Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/09d55828-5c08-34d0-ba6e-aec1be6fe5a3.roa
File:                     09d55828-5c08-34d0-ba6e-aec1be6fe5a3.roa (raw, json)
Hash identifier:          EpYUT/YUP3roLjJwGfCrm0iIZpAQPvQf8ZcI+V3fqnA=
Subject key identifier:   6F:DD:04:BD:B7:97:A4:39:2A:16:0B:A6:C3:CA:98:E6:EC:9D:3A:03
Certificate issuer:       /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial:       010D0C9F4328584976A995620DBFE10F7DC74600
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/09d55828-5c08-34d0-ba6e-aec1be6fe5a3.roa
Signing time:             Wed 09 Apr 2025 01:00:47 +0000
ROA not before:           Wed 09 Apr 2025 01:00:47 +0000
ROA not after:            Tue 08 Jul 2025 01:00:47 +0000
asID:                     11377
IP address blocks:        159.183.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:76:a9:95:62:0d:bf:e1:0f:7d:c7:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
        Validity
            Not Before: Apr  9 01:00:47 2025 GMT
            Not After : Jul  8 01:00:47 2025 GMT
        Subject: CN=9c6b4e8b-d62a-47cf-ba65-21342448a0c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bd:5d:31:3d:48:6c:cc:3e:7f:5e:3f:23:29:
                    80:47:e1:fc:ac:26:a2:79:66:0b:e7:29:0b:15:b1:
                    f6:bf:fb:04:d6:d9:ce:7c:96:ee:1f:bf:2f:99:96:
                    5b:ea:d1:4a:e3:25:9d:fb:ab:24:f1:24:d6:7c:81:
                    14:c1:d5:d3:21:12:0c:77:5c:a0:d4:5d:cf:a8:74:
                    02:fa:b2:9f:b1:b9:0d:ea:e1:cf:27:64:f6:bc:9a:
                    0a:cf:bc:ca:70:7e:10:dd:dd:67:a6:96:9a:c0:7a:
                    ee:79:54:2e:5f:4c:7a:aa:a7:03:40:e0:8d:49:1c:
                    f3:d4:74:9b:04:94:8f:69:45:a2:8d:dd:de:c0:9b:
                    4a:63:b6:da:ca:ba:4c:45:94:af:cf:b3:e1:fc:3c:
                    fb:2c:bf:32:72:78:62:d6:7c:83:e7:69:6b:da:f3:
                    11:34:8f:db:3c:3a:4e:01:30:76:9c:25:42:62:43:
                    c6:16:91:bb:74:15:b3:09:4d:3f:ad:ca:db:83:a2:
                    d8:78:52:4c:91:b9:1d:2e:3f:c4:7a:89:3f:94:cc:
                    60:a2:c5:e5:04:d9:d4:78:1d:3f:85:b9:96:95:68:
                    62:25:39:84:97:d0:dc:41:3b:64:19:45:46:2a:fa:
                    f4:2b:73:34:ed:c1:53:23:d0:cf:df:d7:97:22:19:
                    80:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:DD:04:BD:B7:97:A4:39:2A:16:0B:A6:C3:CA:98:E6:EC:9D:3A:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/09d55828-5c08-34d0-ba6e-aec1be6fe5a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl

            X509v3 Authority Key Identifier:
                keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.183.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:eb:32:19:67:e4:8d:0a:dd:b6:86:e6:90:02:7f:19:37:ae:
         c3:61:db:65:4f:27:2c:98:83:d7:a6:76:5b:e9:ff:bc:8e:65:
         cb:3a:28:d6:90:4c:87:49:dc:59:74:d8:0d:9d:36:8e:1a:d7:
         9e:9f:c8:f9:4b:12:13:fa:9e:ca:e6:07:ba:d3:bb:bc:6c:ea:
         5b:4f:71:e2:8b:94:65:87:b8:f6:61:b5:54:28:45:5a:d4:8c:
         e5:f4:10:57:46:af:9a:0b:5b:91:b6:06:cc:0a:7e:e5:0f:17:
         bc:38:33:ff:65:04:41:cc:07:d4:99:68:53:9a:31:d8:18:fc:
         0d:98:be:52:a8:ca:7c:07:a2:10:8c:df:74:40:c5:b2:da:b7:
         3a:67:a2:8f:6a:b1:ef:0f:a7:fd:29:25:ed:20:94:fd:a7:62:
         f4:26:26:8a:80:b6:f1:b4:96:2d:ca:13:b5:a3:b2:7e:cc:cc:
         58:c0:54:ef:7b:90:7a:ce:48:c1:01:c9:f1:c8:69:5d:9e:64:
         83:d5:e0:98:e6:f5:dd:bd:31:ad:0a:71:30:a9:bf:5e:18:f8:
         a0:81:95:be:2d:f6:29:13:fb:d0:6e:ea:97:24:20:90:86:6e:
         d5:6d:98:32:37:15:1b:82:91:1f:c2:9f:85:25:c4:47:89:fd:
         f9:b3:bf:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:06:20 2025 by rpki-client