Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bdb95884-a77a-345c-a80d-6363c583f603.roa
File:                     bdb95884-a77a-345c-a80d-6363c583f603.roa (raw, json)
Hash identifier:          nUhDMbX/lnMFnGkVC/fH+TfqYnYM+138jESIhLcxsk8=
Subject key identifier:   6D:8B:43:26:F0:BE:5D:0E:D6:03:36:EC:74:0B:E6:C2:F5:B2:5E:FE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848EF614BDB7A6221AEE2CFF600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bdb95884-a77a-345c-a80d-6363c583f603.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     36183
IP address blocks:        172.226.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:4b:db:7a:62:21:ae:e2:cf:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=d77bd310-fa37-45d9-b0f9-1698142c0e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:96:f1:73:33:3a:01:c3:d7:6b:2e:0f:24:fd:
                    8a:75:cc:42:da:02:9d:96:bf:3b:7f:4b:93:69:60:
                    bd:be:61:62:55:6a:03:bf:07:f1:fe:71:39:13:04:
                    89:6d:3b:2b:d2:6e:e3:cc:05:de:75:2b:6e:ea:30:
                    f6:16:0f:0a:49:19:b9:4d:8e:b4:2a:72:20:42:ea:
                    f9:62:83:93:3c:1e:07:36:91:fe:ba:9e:41:9d:38:
                    74:7e:60:8b:d9:56:0e:d1:0c:02:93:3f:6b:cd:53:
                    8b:cd:cc:5f:f2:95:36:d0:c9:87:1a:31:9c:93:ac:
                    18:74:56:6f:63:45:6a:48:bd:7d:b5:37:82:38:74:
                    33:b6:a1:6d:82:1d:5e:25:84:a5:6c:67:98:0e:48:
                    3f:be:bf:6b:43:9a:0f:62:20:28:e8:a8:99:05:46:
                    a8:5a:6d:8d:1b:cc:d3:20:b5:6f:4d:28:a3:2b:ec:
                    ff:c0:ad:b2:c4:38:29:a9:f4:55:88:82:8e:d2:82:
                    fd:d8:f9:fd:49:3f:90:cf:0a:6f:20:3c:8a:5b:72:
                    bc:21:e9:99:1c:81:1a:16:d4:ae:1e:3b:b5:43:ed:
                    b3:18:ff:7b:ba:ab:df:a7:ed:09:fc:3a:75:22:56:
                    cc:11:51:fa:78:7e:5c:5c:a2:58:f9:10:fa:93:a5:
                    28:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:8B:43:26:F0:BE:5D:0E:D6:03:36:EC:74:0B:E6:C2:F5:B2:5E:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bdb95884-a77a-345c-a80d-6363c583f603.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:6b:dc:1e:91:be:c0:48:e7:ef:fb:27:1a:40:f6:52:6e:75:
         1d:87:e2:ce:86:de:4d:a5:2e:e8:b5:95:68:e1:dd:95:aa:dd:
         74:e5:b1:78:2a:52:13:8e:90:77:4b:1e:23:62:99:ef:d3:41:
         e3:b5:14:2f:4a:f6:8e:73:2c:1d:8a:18:79:80:9b:42:bc:47:
         ea:6a:76:59:25:59:a5:e3:3e:d3:a8:5a:5b:20:7a:57:b3:ed:
         69:ca:4b:fd:41:18:c7:9b:be:c9:a2:1a:c1:e6:9e:04:47:0e:
         ac:ea:9a:aa:18:fc:a7:e1:43:2d:c5:42:60:5a:76:d0:05:5c:
         e0:bd:a7:3b:e3:2f:17:96:22:95:fd:c4:72:d8:20:22:e2:8d:
         e3:62:2f:4f:e4:f8:27:a1:a1:e2:4d:5e:b3:52:07:53:07:6e:
         f7:ef:90:5b:e0:8f:60:2f:c0:72:b4:4a:1b:f2:92:73:f9:f8:
         52:ea:e2:fe:b2:a6:67:f7:57:52:8a:5d:91:4f:55:24:45:f1:
         0f:a6:88:61:2f:38:ec:31:8a:36:8c:12:92:05:1d:a7:73:ee:
         6d:49:fb:08:27:9f:ef:da:6f:f0:33:d1:e1:5a:18:de:1b:a0:
         65:f0:fa:ac:80:27:c6:83:62:92:a8:2c:79:a8:61:bf:a5:8e:
         21:49:9a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:23:20 2025 by rpki-client