Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bc5dc63e-6644-3d0d-8199-1d3d5f852bb1.roa
File:                     bc5dc63e-6644-3d0d-8199-1d3d5f852bb1.roa (raw, json)
Hash identifier:          RFbWwVNWC3uWm2r1bm88myPDYEIGlYs2DshQTRWbYOs=
Subject key identifier:   0B:4E:66:D1:69:C2:2F:F1:94:6E:89:AB:4A:50:D4:47:5B:5F:EF:39
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C43B43A788358A0E926040
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bc5dc63e-6644-3d0d-8199-1d3d5f852bb1.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        167.82.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:3b:43:a7:88:35:8a:0e:92:60:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=9d8b97e7-9c58-454e-a367-9262bd4ac0e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4e:e4:62:a0:36:01:b4:ce:12:9f:b0:cf:b9:
                    5f:02:2b:85:c0:03:e0:d5:b6:9c:a4:88:ee:ba:17:
                    93:ec:ca:74:58:c7:21:56:53:47:ba:a3:08:00:53:
                    69:25:11:77:19:25:30:a1:f1:19:a4:15:87:65:86:
                    5d:3c:f7:83:9f:20:5c:e2:db:78:db:5a:22:4d:bc:
                    ad:56:66:e0:6e:37:69:2b:d5:15:d3:52:b6:a4:c4:
                    d7:37:58:78:e5:ae:74:8e:3c:c3:f4:c2:2c:06:13:
                    ee:f5:74:ba:3e:61:e9:2b:ee:2c:be:85:b9:23:66:
                    74:15:36:e9:08:13:5d:22:6f:81:85:46:99:d4:20:
                    35:56:31:4f:b3:70:15:10:0d:0a:ea:b4:64:da:13:
                    32:38:e9:51:e9:55:fa:4a:3a:c7:3b:0c:18:c3:33:
                    0f:b5:eb:1d:91:03:fd:55:67:be:56:3f:c9:34:6b:
                    b6:fc:fe:f8:56:53:ad:e3:f1:9c:01:f3:13:fa:a0:
                    ab:7c:70:bd:ab:dc:51:3b:eb:01:dd:d9:6f:0f:d1:
                    6e:69:60:24:93:7d:dd:7c:7b:06:a7:25:16:c8:32:
                    8d:d1:93:40:a6:9f:39:f2:65:ad:72:c7:52:1d:d6:
                    37:24:1c:69:3a:06:f0:fd:c6:92:d0:98:89:de:d3:
                    19:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4E:66:D1:69:C2:2F:F1:94:6E:89:AB:4A:50:D4:47:5B:5F:EF:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bc5dc63e-6644-3d0d-8199-1d3d5f852bb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.82.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:68:51:40:18:2e:2d:75:24:b3:1d:47:31:01:0a:f7:11:63:
         e4:91:c6:c8:de:5c:09:1e:8e:f0:06:2a:96:bb:df:5a:86:76:
         b5:c6:16:ce:15:a5:b4:47:75:30:9b:e2:06:3e:ca:33:10:2f:
         c4:58:f0:f8:14:0b:88:51:c6:03:7c:25:66:47:10:94:92:9e:
         1e:c4:1e:c2:34:2e:b7:ae:c2:80:aa:70:d5:00:53:01:a8:be:
         cb:40:17:04:aa:e9:dc:b5:19:4c:c4:f4:45:b6:25:6f:62:1e:
         ee:d4:c9:2b:00:0d:d4:71:53:4b:de:d2:a0:82:78:5c:0f:a1:
         07:95:51:2c:77:fe:70:5e:bf:ae:63:8a:17:00:8f:31:f3:ab:
         dc:22:76:7f:ed:e8:de:9f:d6:6c:40:42:92:d4:10:2d:55:96:
         5a:f2:36:6b:b8:f5:64:25:49:c3:9d:f1:e1:3d:81:ee:24:86:
         8b:2b:89:fd:5d:3b:e7:9e:81:4c:99:a1:2b:65:da:58:b8:42:
         f8:8d:c7:15:58:f5:02:cd:86:31:20:86:86:ce:fb:69:c8:cf:
         cd:87:eb:28:8f:5f:9f:49:d9:76:1f:78:7c:ca:71:39:04:6f:
         c7:8a:22:da:52:1f:c5:ba:48:e2:3b:f8:a1:38:1d:93:de:7b:
         c2:e4:03:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:50:23 2025 by rpki-client