Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/8593b3a6-6502-360f-83a0-b15437707937.roa
File:                     8593b3a6-6502-360f-83a0-b15437707937.roa (raw, json)
Hash identifier:          4S/yGby5QgB3VNi20PWN5N2cagu0a9qdYj3KLrTj7ZY=
Subject key identifier:   63:3B:F1:D1:2D:E0:54:16:EF:11:CC:F8:F5:8E:D5:64:4E:DF:CE:2A
Certificate issuer:       /CN=fc9bd684-883b-41b8-9890-8cd78117898c
Certificate serial:       010D0C9F4328584900216E8C77192A1CF4A0D200
Authority key identifier: 51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/8593b3a6-6502-360f-83a0-b15437707937.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     25932
IP address blocks:        153.7.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:6e:8c:77:19:2a:1c:f4:a0:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9bd684-883b-41b8-9890-8cd78117898c
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=983a8aac-0a2b-4e7a-abae-031e7084ec45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c0:9d:16:67:7f:fe:51:cb:4a:39:d4:1b:0e:
                    fc:2c:c6:b9:99:77:b7:ef:14:33:d9:dc:28:34:70:
                    b4:81:99:dd:da:b9:a8:a8:98:c0:7e:24:78:e6:3b:
                    d8:2e:7f:da:b3:f2:e2:d3:05:3f:9e:69:af:f7:42:
                    59:1c:a7:01:9f:97:32:bb:ee:b4:09:06:0b:ae:a1:
                    0c:34:a2:0d:1c:c3:95:1e:b5:61:4e:90:a4:ec:8c:
                    3b:60:65:85:19:bb:ad:f5:c5:99:32:ee:31:41:35:
                    6e:4b:03:12:a2:d6:e8:c3:1f:bc:a8:08:10:d5:00:
                    25:bb:cf:f8:0e:44:9d:41:77:d9:93:57:3c:21:94:
                    04:c4:62:7b:99:59:c6:ca:c5:95:d1:69:99:c4:5e:
                    b2:0a:f4:b1:7e:a9:ca:3e:d1:03:34:af:5a:7e:05:
                    75:43:e9:07:e4:9b:b6:0f:96:b2:08:f3:54:dc:ee:
                    05:77:6b:1b:12:14:d6:90:7c:44:c3:9c:a8:53:68:
                    8d:b1:a5:5e:98:31:c7:45:90:2c:ad:b8:29:36:0c:
                    a4:03:67:45:ba:d9:3a:c1:ba:66:74:e4:82:94:cb:
                    9e:7e:25:63:3c:ba:d0:a0:90:7c:5b:57:a4:b5:b1:
                    c9:37:1f:2a:6f:54:ba:68:43:c1:cb:39:2e:4a:8c:
                    87:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3B:F1:D1:2D:E0:54:16:EF:11:CC:F8:F5:8E:D5:64:4E:DF:CE:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/8593b3a6-6502-360f-83a0-b15437707937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl

            X509v3 Authority Key Identifier:
                keyid:51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.7.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:dc:83:fa:73:05:95:d1:1e:a3:8f:ac:70:8a:52:4f:c0:ad:
         da:a9:07:d7:a8:6e:80:12:ac:e5:b9:85:0f:4f:09:17:d3:77:
         54:c7:9b:64:30:26:f3:52:d1:2a:44:9f:ff:ac:1f:c2:84:9a:
         aa:78:8f:26:d2:2b:00:a5:9c:a4:f0:15:72:58:d9:df:c0:d8:
         83:c6:e1:52:a8:4d:11:ee:03:14:d2:c3:ae:50:09:fa:8e:fd:
         bf:0e:9d:e8:bf:3a:da:06:57:be:0d:84:8f:2e:28:cd:61:0d:
         8f:25:9f:a7:30:11:60:bd:b8:88:1c:bf:06:f9:5d:91:c6:9b:
         33:65:71:9a:ec:b9:d3:a1:2e:dd:7a:0f:c0:eb:50:93:4b:e7:
         5b:af:5c:29:55:0d:81:db:13:84:a3:25:a2:8e:7a:e8:10:56:
         c0:cc:39:59:16:9a:da:14:08:3d:3b:b9:43:d7:b2:14:94:52:
         bb:e4:41:c9:f5:46:4d:6b:00:07:dd:6d:87:3b:58:56:d3:ac:
         bc:3c:14:4b:36:ad:d4:f1:7e:5f:f7:76:99:89:c7:f2:17:22:
         3b:66:d3:ee:8e:3c:5c:c3:fe:54:7c:7a:84:05:58:4e:ac:5d:
         29:32:3a:d0:89:4e:93:7f:c5:2e:60:70:14:cf:37:7c:93:cc:
         f0:2c:45:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:07:44 2025 by rpki-client