Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629/15a352be-1ca7-3a48-977f-0bef64fffe17.roa
File:                     15a352be-1ca7-3a48-977f-0bef64fffe17.roa (raw, json)
Hash identifier:          XL69QqWmb5GM5sSkHN7cpLHXkNgog/NeLPbunquSpSg=
Subject key identifier:   FB:DE:85:52:DB:88:FE:19:B7:30:B2:63:07:92:51:FE:81:6E:DD:E7
Certificate issuer:       /CN=5d64660e-adb9-4dc3-a02b-d02d0d5d9629
Certificate serial:       010D0C9F43285848F22C651D984D7E24BA5FD720
Authority key identifier: BE:E9:4C:97:0D:0B:F3:B6:55:0E:D6:E2:E6:36:B2:B5:47:C1:2F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629/15a352be-1ca7-3a48-977f-0bef64fffe17.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     10965
IP address blocks:        192.245.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629/5d64660e-adb9-4dc3-a02b-d02d0d5d9629.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629/5d64660e-adb9-4dc3-a02b-d02d0d5d9629.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:65:1d:98:4d:7e:24:ba:5f:d7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d64660e-adb9-4dc3-a02b-d02d0d5d9629
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=ee2cb4df-5952-475f-ad6a-4b78cf122889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:17:29:20:71:31:d4:bf:8c:48:51:e6:b2:e0:
                    02:c1:ea:4e:73:6f:2e:91:1d:b0:24:e5:e8:e1:c8:
                    59:44:91:57:2f:54:26:08:6a:0d:75:44:f1:d5:67:
                    1b:46:2b:cc:b7:17:ce:38:68:49:23:20:ca:1c:4e:
                    c9:3b:f0:b0:22:49:cb:c4:82:05:8c:8f:e3:14:b6:
                    80:69:ae:4a:96:b9:7d:f3:a2:07:af:9c:fc:a6:06:
                    ac:73:00:72:8d:27:0c:71:f8:cd:98:da:70:a6:34:
                    48:e1:0e:e5:e6:46:6c:67:57:bb:c2:3a:f1:9a:ef:
                    a8:82:e1:9e:3a:37:1e:12:84:7d:18:e4:5a:b2:56:
                    f7:ed:d0:30:61:94:56:bf:ad:63:e1:b3:60:3d:f9:
                    4b:22:cf:8b:84:a6:19:f3:f7:5e:2e:ec:89:46:ab:
                    10:13:1b:23:e9:cf:d6:24:bd:32:ed:ac:9b:81:e9:
                    9c:a2:b4:52:3e:74:e2:59:98:8a:32:a4:99:bf:9b:
                    3b:a0:17:4a:ab:f2:2a:9e:45:dc:bf:a3:46:5a:68:
                    69:0a:3c:91:21:5d:6a:2c:1e:ec:c8:51:68:d5:d1:
                    2b:4e:5b:27:90:2c:0e:15:97:94:93:ca:99:d1:c9:
                    7d:8a:7d:0f:ee:1f:d7:78:4a:3a:30:2e:d8:41:c3:
                    d8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:DE:85:52:DB:88:FE:19:B7:30:B2:63:07:92:51:FE:81:6E:DD:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629/15a352be-1ca7-3a48-977f-0bef64fffe17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629/5d64660e-adb9-4dc3-a02b-d02d0d5d9629.crl

            X509v3 Authority Key Identifier:
                keyid:BE:E9:4C:97:0D:0B:F3:B6:55:0E:D6:E2:E6:36:B2:B5:47:C1:2F:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.245.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:41:e0:c2:d4:0f:13:b3:fb:32:2a:29:1f:99:75:67:63:19:
         2a:7a:ae:40:1b:6d:53:27:c4:fa:51:e7:03:57:4b:5e:18:91:
         1a:53:e0:7f:13:b5:58:3e:7d:d3:59:9f:1e:da:8f:0e:d9:e9:
         d5:b1:0c:db:a2:a2:35:34:5a:63:b3:87:12:70:5c:aa:f8:2c:
         87:97:a8:14:8f:2f:82:e4:08:e0:27:e9:4e:61:8d:6f:46:8c:
         ed:83:a8:ac:df:e6:b6:86:d5:bc:6c:0d:51:13:05:fd:9d:33:
         04:d7:c1:cf:19:dd:c3:62:c3:47:9f:ef:1e:44:e1:a9:0a:e4:
         87:f5:06:1d:6a:f0:b0:f1:c7:17:e9:c4:95:41:9a:a7:cf:95:
         2d:97:ca:7c:32:59:47:ee:3e:94:ed:7a:49:1b:f6:08:ed:60:
         a3:43:e8:2a:2c:2d:04:ea:88:cf:e9:47:1c:a0:0d:79:7b:95:
         d6:e1:57:6b:8a:83:26:50:d6:6b:79:b1:47:ef:60:37:b4:c4:
         34:71:ff:bd:e9:87:60:70:71:ca:60:41:e9:08:c6:9e:42:13:
         91:75:b7:b9:aa:60:f2:6e:c9:c4:f6:b0:a9:ee:a3:70:f7:b3:
         a5:8b:cd:ea:2b:31:2d:81:a5:8a:46:83:d3:03:b7:a9:d9:40:
         c1:f0:17:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:30:22 2025 by rpki-client