Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c53f198-7a48-4fd5-8edf-26380048b436/ebc8950b-839e-3d63-bac1-417f04e0340a.roa
File:                     ebc8950b-839e-3d63-bac1-417f04e0340a.roa (raw, json)
Hash identifier:          CHgJzg3eiOwqiT0XCU7Sr4MVbDn55S10/TVLQyupRTE=
Subject key identifier:   69:BE:77:19:53:74:5F:A1:FA:8B:D6:5F:C4:0A:54:BC:54:00:4F:B2
Certificate issuer:       /CN=6c53f198-7a48-4fd5-8edf-26380048b436
Certificate serial:       010D0C9F432858490BCA8968EFD2F31BE6D91E60
Authority key identifier: 2E:AA:85:85:CA:71:7E:87:45:3F:AD:47:DC:02:CA:EA:2E:C5:3E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c53f198-7a48-4fd5-8edf-26380048b436.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c53f198-7a48-4fd5-8edf-26380048b436/ebc8950b-839e-3d63-bac1-417f04e0340a.roa
Signing time:             Sat 01 Mar 2025 18:15:48 +0000
ROA not before:           Sat 01 Mar 2025 18:15:48 +0000
ROA not after:            Fri 30 May 2025 17:15:48 +0000
asID:                     401203
IP address blocks:        192.75.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c53f198-7a48-4fd5-8edf-26380048b436/6c53f198-7a48-4fd5-8edf-26380048b436.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c53f198-7a48-4fd5-8edf-26380048b436/6c53f198-7a48-4fd5-8edf-26380048b436.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c53f198-7a48-4fd5-8edf-26380048b436.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:ca:89:68:ef:d2:f3:1b:e6:d9:1e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c53f198-7a48-4fd5-8edf-26380048b436
        Validity
            Not Before: Mar  1 18:15:48 2025 GMT
            Not After : May 30 17:15:48 2025 GMT
        Subject: CN=e88e2e61-a3d9-42f4-8203-e21dce3b3294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6c:ca:00:05:d0:89:16:55:5d:5d:0b:d2:90:
                    9b:54:cb:e4:fb:c9:94:11:33:cb:b5:c3:4c:30:74:
                    99:4a:13:16:a1:cc:74:b1:72:e3:4f:15:c2:60:f1:
                    c0:db:66:60:39:51:08:d3:5d:36:c3:ed:fd:0b:da:
                    c3:74:76:65:7d:95:4c:85:97:b7:85:2f:dd:b6:ed:
                    6f:fe:93:9c:6c:ff:51:f2:31:7c:88:76:33:31:c0:
                    cb:94:69:a9:2a:23:1f:0a:c3:7b:d1:54:35:60:43:
                    d7:5d:c3:53:fa:00:24:48:17:04:9b:6a:ed:45:8f:
                    81:ae:e9:76:99:94:b0:e9:d5:80:87:d7:dd:06:1b:
                    0d:61:b2:81:e7:4f:d9:da:f9:a6:d2:ce:b6:57:82:
                    6e:63:1d:1c:1e:75:a5:15:d9:28:58:8b:29:08:d5:
                    04:e9:87:3e:b1:f2:1e:fb:65:f1:b4:06:57:7a:5d:
                    40:16:dd:8e:af:09:d8:cb:83:74:eb:12:e5:29:0e:
                    9c:35:07:d9:aa:92:00:7f:c9:c0:d7:08:32:33:e6:
                    be:24:b8:c4:de:3e:8d:f1:92:d0:1f:32:ef:45:30:
                    ac:cb:2c:9a:60:3c:91:17:0d:7e:83:8c:7d:8d:27:
                    02:6a:77:d5:9b:45:cf:7f:ca:11:e7:66:43:12:23:
                    c6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BE:77:19:53:74:5F:A1:FA:8B:D6:5F:C4:0A:54:BC:54:00:4F:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c53f198-7a48-4fd5-8edf-26380048b436/ebc8950b-839e-3d63-bac1-417f04e0340a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c53f198-7a48-4fd5-8edf-26380048b436/6c53f198-7a48-4fd5-8edf-26380048b436.crl

            X509v3 Authority Key Identifier:
                keyid:2E:AA:85:85:CA:71:7E:87:45:3F:AD:47:DC:02:CA:EA:2E:C5:3E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c53f198-7a48-4fd5-8edf-26380048b436.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.75.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:f4:1b:17:7c:61:94:a3:65:6b:98:0a:5a:22:4a:57:5d:e5:
         98:35:65:a6:3a:cb:30:2d:d9:db:74:c2:11:f7:19:af:1f:cc:
         77:6e:a1:f6:b8:06:41:91:2c:ad:e2:af:64:55:4c:b3:06:d1:
         c2:47:c9:28:bd:09:de:76:db:bb:d6:de:aa:6a:fc:57:53:09:
         2e:ea:e3:eb:64:09:c3:8d:0f:db:c9:63:b8:e8:7e:a8:6a:cc:
         b9:ac:6f:10:ab:a3:c3:9c:6d:8b:c5:13:a7:01:f8:2b:dd:c3:
         12:dc:d3:9d:0f:95:0b:20:93:29:b6:0e:89:c6:10:ef:36:ac:
         d3:5a:84:54:ed:be:d4:45:bc:50:83:13:0a:1b:9e:72:16:ed:
         10:fe:db:26:2c:43:d3:8a:3b:7d:06:fb:d4:2a:e9:03:f8:73:
         2a:13:61:c8:4a:fe:d7:de:3f:d5:b8:8e:33:58:23:33:b3:e2:
         4f:47:58:48:5c:00:a5:50:16:5c:df:0f:d2:19:d6:39:93:55:
         27:00:da:f5:95:77:f8:5d:52:5a:e2:f7:45:57:d2:aa:c2:15:
         cb:1f:c4:e0:2f:4c:df:9c:38:be:22:5c:88:eb:c2:02:10:fb:
         d0:46:69:3b:08:b3:e5:f1:a7:9a:13:69:f7:5d:b8:59:27:86:
         4d:95:21:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:17:34 2025 by rpki-client