Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/c50efb51-8819-3761-9b59-aa5214e29f89.roa
File:                     c50efb51-8819-3761-9b59-aa5214e29f89.roa (raw, json)
Hash identifier:          efsj7CJ1f9hOuCw1nQ18wEVVhOslQakeH1CH1iX2nis=
Subject key identifier:   DD:F9:E0:2F:CC:3B:57:4E:83:E8:34:35:4F:B5:58:7D:7B:AB:AA:00
Certificate issuer:       /CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
Certificate serial:       010D0C9F4328584961B9990FD3D07ECD4D93B774
Authority key identifier: DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/c50efb51-8819-3761-9b59-aa5214e29f89.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     14579
IP address blocks:        167.80.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:99:0f:d3:d0:7e:cd:4d:93:b7:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=0a78982d-699a-43e2-857a-2ef6e50ecf47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a2:be:66:01:92:12:af:19:47:6b:47:b2:1f:
                    8c:3f:d0:c7:d7:54:78:65:7a:9f:7c:40:60:32:b3:
                    97:67:47:c2:ae:f1:3f:42:93:da:58:f0:0e:bb:2b:
                    de:4c:54:78:ba:8c:8e:e9:a7:2c:4e:41:00:09:6c:
                    d6:83:ac:1b:85:57:35:df:96:1e:26:fb:d0:99:4f:
                    37:a5:f2:fa:74:52:ad:96:da:a4:a6:69:07:e4:4a:
                    a4:04:58:c3:a1:d7:e5:c2:44:13:f6:c4:ac:c8:27:
                    c9:71:1f:d3:44:d3:69:5c:55:7a:19:b6:81:ed:a2:
                    65:a2:af:1c:7c:e0:37:e8:b4:3d:8c:ff:5e:8f:58:
                    1b:07:63:b4:ba:82:88:14:bd:b4:cb:e1:15:db:5e:
                    4d:68:98:77:1e:29:a3:13:1b:44:b4:dc:cf:47:b9:
                    9b:05:76:0c:ee:87:93:df:a7:1e:4a:1b:aa:3e:e8:
                    94:e6:5e:0f:9b:09:ae:90:6f:a2:e6:3c:67:e4:ba:
                    02:b9:e5:28:aa:14:9c:dc:69:2a:40:5b:a4:d3:91:
                    d0:9c:97:0d:dd:f6:5c:98:f2:ef:5f:9d:f3:34:82:
                    ef:59:87:e9:a5:b9:5b:43:7f:23:dc:34:b7:10:39:
                    09:97:b7:c0:30:a4:f4:f8:03:47:27:e8:99:b6:77:
                    e5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F9:E0:2F:CC:3B:57:4E:83:E8:34:35:4F:B5:58:7D:7B:AB:AA:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/c50efb51-8819-3761-9b59-aa5214e29f89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl

            X509v3 Authority Key Identifier:
                keyid:DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.80.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:5e:1f:e9:be:b0:17:80:51:c7:bb:3c:0b:cf:f4:c9:e5:6d:
         5a:dc:f1:e6:e4:cd:57:7b:12:b7:b4:a6:1c:ed:c0:92:99:42:
         e1:30:4d:dc:fe:ed:43:25:24:54:0a:c9:41:c8:94:2b:0e:e1:
         48:a9:49:57:de:21:71:94:e2:09:3b:6b:61:7e:4f:dc:73:66:
         63:fa:75:b5:ba:43:39:2e:25:e0:e8:82:c1:f5:08:7c:4b:95:
         95:c2:25:0e:8e:a4:b7:3f:72:f7:2b:be:16:db:9d:1c:57:2e:
         2c:6f:bc:fc:aa:20:47:b0:01:40:a2:26:a5:3e:95:eb:3a:d4:
         b1:91:f7:4c:6f:85:82:76:b3:91:b7:1c:e9:73:d7:de:39:55:
         70:11:87:b1:5f:ab:71:97:86:a4:66:05:81:f7:67:4f:01:c7:
         72:2e:51:88:60:8e:6a:11:0d:28:62:4d:43:1f:2f:e1:d5:d9:
         40:d4:a3:05:2e:61:30:fe:f4:73:44:94:67:c3:2e:88:40:7a:
         2c:eb:92:80:f2:57:ee:96:9e:9d:2c:be:86:b1:98:3c:4b:33:
         9d:7a:ae:ca:5d:23:0e:55:80:b6:5f:2a:2a:c4:cc:0b:1b:0a:
         ec:7c:74:9b:81:16:c7:15:fe:20:c0:c0:0d:40:0a:75:8a:5b:
         0e:43:4e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:05:02 2025 by rpki-client