Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/12468d7e-9bb2-365c-9a4e-d0fdb65a8100.roa
File:                     12468d7e-9bb2-365c-9a4e-d0fdb65a8100.roa (raw, json)
Hash identifier:          I7EGyKuxBkq3ihc5vZpd3kN2c40DjFUkaOFxIdjzzs0=
Subject key identifier:   AF:E2:41:D9:FB:FF:F1:5E:30:E9:EC:95:3E:1E:4F:18:C4:E1:5F:0F
Certificate issuer:       /CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2
Certificate serial:       010D0C9F432858492CAE7FF2C5AA34E874940200
Authority key identifier: F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/12468d7e-9bb2-365c-9a4e-d0fdb65a8100.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     206092
IP address blocks:        107.178.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:7f:f2:c5:aa:34:e8:74:94:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=2f141b67-d53f-42f2-b28b-9ffca1733e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:81:a8:1b:6c:9a:fe:ee:ec:e2:03:00:e3:a2:
                    5c:db:f0:1f:24:53:de:c1:69:e8:a4:d0:fe:e5:6b:
                    2f:1b:35:76:29:e4:47:c6:65:02:0c:0d:88:18:67:
                    51:d9:ca:56:e2:55:d7:f9:3a:9c:e7:98:d3:3b:97:
                    0e:f2:20:d6:c9:a2:6f:78:6f:4b:04:17:eb:25:01:
                    fa:6e:b2:9e:e7:cf:00:ae:56:c1:4d:39:06:ee:6a:
                    ec:30:5d:2a:7e:fa:bc:65:fa:57:f1:aa:17:e7:30:
                    56:87:ca:96:a2:2a:20:76:1b:39:ff:84:7b:7e:e8:
                    90:f9:9b:75:df:55:b7:78:26:e6:ba:f8:29:61:17:
                    ba:b8:55:31:cc:4e:25:01:26:57:80:39:e0:86:92:
                    49:aa:84:94:7f:60:d1:ad:90:1a:a2:ab:41:d3:87:
                    38:85:37:81:eb:d0:8e:02:ca:8b:2d:91:3f:43:47:
                    39:4e:a8:e0:b9:98:33:43:14:11:83:02:c1:1a:a5:
                    46:98:e9:40:d1:32:d8:97:23:2b:cd:08:c5:81:87:
                    1f:00:c7:50:32:a4:dd:72:0d:69:1d:c5:b7:6c:2b:
                    17:0a:c5:91:78:e2:e2:af:f5:5f:30:a5:bb:7b:44:
                    33:11:a2:13:b7:85:65:3f:1a:4f:39:44:8a:2a:ba:
                    50:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E2:41:D9:FB:FF:F1:5E:30:E9:EC:95:3E:1E:4F:18:C4:E1:5F:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/12468d7e-9bb2-365c-9a4e-d0fdb65a8100.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl

            X509v3 Authority Key Identifier:
                keyid:F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.178.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:26:8d:2f:f9:05:bd:47:b3:b2:37:95:df:d6:37:8e:31:34:
         be:60:6a:d7:43:65:46:fb:4c:ce:1b:23:27:08:c2:bb:a0:82:
         a4:f5:e2:99:13:56:2f:2c:5e:f5:4e:3e:d3:59:46:5b:81:1d:
         55:ea:85:05:0e:b1:2d:2c:06:be:92:e0:96:f8:c6:9b:07:f5:
         7e:91:d1:f0:0b:fe:c9:ec:9c:54:de:aa:3b:72:f7:a7:b7:10:
         98:99:70:7b:e2:45:2d:58:27:7f:75:58:6d:ef:97:f1:ef:d6:
         a7:07:85:f7:56:ad:76:db:a6:ff:5a:39:2e:9b:3b:ac:91:ca:
         5f:5c:c4:48:aa:00:99:06:8e:b0:00:12:c1:d9:62:16:5e:89:
         d2:f8:ca:a0:ba:74:1d:37:e2:33:19:f0:8f:fc:52:ce:24:71:
         63:af:71:2d:ce:3f:7b:d8:e5:fb:a6:87:16:07:88:fd:7e:b6:
         1d:55:8f:5a:39:0e:fa:01:39:90:0f:9f:9e:99:73:89:7b:16:
         9c:3a:04:a3:94:eb:55:d5:cc:4c:38:4f:66:a5:67:4a:06:98:
         30:0e:69:d5:4b:f6:b4:80:f6:d4:06:5c:ee:e7:e4:41:f9:80:
         4f:34:30:a4:58:64:48:89:5a:03:d8:2a:18:94:4b:0a:bd:db:
         d3:a6:f3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:50 2025 by rpki-client