Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/826cac33-212b-3cd3-b513-4fc98bffba3d.roa
File:                     826cac33-212b-3cd3-b513-4fc98bffba3d.roa (raw, json)
Hash identifier:          h6rAU+uzgUdFMa5JJ8KmJ020lb2UH/i3iVMPcgl2vkY=
Subject key identifier:   CF:79:52:70:8B:E0:F5:31:24:D3:23:B0:CD:86:18:C6:8E:F1:45:4A
Certificate issuer:       /CN=a7804dec-fd00-426f-bba4-038d9b753fc5
Certificate serial:       010D0C9F432858493C0926CBF7205909FA312380
Authority key identifier: 68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/826cac33-212b-3cd3-b513-4fc98bffba3d.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     270147
IP address blocks:        136.175.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:26:cb:f7:20:59:09:fa:31:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7804dec-fd00-426f-bba4-038d9b753fc5
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=79aa3b33-7be3-4add-a85b-7bf38ab68c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fe:59:4e:f1:a7:a8:1f:55:34:8c:8d:e4:1a:
                    dc:ce:bd:6f:ba:53:af:72:6d:08:4f:a6:fd:3b:3b:
                    94:6d:71:ab:6f:83:a2:61:1f:86:9e:61:c1:e7:40:
                    d5:ea:71:8d:1a:88:73:58:a0:4e:99:cd:92:27:ca:
                    2b:02:95:a7:8d:c4:ef:b5:5c:77:30:0c:22:d1:02:
                    a9:c5:b6:16:f5:e1:8d:be:7a:0a:ea:38:cc:1e:4a:
                    ce:22:95:ab:ff:5c:49:d0:8a:11:fc:e9:bb:cc:d2:
                    2e:7e:79:2d:e7:a7:ec:5e:8d:fb:51:c4:a6:74:0c:
                    95:30:b6:5c:86:f8:77:67:9e:f3:67:55:60:f8:b5:
                    0a:59:37:f9:a3:33:21:89:86:d3:4a:ae:e3:8c:04:
                    b8:32:78:91:cc:ad:5f:37:0b:67:d6:b4:f8:04:38:
                    47:03:6b:c3:d1:52:65:3b:04:83:93:a8:14:d4:9b:
                    e0:c7:6b:a6:4d:02:a2:25:c9:df:cb:2d:96:1e:ca:
                    41:66:f1:66:8a:dc:36:a3:79:c0:b9:62:4d:90:16:
                    87:d5:88:17:37:ef:b8:92:45:31:d5:29:2c:03:6c:
                    07:76:8d:1d:28:fa:50:df:25:b2:a5:d9:f1:22:88:
                    be:1f:c1:8c:07:c0:5f:30:3d:55:39:7a:dd:af:60:
                    74:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:79:52:70:8B:E0:F5:31:24:D3:23:B0:CD:86:18:C6:8E:F1:45:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/826cac33-212b-3cd3-b513-4fc98bffba3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.crl

            X509v3 Authority Key Identifier:
                keyid:68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:08:42:01:0f:30:6f:e9:fa:ea:c7:6d:58:9e:a3:41:65:63:
         01:4f:fd:63:50:33:6f:3c:51:c7:8c:54:c1:6c:58:8f:7a:0e:
         88:ce:24:7f:fb:75:21:3d:c1:90:d5:05:0a:15:61:1a:78:09:
         8e:e8:39:2c:4f:3b:27:c5:ec:27:48:fc:54:23:52:63:ee:30:
         92:b7:bd:5f:fa:70:20:78:60:38:92:83:b6:76:95:9c:75:09:
         e4:65:9b:7e:30:78:30:60:f6:2c:86:2a:24:20:6a:51:e1:51:
         ea:c4:1b:de:94:33:fd:71:6a:0d:a5:3a:7d:ba:0d:ff:6a:70:
         25:fb:f4:9f:80:3b:c8:2f:d5:f9:02:21:a5:32:57:ca:bd:c0:
         ec:93:87:83:9d:84:81:5f:7f:4f:d2:aa:ff:c7:7b:29:a7:73:
         c0:49:c9:f3:5e:2a:d2:6d:1b:39:c8:11:26:f6:12:81:55:2c:
         40:dd:55:65:ad:6c:86:62:36:58:48:22:d9:5e:c0:3c:c6:23:
         1a:5a:af:77:a6:86:ac:31:c8:be:ea:d9:c2:39:74:93:68:07:
         63:af:3b:e3:67:46:ea:d8:23:56:e1:ac:c7:7e:fd:77:70:13:
         4a:0f:9a:34:81:12:11:19:28:0c:4a:43:60:64:21:be:13:f3:
         52:e7:df:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:36:53 2025 by rpki-client