Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/226ad5c9-494c-3ab2-8ff6-36852658f30f.roa
File:                     226ad5c9-494c-3ab2-8ff6-36852658f30f.roa (raw, json)
Hash identifier:          /wpEgdpnrEFzUPaGRZ+ZOsP9B/JB8Qu+Eoz+IH0zsak=
Subject key identifier:   BB:BF:1D:F6:A1:7A:C4:BD:64:97:6F:1C:F1:3E:95:4F:0F:E3:26:46
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285848FD56BF0827BADD47EB13C840
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/226ad5c9-494c-3ab2-8ff6-36852658f30f.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        170.114.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:bf:08:27:ba:dd:47:eb:13:c8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=a7cc1f3a-32d1-4b15-a4f0-551694e1b4cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4b:ba:53:86:87:14:77:bb:c9:e0:e0:49:b4:
                    3d:b6:33:2b:3e:94:7d:b2:e5:02:15:77:ba:01:ea:
                    51:ce:ad:ce:79:d3:98:57:9c:91:fa:2a:9c:e0:69:
                    46:b8:e0:7e:c0:ed:4b:da:a6:f3:5e:7a:3c:0e:06:
                    c3:2b:76:d1:a4:ab:f1:bd:66:bd:f1:6a:6a:cf:82:
                    56:89:fd:05:57:65:44:0b:65:d6:4f:bd:1c:ff:c7:
                    5a:4b:de:ff:95:0d:f9:31:95:7e:fa:71:68:f4:55:
                    b4:3b:ee:cb:50:7b:d9:65:8f:5f:15:3f:81:19:be:
                    a2:29:97:4c:e0:cc:56:95:e8:90:5c:77:ec:7e:11:
                    94:5d:5c:15:4a:66:7c:48:e0:09:88:24:0d:11:26:
                    21:40:63:2c:26:19:36:4d:2c:a7:84:d5:ed:e0:8d:
                    28:b5:fe:c2:2b:9e:1c:f5:7a:8d:4e:f5:6b:3d:d1:
                    f3:b7:67:c8:03:d3:5e:d3:34:5f:69:09:5e:9d:98:
                    6d:38:eb:9e:9d:d3:4a:aa:e5:d3:e0:57:2e:5a:ea:
                    53:7f:f4:f4:ee:f6:a3:c4:e0:1b:31:3a:7d:10:31:
                    a0:85:dd:34:17:55:be:72:49:12:77:e8:9e:68:df:
                    b8:06:b6:ed:19:f1:b6:17:c0:d3:06:ad:8c:94:d1:
                    a2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BF:1D:F6:A1:7A:C4:BD:64:97:6F:1C:F1:3E:95:4F:0F:E3:26:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/226ad5c9-494c-3ab2-8ff6-36852658f30f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:0c:86:69:b0:7f:54:8c:98:54:cb:34:5b:69:3a:4f:75:9f:
         ed:da:d9:7e:aa:0c:24:60:ae:93:53:af:2e:08:24:f6:8c:bf:
         e2:4e:14:1b:e9:22:e1:12:b5:ea:f0:6c:12:f9:34:4e:09:a5:
         98:50:a1:d9:0f:68:51:d3:e2:d7:d0:e1:11:ab:04:ba:bf:b8:
         eb:ba:92:ff:87:93:2e:f1:a8:e4:50:4b:f3:7c:03:36:64:5e:
         92:0e:25:64:b4:1e:6a:12:1b:3f:a3:42:52:23:a7:d2:6c:24:
         63:a3:7e:6a:26:ee:85:f5:96:ba:13:59:cb:59:d7:1b:13:6d:
         c0:c6:06:8d:d6:c8:d3:b3:a4:9c:9a:53:87:e0:af:e9:c1:15:
         75:25:5b:c3:dc:d5:0c:ed:b6:a7:3a:98:ee:17:57:f7:b5:25:
         af:18:7f:42:0c:48:45:aa:b3:af:47:17:02:89:d0:c1:e2:75:
         16:68:9a:36:cd:d3:b1:82:94:e9:d0:9b:b1:6d:66:42:0c:42:
         c3:0c:f1:71:4e:a2:85:d0:45:31:2e:36:1b:ff:9f:60:1e:e9:
         60:f9:b4:a7:d1:d5:93:2c:2c:94:15:ad:ea:04:ae:67:cd:8d:
         d5:6b:b3:0c:77:d9:c0:4f:f8:63:21:3c:df:2f:58:52:0c:33:
         3a:c1:30:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:35:29 2025 by rpki-client