Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/299cd8cf-7364-30af-bb84-cbde3460e9cd.roa
File:                     299cd8cf-7364-30af-bb84-cbde3460e9cd.roa (raw, json)
Hash identifier:          SIovDyjktQ1379DOFQ0rTcIKaz1mwfB5gFSerGM4vAQ=
Subject key identifier:   76:B8:B4:5C:6A:AC:6B:4D:FF:89:C9:71:89:8B:1B:32:5D:21:2D:D9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848EF614B4CEC5C52A6F98D7000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/299cd8cf-7364-30af-bb84-cbde3460e9cd.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     36183
IP address blocks:        172.226.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:4b:4c:ec:5c:52:a6:f9:8d:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=d77ff9fa-bbb7-45d7-a1cc-4bf5e5b8cca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a2:a7:37:98:95:97:2f:56:b2:0f:ad:ca:05:
                    a2:38:b8:83:4b:9b:ee:1c:33:79:83:5e:c1:75:23:
                    2f:9c:1c:48:18:0a:16:4b:a7:95:e6:79:4d:ee:a5:
                    2e:f8:6a:74:f3:1d:c9:48:d5:49:ad:06:80:fb:a6:
                    6a:aa:37:81:42:80:c0:f4:ae:73:0e:8e:f6:2d:72:
                    e8:f9:9c:c5:e5:4e:09:e6:ac:41:88:7a:37:d8:58:
                    4c:9e:6a:8a:11:cb:f1:80:14:dc:bc:91:fb:9d:cd:
                    46:64:f6:ff:3c:4f:21:fa:6f:d1:c1:6c:4e:d9:de:
                    8a:f5:f7:d4:5f:bd:9a:78:a7:21:c3:63:fb:da:2c:
                    fa:a3:3a:e9:40:2c:d1:3a:57:4a:d9:b6:92:9b:e5:
                    14:c3:db:08:68:eb:78:d1:82:eb:2f:19:0b:33:97:
                    80:58:2b:6f:31:2b:1a:cd:05:bd:c3:7e:d4:bd:6b:
                    35:d3:c1:d0:bd:f1:de:9b:3e:1e:20:a9:c9:87:8a:
                    ba:37:4d:d2:10:fb:ee:bc:e0:b4:c2:d7:3f:e8:a1:
                    a4:34:13:e7:00:a9:54:80:d3:98:d2:e7:e3:b9:e0:
                    4c:78:7c:73:ec:fb:aa:13:51:fb:dc:ca:85:a8:1f:
                    e5:1c:04:89:88:7e:8c:34:80:96:2c:4d:93:2d:61:
                    3c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B8:B4:5C:6A:AC:6B:4D:FF:89:C9:71:89:8B:1B:32:5D:21:2D:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/299cd8cf-7364-30af-bb84-cbde3460e9cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:1e:ab:db:7f:5c:21:d7:62:f5:63:dc:16:6c:ca:12:30:52:
         5c:03:6c:7c:d6:88:fa:cd:43:1f:81:6c:60:8b:e4:82:86:a7:
         9d:f3:ea:d8:1f:c0:d0:f4:11:de:78:db:4e:08:92:e8:ac:16:
         b5:62:2b:20:65:dc:ce:5b:1c:2b:c7:58:f6:f7:00:b2:c3:a5:
         29:ab:5e:eb:ce:f8:c2:92:52:72:bb:d8:05:78:7e:93:90:54:
         ba:e9:b0:82:7f:77:13:9e:3a:04:9e:14:9a:cd:c8:32:8f:92:
         ff:d8:1b:fa:26:cd:ce:12:4d:86:7a:6a:bb:11:11:58:12:46:
         8b:27:37:2a:a4:fb:b5:cb:aa:08:15:83:e7:54:9d:6a:92:4c:
         6d:73:69:ce:0b:aa:f5:ed:c6:75:fb:44:16:ae:90:6b:fb:21:
         b2:c3:87:af:f2:fd:cf:45:4c:d3:60:74:47:f9:2f:18:75:5e:
         56:27:d2:32:8d:fb:f2:a7:f0:cb:48:d3:b4:77:1f:5b:bd:aa:
         eb:ee:50:5f:f3:71:32:64:2f:43:ec:bc:e2:0d:1e:c0:38:7c:
         36:1a:d9:86:b4:d0:c9:58:07:c7:84:d1:4a:e5:e2:0c:e6:aa:
         21:0f:24:e6:2f:2c:c4:b7:9e:e9:d2:4e:88:92:b8:5a:8d:d1:
         01:b0:f6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:21 2025 by rpki-client