Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/67752497-0fe4-36c2-8471-2399d4711200.roa
File:                     67752497-0fe4-36c2-8471-2399d4711200.roa (raw, json)
Hash identifier:          oBVB9SaH4iiRvxa5XD2G+76hypi/5xqgQFAgoKZec6k=
Subject key identifier:   24:79:D9:18:A7:17:0F:86:9D:F2:CC:BB:94:3D:6A:03:32:4F:BE:A4
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E00686C9730D69701F1F5A40
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/67752497-0fe4-36c2-8471-2399d4711200.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     11505
IP address blocks:        97.71.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:86:c9:73:0d:69:70:1f:1f:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=b358ef07-b0c9-4628-99c6-7c2dda5d654a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:39:11:8b:67:b1:82:4d:95:06:17:2e:ad:e1:
                    ee:7c:52:2c:c5:df:be:f7:8d:da:af:63:d2:73:c5:
                    ce:8e:1e:a1:76:ae:ec:a9:63:74:f7:5b:d0:57:22:
                    95:cc:45:f4:9c:a9:24:14:db:2c:de:dc:f0:7c:4f:
                    78:3c:ba:ac:51:9a:31:8c:9f:46:88:2a:f4:6f:72:
                    54:3f:e3:b3:0d:ec:b6:29:ee:0e:d6:2b:96:3c:58:
                    e2:57:eb:4a:c2:76:de:b9:09:08:99:d6:8c:dc:00:
                    51:e4:18:cd:43:db:93:6c:87:5d:c1:f6:2d:30:93:
                    4e:7e:09:f1:69:d6:48:d8:c5:f5:93:90:04:05:31:
                    56:79:cf:69:47:57:37:bc:a2:39:66:3c:50:1b:0e:
                    36:9d:6a:20:ca:ad:b8:3d:f2:29:4d:95:29:95:6e:
                    8e:be:46:1a:b5:23:a7:8f:db:03:fe:1c:08:2d:8a:
                    b3:06:c6:73:f6:eb:cf:a4:03:dc:31:a7:1d:4e:a6:
                    e5:9f:17:9c:f2:6f:02:c7:09:57:50:32:da:d7:9f:
                    65:54:df:57:b8:fa:9a:b9:7c:8e:28:0c:00:7e:37:
                    95:b1:5c:50:de:f3:02:1b:5e:3d:ea:6f:18:0d:37:
                    7d:de:92:c2:fd:69:4b:99:22:78:ca:9f:03:2f:46:
                    8d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:79:D9:18:A7:17:0F:86:9D:F2:CC:BB:94:3D:6A:03:32:4F:BE:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/67752497-0fe4-36c2-8471-2399d4711200.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.71.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:3f:8d:52:c2:ba:85:ae:ed:20:96:87:99:ff:11:6d:11:53:
         ef:21:8b:eb:4d:20:40:b5:a5:59:32:4d:5b:b7:c5:c6:e6:10:
         b7:c8:e2:da:e0:6f:b2:bc:91:c4:9b:cf:ed:4d:7b:28:95:f1:
         10:25:b7:aa:34:58:8e:16:c4:0d:91:48:db:1a:30:6c:c6:67:
         75:c0:a5:6e:36:78:ff:18:e7:5b:be:ad:bf:9f:3b:0e:d9:00:
         50:ca:3d:d6:77:4a:5e:7d:be:4d:e2:af:57:57:3b:af:33:55:
         97:b0:87:12:59:eb:73:49:98:8b:55:98:b8:a2:44:0a:b4:df:
         54:d3:bc:3f:d2:85:32:a3:4a:1d:70:1d:df:b0:87:fe:a5:86:
         1c:66:2c:12:24:5e:84:8e:0c:a5:3b:f5:38:ee:a3:65:ce:4b:
         27:e2:b8:90:a1:a0:07:e0:b3:a9:c5:78:15:ac:c3:9d:b2:cb:
         e9:84:6c:1e:0c:7a:33:f9:0e:f5:12:04:24:9c:fc:83:92:43:
         27:b2:d9:d8:54:a0:93:58:b6:1a:5c:7d:98:9f:57:c8:d4:ba:
         28:ee:a4:19:f6:94:60:2b:4e:2b:94:ae:fc:e3:bd:72:5f:e7:
         f5:79:a0:93:da:cd:55:af:61:e1:21:d1:1a:9e:6a:24:9c:71:
         88:1e:5a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:51:36 2025 by rpki-client