Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/1568ffa4-448a-3377-932d-fa759841f527.roa
File:                     1568ffa4-448a-3377-932d-fa759841f527.roa (raw, json)
Hash identifier:          zeeV0wqYFRVCo9AMtGYmRMWUFee0efndGQ2/uWk9mE4=
Subject key identifier:   9F:ED:C8:50:03:AB:42:54:C5:E6:A2:E1:FA:E1:41:55:61:54:40:61
Certificate issuer:       /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
Certificate serial:       010D0C9F4328584900215874BA4BDCB5F9567040
Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/1568ffa4-448a-3377-932d-fa759841f527.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     36445
IP address blocks:        205.178.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:58:74:ba:4b:dc:b5:f9:56:70:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=7b451b95-c02a-4b50-bb58-a3ef3fa1616d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9a:9e:1b:d0:2b:b1:20:ca:44:59:ca:b4:d0:
                    92:b0:19:a0:94:ec:3d:ba:71:a9:f7:f4:30:5b:41:
                    ad:c2:69:3f:5d:b6:54:85:ca:24:63:2a:9c:2e:6c:
                    7a:5b:0e:e8:8a:51:40:f5:64:83:98:2d:af:3e:7a:
                    b1:64:28:1a:ea:d6:21:38:63:d1:b8:8e:cc:9f:15:
                    24:66:e8:c4:3e:ae:5f:4c:fa:e1:ec:d3:da:da:51:
                    c3:d3:a2:7a:03:4b:6b:7a:3a:83:2f:dc:6c:c4:07:
                    32:cf:77:f2:b1:da:00:11:87:4b:51:01:31:09:ec:
                    b1:71:b2:02:8e:e7:e1:9b:b0:5f:61:86:d2:00:71:
                    ad:3e:ce:b0:a2:e5:a1:69:3b:01:24:c0:aa:4a:5c:
                    a9:22:4f:6c:da:60:2b:4c:99:48:63:0c:9e:14:aa:
                    85:24:69:08:ed:02:39:92:cc:95:0a:e3:f5:cf:1a:
                    18:a2:d4:ac:8b:5b:22:fa:70:42:0d:30:e6:18:42:
                    c9:d9:12:dd:f2:b1:7e:9a:c9:56:c0:22:85:a2:fc:
                    15:84:65:9b:6f:fa:d8:68:1f:d7:c7:b8:68:9b:58:
                    b8:99:b8:95:9c:7c:42:4a:d1:47:de:64:6d:00:f6:
                    bc:60:51:2e:cf:a9:ac:77:30:00:35:e5:94:9a:b8:
                    ec:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:ED:C8:50:03:AB:42:54:C5:E6:A2:E1:FA:E1:41:55:61:54:40:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/1568ffa4-448a-3377-932d-fa759841f527.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl

            X509v3 Authority Key Identifier:
                keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.178.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:70:43:8f:8f:55:26:44:fe:69:79:17:d6:3f:55:1b:45:b6:
         43:8e:9d:92:53:28:07:d7:46:7f:db:72:93:92:8c:3f:29:a0:
         62:6b:99:e0:1a:b0:96:f1:20:79:b7:cc:58:42:40:cd:38:ea:
         6a:c6:b5:5a:c8:ac:93:ed:b6:4a:e8:c7:88:47:c1:97:86:79:
         cb:58:36:0a:4f:ab:e7:9f:7f:da:41:d0:92:29:d9:0f:65:fa:
         fb:1b:66:fe:68:44:f6:7c:87:3b:ce:21:27:81:79:28:f6:eb:
         f9:cc:fd:79:60:02:4f:92:f5:0a:ce:09:97:a7:70:b5:14:ca:
         8c:e0:1f:89:bd:30:96:14:5b:1b:7e:53:66:42:ac:83:a0:e2:
         61:1b:50:a0:cb:1f:98:c9:71:69:30:c1:8b:75:6d:77:1a:e4:
         a3:db:92:0c:22:4d:2a:2d:21:e9:0a:f7:de:ba:ad:f5:72:60:
         ee:ca:28:82:dd:db:81:67:dd:b1:43:cb:f0:58:ac:9e:b1:e3:
         60:a2:99:d8:14:78:41:05:c5:41:2f:60:cd:e3:31:5a:49:d6:
         52:f9:1b:56:b2:4e:5c:eb:30:e4:d7:3b:f2:f6:a7:23:54:ab:
         bc:f6:58:30:fb:49:4e:e6:0e:8f:75:ee:e0:53:8c:a7:3c:26:
         8f:3c:fc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:59:59 2025 by rpki-client