:bb:9d:95:cf:ba:61:1e:
         22:74:0f:12:b6:f3:eb:fe:0d:45:9e:5a:2f:ec:25:d6:c2:85:
         99:8b:6e:74:7b:fb:b0:0e:e2:40:43:b7:79:3a:af:cd:df:d6:
         61:7c:50:ac:14:93:b9:b8:d2:b4:77:46:07:2d:a7:cf:6d:ea:
         66:31:16:5d:52:3c:47:c6:26:83:9c:3e:a2:71:39:9b:c1:7f:
         73:35:ec:3d:cc:c7:30:75:24:a5:fd:f5:1e:5c:00:96:5e:ac:
         b7:ab:ba:5b:be:61:d1:29:26:f6:41:a9:02:c3:84:6d:95:28:
         4d:b9:e8:9f:11:06:28:53:2e:36:c7:e4:b3:0e:45:a3:b1:7a:
         58:b6:ee:fa:34:b9:ca:b9:bd:74:1b:4b:91:f1:dc:4b:e2:91:
         7f:11:ad:62:42:e0:d3:5e:f8:ab:49:02:96:05:1d:72:63:4a:
         32:ae:6b:db:17:19:07:c2:57:2c:58:47:07:59:3a:da:20:ca:
         b3:41:67:95:83:c1:6e:37:f9:94:54:e8:29:04:9a:57:a0:36:
         b6:eb:df:df:74:7f:50:17:ed:05:7e:c4:21:e6:60:a1:be:68:
         a8:ce:19:0f:d0:e3:f4:16:01:49:49:4c:ec:d9:47:59:29:bd:
         c3:f0:da:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:25:00 2025 by rpki-client