Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/aba5151f-da95-3883-88dd-906de034d844.roa
File:                     aba5151f-da95-3883-88dd-906de034d844.roa (raw, json)
Hash identifier:          1ZMSu8V8U9CQiDPEyeRWboV2Kp/+G7V6MZIZffUW2k4=
Subject key identifier:   D7:50:9A:21:D6:C0:1B:9D:EB:AF:00:B6:29:4A:D0:7F:54:10:16:43
Certificate issuer:       /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Certificate serial:       010D0C9F432858493AA3DE419C8747D3B2D90200
Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/aba5151f-da95-3883-88dd-906de034d844.roa
Signing time:             Tue 18 Mar 2025 13:00:50 +0000
ROA not before:           Tue 18 Mar 2025 13:00:50 +0000
ROA not after:            Mon 16 Jun 2025 13:00:50 +0000
asID:                     36344
IP address blocks:        69.168.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3a:a3:de:41:9c:87:47:d3:b2:d9:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
        Validity
            Not Before: Mar 18 13:00:50 2025 GMT
            Not After : Jun 16 13:00:50 2025 GMT
        Subject: CN=ca408fd9-9631-4824-a3a4-48edb3cd5054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:27:34:20:6b:ee:42:b9:f2:9b:db:9d:bc:0e:
                    e4:38:98:95:32:69:61:08:6c:95:44:77:4a:75:8d:
                    24:c6:1b:3e:e0:f6:c3:ee:9b:a4:37:61:5c:5a:67:
                    6f:c5:aa:31:22:d5:af:3d:dd:4c:96:e0:24:c9:ec:
                    41:8a:f6:94:4e:05:f6:f9:e0:db:e1:9b:4a:49:b3:
                    63:70:45:6e:57:53:fd:bb:52:46:70:51:5c:7b:af:
                    e7:54:db:cd:0b:18:b3:5a:a9:97:33:6c:89:27:97:
                    8d:2a:d2:64:81:44:60:cb:f2:18:47:08:f8:ac:0a:
                    07:c7:f7:8e:64:9c:1d:54:37:23:8c:8a:13:5f:8e:
                    53:cd:a2:43:ad:14:89:75:4e:a4:af:ef:cc:79:05:
                    11:82:a2:a0:49:42:a8:fa:b1:d8:0c:40:b7:27:bb:
                    81:de:3d:22:1b:c7:b5:2c:08:1b:4f:4f:c0:31:12:
                    c1:5e:59:63:89:c9:d7:03:e6:9a:7c:28:e6:39:e9:
                    aa:8b:22:65:cf:6c:33:1e:6d:ae:8d:36:8d:e2:4e:
                    77:4c:59:ff:83:a4:cc:c8:0d:8e:c7:f7:03:3d:52:
                    00:94:48:a6:41:12:ed:3f:ed:4d:18:84:c5:01:95:
                    91:e1:ce:92:8b:f3:ab:12:60:88:0e:e9:96:15:01:
                    a3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:50:9A:21:D6:C0:1B:9D:EB:AF:00:B6:29:4A:D0:7F:54:10:16:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/aba5151f-da95-3883-88dd-906de034d844.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl

            X509v3 Authority Key Identifier:
                keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:cf:23:c4:c0:42:48:03:f3:4d:3e:50:05:5f:fe:06:e1:bd:
         89:76:fc:7a:dd:c9:fb:f8:c3:49:77:37:4f:f6:70:27:27:23:
         a8:fa:f9:93:d0:38:ea:72:4a:7e:19:53:99:4f:50:62:ec:5c:
         b6:16:8b:4b:d5:82:8b:bf:e6:17:8f:db:a0:68:2c:7d:01:e4:
         e1:73:b0:0d:c8:99:67:2b:e1:64:3a:fb:c8:b1:0a:c5:19:b4:
         4c:16:c4:e4:21:56:46:cf:1c:57:b8:d7:ca:1c:4d:d2:a2:bf:
         45:88:c0:9e:f7:8d:3b:dd:68:27:d0:76:e6:f3:bb:47:d4:b3:
         9d:4f:f8:fb:23:a2:09:9e:92:bc:7b:f9:9f:d3:24:13:1c:0f:
         23:55:03:94:41:a7:27:06:61:f2:5b:8c:16:82:90:f3:e6:70:
         8e:16:b8:7b:9a:01:cb:bd:4b:df:47:1a:aa:e2:3a:42:0c:25:
         d5:23:80:7a:67:8d:75:9b:1b:21:91:71:2b:eb:f9:40:8b:08:
         99:0d:b4:50:95:2b:09:25:cd:19:ad:bd:ff:05:48:74:eb:f3:
         68:5c:e0:4c:d0:97:34:83:2f:0a:32:16:89:bc:1b:5a:3e:c3:
         e8:cd:56:4a:d5:0d:7d:d0:16:7d:50:4b:74:10:47:ad:ca:d5:
         d0:45:be:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:19:53 2025 by rpki-client