Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/2c0226e4-f832-3070-b782-0f1bac970efd.roa
File:                     2c0226e4-f832-3070-b782-0f1bac970efd.roa (raw, json)
Hash identifier:          NglD0B4olTqh/vTZzkVy4aBF1foEX1QhsvNT14IWooc=
Subject key identifier:   AD:57:21:A7:3D:77:8D:B5:5B:CE:B3:17:A3:80:0E:AC:F1:7D:9E:3D
Certificate issuer:       /CN=0d1af089-3ace-488d-8f52-6b375c813ba2
Certificate serial:       010D0C9F43285849002156F2396795306B2E4E40
Authority key identifier: A6:9C:CE:F2:D7:BC:3F:8C:EE:2F:16:34:59:64:85:BD:CE:1E:2E:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/2c0226e4-f832-3070-b782-0f1bac970efd.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     10490
IP address blocks:        149.149.34.0/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:56:f2:39:67:95:30:6b:2e:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1af089-3ace-488d-8f52-6b375c813ba2
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=abc2a05a-1e62-4f97-9d67-657a7ecbaa0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:14:dd:b3:a8:99:f2:92:8b:1b:77:03:85:69:
                    64:e0:1d:62:9c:b8:b2:bd:f9:34:32:71:4d:0b:99:
                    47:37:05:98:c7:f1:f4:a2:89:23:d1:29:cb:1c:ca:
                    2f:2a:28:14:ad:cd:f2:7b:2e:39:5b:64:a8:40:35:
                    fe:e9:71:b0:85:9b:ed:82:2a:61:38:68:95:b7:7c:
                    27:d3:26:78:8d:74:29:9e:86:2a:8f:57:4d:0f:2a:
                    7f:a1:6c:18:76:a1:b8:c2:12:5b:bf:74:88:f3:cb:
                    73:2c:2e:86:ea:05:dc:14:cf:38:78:f4:73:38:60:
                    b7:c2:dc:26:68:22:b8:a0:fe:c5:b9:ec:97:ff:de:
                    d0:7c:1f:41:63:91:1c:7f:8e:70:bb:fc:ac:40:13:
                    c4:d9:59:61:13:bb:6c:1f:38:bb:bb:40:f2:13:1a:
                    49:7b:58:bc:da:cb:2b:1b:34:6b:c6:31:fe:ed:e5:
                    9b:51:80:57:bc:54:db:e9:a6:8b:3c:1d:3c:e4:72:
                    b8:21:44:0b:15:d7:31:e2:c0:60:fb:17:86:58:ce:
                    00:f3:a6:1b:78:6d:db:b6:0f:15:24:d6:95:49:26:
                    24:3e:43:9e:41:4d:db:e8:72:4f:40:46:28:9b:95:
                    17:9f:8e:bb:cd:6a:3d:00:5a:7f:2f:22:a6:bb:1d:
                    73:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:57:21:A7:3D:77:8D:B5:5B:CE:B3:17:A3:80:0E:AC:F1:7D:9E:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/2c0226e4-f832-3070-b782-0f1bac970efd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.crl

            X509v3 Authority Key Identifier:
                keyid:A6:9C:CE:F2:D7:BC:3F:8C:EE:2F:16:34:59:64:85:BD:CE:1E:2E:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.149.34.0/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:b3:68:92:cf:e0:ac:d7:3c:99:22:b9:d1:21:f3:e9:f4:5b:
         95:54:a7:50:48:d3:8f:78:fc:55:a5:7b:20:c5:49:0e:17:ce:
         8f:13:34:d0:a2:4e:61:36:b6:15:b7:dc:c6:ef:d0:84:65:df:
         aa:b4:a8:94:72:8c:82:5b:eb:32:4f:1a:a5:9c:0c:ed:b5:13:
         75:a9:13:00:53:0f:53:d1:03:e3:16:67:08:83:92:d1:46:a7:
         9c:24:83:55:cd:69:5f:16:dc:c2:53:34:94:de:0b:aa:1e:ff:
         15:37:8d:07:1b:27:94:c6:29:7d:34:dd:a8:6e:b5:6c:24:f4:
         95:1a:da:8a:8a:13:62:be:58:4a:20:a8:31:d3:70:0e:87:4b:
         61:c7:70:6a:eb:f5:98:a3:8c:51:b8:43:38:4e:45:37:35:56:
         83:7e:94:1f:eb:4e:fe:d5:b3:9c:f6:5a:52:62:81:98:5d:90:
         e2:62:9d:e1:ab:51:4e:68:ee:92:88:fd:f2:e0:6a:98:b3:d3:
         6e:62:08:de:be:ae:d5:fa:cc:02:da:ae:5b:b2:a9:be:6b:cb:
         bb:aa:48:94:ac:22:47:4a:98:50:06:15:90:03:47:d6:3b:8b:
         6d:c2:f3:ae:54:7e:55:b8:5d:96:2e:e7:0b:01:27:70:5a:dc:
         13:89:20:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:13:16 2025 by rpki-client