Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/b0293e2a-b333-3875-817a-b2830f596b7b.roa
File:                     b0293e2a-b333-3875-817a-b2830f596b7b.roa (raw, json)
Hash identifier:          y1C13h6xeBGpUKtHmIBzn7+iKXb0cl7ciw1Gym7SI+A=
Subject key identifier:   43:4E:44:27:27:B9:7D:00:68:91:00:BC:F0:55:42:EF:EC:36:72:A3
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F43285849780F018DCE9FB6E284A3ED80
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/b0293e2a-b333-3875-817a-b2830f596b7b.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     48737
IP address blocks:        174.35.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:01:8d:ce:9f:b6:e2:84:a3:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=fc13dab8-9f71-44f6-b4a4-7b6f7023a350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:62:0f:74:57:b1:83:3e:c7:60:f9:88:b8:5c:
                    d6:90:a0:17:6d:14:75:c3:d2:d8:1c:9d:96:ba:47:
                    20:04:29:2c:f8:0b:1d:55:a5:19:01:b2:06:9a:3f:
                    d8:54:23:8b:e3:d1:ab:89:1c:f7:a4:13:10:2d:ad:
                    80:4b:26:d5:c4:54:78:83:fd:98:68:09:ed:0a:b2:
                    18:69:d8:28:c0:87:52:23:fc:cf:4f:e3:39:81:95:
                    18:1f:5d:ac:2f:67:32:02:4c:58:5b:40:90:3c:82:
                    63:63:35:34:80:2c:a4:47:0b:01:e2:26:24:bf:ae:
                    74:b4:88:c9:5c:87:96:a6:13:8b:e0:cc:41:66:f0:
                    6b:ba:be:c0:c8:d3:26:39:19:ad:8a:32:8b:73:e4:
                    41:3a:ca:1a:56:a1:ce:23:fc:29:1b:1d:ba:a4:bc:
                    13:81:d3:18:9d:3c:73:58:00:be:e5:ec:85:52:77:
                    a0:55:b1:3b:b4:12:d6:35:7a:4e:47:80:1d:43:9c:
                    94:2e:63:70:df:bb:9c:ea:79:19:c7:db:b6:20:27:
                    8b:b5:a3:64:47:22:cf:3d:d7:9e:46:f3:26:45:f1:
                    91:77:38:09:48:b9:a6:df:55:d6:03:d0:02:72:84:
                    bb:4b:da:7f:1b:83:1c:61:2a:df:b5:a4:cc:83:e2:
                    1f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:4E:44:27:27:B9:7D:00:68:91:00:BC:F0:55:42:EF:EC:36:72:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/b0293e2a-b333-3875-817a-b2830f596b7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:75:06:61:30:be:27:63:7a:bc:99:32:fb:b9:21:61:6d:63:
         0d:7e:68:ba:bf:c3:3a:ff:3a:ae:49:20:a9:13:85:d7:c0:a2:
         8f:83:52:3b:ef:81:b3:84:17:85:e6:81:7d:d3:2a:1c:4f:09:
         a4:e2:3e:c8:a3:0f:bc:6b:ce:7e:dc:4b:d6:cd:3a:4f:d3:0e:
         10:67:7c:7f:17:e8:da:9e:63:e8:b6:9f:2b:b5:58:10:d0:84:
         c7:85:33:16:94:55:dd:b8:d6:9b:04:ee:8b:37:e1:87:47:f7:
         e7:c2:4d:ad:8f:5d:21:6e:47:c9:30:af:da:d2:22:02:0c:b8:
         5b:76:0e:9b:59:2c:7d:e9:22:73:e8:f2:3d:5b:30:e8:e9:80:
         5f:ad:4c:d2:e5:2d:f9:16:66:a4:97:76:f4:3a:11:c5:f3:6e:
         33:b0:a2:fc:5a:94:27:f6:ef:85:88:be:5a:fb:d5:2a:1f:61:
         fa:b6:c3:08:48:3a:96:a7:4e:76:6c:5d:e3:69:af:8b:bb:23:
         84:50:ac:21:ab:7c:15:c1:9a:03:85:df:f7:ca:7c:0c:06:5d:
         6f:b0:ae:79:d7:d9:8b:c6:e8:37:85:e4:e7:06:04:61:d9:d3:
         70:d7:a7:9d:25:ba:3f:6c:e5:06:e1:36:81:c5:56:11:ed:b2:
         79:c0:f1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:24:54 2025 by rpki-client