Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/557bf8cd-8dc9-35bc-be62-eb6c1845e5d3.roa
File:                     557bf8cd-8dc9-35bc-be62-eb6c1845e5d3.roa (raw, json)
Hash identifier:          mxlOQhefi3A7xVl26XTNx0ZnoT6DNRuhbnt7en6rVYs=
Subject key identifier:   54:A5:4B:E2:44:16:35:CC:9C:5E:9B:00:92:EA:C0:36:AB:34:F0:86
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F43285848A400B606D90B54F81262E1A0
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/557bf8cd-8dc9-35bc-be62-eb6c1845e5d3.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     54994
IP address blocks:        157.185.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:b6:06:d9:0b:54:f8:12:62:e1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=3fe670c0-6538-4b57-b666-7df634eb969c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d7:a3:fd:83:38:f9:95:a6:a0:e6:a6:90:0a:
                    1d:77:32:c6:43:82:e4:1e:0b:f9:33:59:7b:80:21:
                    0e:7c:19:7b:96:94:aa:07:8a:70:0b:94:99:e4:27:
                    ee:94:f1:69:9a:7b:d0:c1:90:1a:77:71:48:af:97:
                    6c:32:16:03:79:cd:a7:63:45:a1:18:90:92:e0:9f:
                    53:c9:bd:18:d7:25:a8:ab:f1:81:6a:5e:80:ad:be:
                    1d:d0:cc:22:37:ad:b1:2b:c6:2b:31:10:09:d6:b1:
                    08:80:1c:40:46:84:d4:29:c7:da:f3:d2:47:22:b2:
                    a0:6b:47:72:21:58:a4:ae:ce:8e:a0:f3:44:ca:a4:
                    f9:75:10:50:e1:01:80:a8:18:f9:08:23:ad:93:53:
                    fd:70:04:da:71:ae:74:04:5a:2e:6e:0f:3d:4e:4e:
                    2e:7d:33:31:c3:ea:97:d5:e6:b5:03:e3:fd:0e:e7:
                    e6:ea:ba:f3:63:14:6a:04:fa:db:d7:e2:27:59:21:
                    55:d5:ed:90:d4:ee:e9:4d:c9:ac:48:0c:51:00:e7:
                    45:de:63:42:0c:c2:07:54:3b:46:1b:e3:dd:98:fc:
                    c0:ec:e1:4d:05:53:19:3d:1d:54:5f:f0:19:2b:86:
                    7f:6b:fd:03:78:2d:ce:ff:0d:66:13:6b:0e:3c:bc:
                    80:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A5:4B:E2:44:16:35:CC:9C:5E:9B:00:92:EA:C0:36:AB:34:F0:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/557bf8cd-8dc9-35bc-be62-eb6c1845e5d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.185.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:24:08:2d:e2:00:4d:65:88:a6:01:18:90:5f:82:f3:bd:38:
         73:2a:12:31:3b:cb:f3:4b:d8:d9:ca:f3:d9:0c:c2:1a:17:d4:
         6e:86:4f:c5:eb:44:9a:dd:54:9d:aa:44:ea:3a:f5:dd:74:3b:
         9b:b8:53:f7:d2:e3:a5:3f:02:76:1a:ba:7b:34:7b:13:06:f9:
         48:9b:69:7b:fd:9a:f7:6d:bf:f6:4d:94:21:53:39:8c:86:9a:
         4e:ef:2b:80:23:38:79:09:bc:57:21:a4:64:ae:ef:f2:92:19:
         b8:2b:b0:d4:7a:8c:9c:64:f5:65:80:66:97:55:18:28:85:55:
         74:8a:dc:bf:70:d7:e2:f2:65:7f:dd:37:77:2a:07:c6:54:16:
         a3:01:39:e1:f2:1b:4f:ce:56:af:a1:b9:40:8c:6e:20:1c:71:
         a9:9f:ba:0c:8c:55:4a:c7:f1:13:9e:bc:11:25:21:5c:f4:ec:
         9d:cb:92:60:79:92:36:4d:58:31:41:6a:fc:03:14:5a:40:3f:
         78:a2:86:d0:84:df:f1:57:89:09:8f:d0:49:d2:dc:e1:6a:26:
         ac:2e:b3:ad:9a:a5:10:7a:40:82:1f:aa:dd:93:75:f1:82:46:
         f7:15:01:8e:6b:95:a1:3b:bf:e4:63:f3:71:e8:c8:84:90:ad:
         09:1e:4a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:25 2025 by rpki-client