Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5cd2aeb4-3245-3792-9601-e8f3d7282fad.roa
File:                     5cd2aeb4-3245-3792-9601-e8f3d7282fad.roa (raw, json)
Hash identifier:          719zgXHmXU2Z4vowRDWlxZhYD7craAeGkN3y5rg9tNE=
Subject key identifier:   B6:8F:53:67:7D:E2:57:10:98:8D:BD:3A:DA:2D:08:11:61:9B:84:7B
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584905B6AF03DC6E7FC845D56740
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5cd2aeb4-3245-3792-9601-e8f3d7282fad.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     16509
IP address blocks:        170.114.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:af:03:dc:6e:7f:c8:45:d5:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=9dc8365b-18af-46cc-babd-3541acddf227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:65:79:9a:31:6e:80:0c:08:0f:5c:b4:93:8f:
                    f3:b5:01:42:23:e6:0e:87:96:ce:b7:ef:b7:6f:25:
                    aa:5c:69:c4:4e:ee:e7:6e:11:f5:fe:cd:3c:5a:c0:
                    69:62:07:3b:f6:45:3d:62:ae:84:3b:5c:ba:40:e8:
                    df:65:99:52:3c:aa:3a:d7:bc:5f:39:aa:4d:9c:7d:
                    f1:79:03:6a:0e:bd:5a:04:0b:c3:13:6e:a1:84:1c:
                    dd:b0:32:6f:20:ba:12:7d:a2:2b:40:3b:34:b5:1b:
                    b8:28:88:d0:a2:cc:0e:17:25:95:34:1c:97:f5:54:
                    35:8f:f2:54:5d:a0:72:0d:56:c4:80:6b:ed:3e:c4:
                    fb:99:ab:4d:f4:c9:d7:e9:59:6a:fd:45:47:cb:91:
                    c7:81:8f:ed:ec:c4:51:82:33:29:9c:03:7f:37:6c:
                    e7:c5:7b:bc:f7:6c:bf:a9:5d:2b:5e:c3:ea:72:5f:
                    db:e5:14:0c:c2:01:f5:dc:81:13:dd:1d:fb:33:3d:
                    36:36:f2:4d:4c:8a:30:4d:05:c8:c6:07:7c:24:5c:
                    9a:25:b4:5e:a6:eb:14:d2:6c:8e:22:39:9b:45:00:
                    5d:46:36:c4:47:34:b1:e4:dc:38:86:da:ed:b2:ed:
                    4d:22:94:66:13:b7:27:79:18:42:c9:9a:35:8b:98:
                    fe:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8F:53:67:7D:E2:57:10:98:8D:BD:3A:DA:2D:08:11:61:9B:84:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5cd2aeb4-3245-3792-9601-e8f3d7282fad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:54:cd:6d:25:2d:28:09:7f:c2:26:5e:c8:16:ab:01:78:fe:
         3a:26:8f:2b:2b:46:d5:9d:44:14:5d:9e:55:dc:a3:4d:0b:00:
         d3:de:d6:56:df:df:26:19:ba:4c:71:ee:6c:ef:f9:99:32:e4:
         73:82:9f:36:52:77:fa:ef:bb:a6:0c:7f:52:9c:54:46:f5:fb:
         1c:8b:64:9c:6e:85:f6:a2:e0:f2:c4:db:31:48:3f:03:2b:97:
         20:1c:a7:79:e9:b8:f9:db:43:90:67:05:fb:47:6f:56:00:91:
         e7:09:7c:30:a0:47:6d:2b:47:e0:52:23:8a:dd:7f:74:9b:13:
         33:58:6f:6a:e7:70:ea:00:02:12:3d:22:b8:c6:f1:1b:08:70:
         be:7c:8c:dd:be:1c:75:60:a1:92:2e:ee:bf:41:9a:f3:bd:db:
         17:a3:f1:c6:d4:e3:fa:19:36:48:07:bb:2c:5c:3c:10:bb:7c:
         29:0b:d8:8f:fb:35:de:00:ee:1d:65:d7:d0:c2:d5:68:c7:9b:
         e2:a5:6d:21:4d:50:25:f0:b2:94:eb:33:e2:f1:c0:d5:69:18:
         7e:6b:f4:0d:f6:37:40:1a:b1:22:76:18:d3:7b:ac:91:24:25:
         0b:34:aa:7a:13:a4:a1:9c:ed:75:d9:81:d5:e0:10:cb:b0:82:
         e8:02:07:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:46:15 2025 by rpki-client