Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/77bdc095-ec10-3d4c-92c9-95c7cfde9ba3.roa
File:                     77bdc095-ec10-3d4c-92c9-95c7cfde9ba3.roa (raw, json)
Hash identifier:          vYpV9pj5e7evhPwhW150STWL7uPfY9i9K/T0t584XHU=
Subject key identifier:   D7:F6:38:64:60:6A:58:7C:92:86:F1:C8:CC:65:9F:B3:A7:EC:A1:86
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F43285848F65BDE1E36EA21112AA9B500
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/77bdc095-ec10-3d4c-92c9-95c7cfde9ba3.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     42475
IP address blocks:        205.177.67.0/24 maxlen: 24
                          205.177.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:de:1e:36:ea:21:11:2a:a9:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=0e338be9-6295-4b92-9c63-146ef5af0454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e6:84:3f:0e:95:b5:97:fb:42:c1:3c:a9:bf:
                    47:10:6b:ce:8b:27:8d:39:15:07:22:cf:fc:3d:36:
                    8b:67:7f:de:00:15:af:88:2a:a5:e1:d1:69:e0:ae:
                    07:71:d1:5c:bd:2f:04:6c:38:db:11:68:24:f4:40:
                    87:7e:57:97:46:a2:5a:89:5b:97:f1:a6:25:c1:73:
                    59:f6:30:d9:87:d1:01:aa:4c:a8:1e:03:8b:fb:85:
                    cc:a5:d5:c5:d9:58:af:c1:17:9d:95:a4:3e:51:8d:
                    96:7a:5a:96:36:6a:f6:f1:66:42:7a:f1:2b:46:45:
                    b1:af:df:a0:c9:55:36:96:85:35:07:83:4c:10:dc:
                    ef:19:68:47:e6:a3:8d:c4:d4:02:c4:2c:51:98:5a:
                    5d:fa:68:94:23:09:18:c4:0c:53:18:5d:5f:2e:67:
                    4e:f5:cc:54:49:6b:fc:cc:9c:92:bd:a7:ff:f4:5d:
                    83:14:c8:98:cc:a5:57:bc:7d:75:0b:b7:7b:4c:ae:
                    0b:ac:7c:53:1f:5b:50:65:0c:6a:42:6f:a4:7e:65:
                    96:f3:43:39:67:c4:f0:f2:1c:28:2f:f3:ef:49:a7:
                    60:00:cb:37:20:03:5d:62:6c:3b:5f:2b:c7:93:b7:
                    9e:73:8d:72:ce:f9:11:2c:f6:a2:31:b2:cb:cc:19:
                    a1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F6:38:64:60:6A:58:7C:92:86:F1:C8:CC:65:9F:B3:A7:EC:A1:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/77bdc095-ec10-3d4c-92c9-95c7cfde9ba3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.177.67.0-205.177.68.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:6b:fc:89:b9:86:39:ca:3b:7a:d4:bc:88:84:48:51:07:8c:
         c9:66:49:95:ad:0f:29:bd:08:a8:1a:9a:39:36:d9:94:eb:c6:
         c3:30:a6:de:06:3d:e8:7d:95:58:ab:28:94:bf:b7:17:d7:10:
         25:0f:f6:fc:df:76:ce:13:8b:ab:fe:af:e9:9d:89:53:54:05:
         a1:7b:ea:62:ba:a9:f8:a6:f1:e9:5d:97:67:00:7f:67:70:a1:
         54:8b:74:e3:96:0e:ca:e1:1f:8d:9c:a5:44:bf:b4:60:c2:44:
         11:8e:22:7b:ad:de:5a:ec:cf:dc:7b:c4:b2:ee:40:d6:9e:68:
         df:d1:62:21:f2:04:00:ee:38:af:f4:34:3e:44:a8:d0:ad:6e:
         4b:44:ac:63:f7:9f:8a:17:0d:ac:8a:f0:d1:8d:73:5f:7a:9f:
         62:5a:d4:b3:2a:29:53:35:11:65:45:1a:2b:83:ae:fc:c8:34:
         a2:36:47:c8:a0:1f:f9:4e:3a:5c:b7:cd:18:7c:bf:e8:13:2c:
         26:69:86:c7:02:4a:b4:be:9e:ff:c1:95:2d:ad:1f:51:2b:29:
         ef:0a:82:f3:22:9d:59:1b:f8:07:b8:b1:60:73:8d:5e:75:b6:
         72:e9:9c:9e:7f:62:53:1e:fe:f9:86:eb:1b:96:71:7e:af:04:
         b7:e2:89:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:33:30 2025 by rpki-client