Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/df7c5515-0486-333e-8c0d-4be1af31b67f.roa
File:                     df7c5515-0486-333e-8c0d-4be1af31b67f.roa (raw, json)
Hash identifier:          qUag+PZ9NRNPsviXh9PBWXk8VU8AIGNfo3tu8ARsnSg=
Subject key identifier:   AD:AD:5B:61:E5:FF:FA:FD:A0:0B:DE:C0:02:8B:50:1F:3E:3B:D7:33
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285848CDE110A3087957C7120ACFC0
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/df7c5515-0486-333e-8c0d-4be1af31b67f.roa
Signing time:             Fri 07 Feb 2025 14:00:53 +0000
ROA not before:           Fri 07 Feb 2025 14:00:53 +0000
ROA not after:            Thu 08 May 2025 13:00:53 +0000
asID:                     31898
IP address blocks:        170.114.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:e1:10:a3:08:79:57:c7:12:0a:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Feb  7 14:00:53 2025 GMT
            Not After : May  8 13:00:53 2025 GMT
        Subject: CN=88a6ac30-fb93-4c94-90b8-e0915db8e3da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:86:b5:c7:5c:da:a2:57:b6:51:be:9a:b7:99:
                    8c:06:11:91:76:0e:71:e7:25:88:6d:2a:16:5b:bf:
                    74:9a:f9:a2:99:1f:65:60:64:18:5f:db:13:d6:df:
                    6a:98:ed:03:eb:33:0d:a1:50:f9:ac:ff:fb:c4:cf:
                    46:8d:41:5f:97:74:11:e4:cb:45:e6:2e:d8:07:d3:
                    f6:3d:b3:c7:de:ca:5e:5a:f7:15:b0:07:80:a3:30:
                    87:f5:3e:95:24:4f:c7:3a:23:28:69:47:c3:95:70:
                    40:b0:21:f4:a4:c7:98:cd:b4:df:57:e2:60:af:10:
                    d6:f3:61:9c:81:a5:cf:03:ea:fc:90:cd:cb:f6:84:
                    59:8c:2e:12:e1:2e:f2:48:9e:24:82:65:03:12:d0:
                    e5:74:2c:99:5b:2e:b2:90:02:19:7c:ed:3b:1f:26:
                    f7:6c:b2:46:b8:18:65:26:70:40:15:ef:de:5f:72:
                    a2:73:e2:03:73:2d:6e:65:97:ab:61:3a:e3:6c:89:
                    0e:75:bc:49:58:a5:82:cb:5c:ec:24:1c:20:d0:61:
                    ea:14:b3:a2:a9:02:1a:63:ec:59:a8:19:ba:e4:d2:
                    58:33:b0:1d:f8:04:a7:32:5c:9c:94:6d:e2:9b:2e:
                    0b:c8:b3:66:bb:9f:d9:e3:5d:37:a4:79:34:72:89:
                    8e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:AD:5B:61:E5:FF:FA:FD:A0:0B:DE:C0:02:8B:50:1F:3E:3B:D7:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/df7c5515-0486-333e-8c0d-4be1af31b67f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:a8:3c:d9:02:cf:5e:4a:ef:f3:91:81:97:b8:1f:7f:90:9b:
         8e:c3:90:c5:c4:0f:e8:73:a2:7c:72:cd:16:95:50:5e:87:ff:
         2f:a8:59:9d:b8:2a:dd:9f:a7:bf:56:60:02:c9:23:dd:30:01:
         3c:79:2e:ed:33:05:44:18:d2:e3:e8:05:06:2f:21:d5:8f:05:
         e8:b5:0c:a5:4f:ee:2e:b5:8d:f2:4d:d7:d8:d7:ec:ed:6b:cb:
         0d:bc:c7:ff:16:9b:30:8f:87:e2:f0:19:f2:14:81:3d:90:bb:
         8a:63:13:26:68:8f:c8:6d:75:c6:09:4c:91:8d:07:ea:50:a2:
         a8:b2:96:8c:03:e7:54:3f:fd:52:26:99:db:62:2c:7e:ca:87:
         9e:73:1d:c3:74:9f:cb:61:35:d1:b4:56:e5:47:9e:11:f6:e3:
         47:d5:8d:db:09:3c:82:d2:9c:de:ce:ce:f0:2b:84:97:fb:ef:
         15:d0:01:19:dd:c4:60:a5:75:8c:44:03:49:6d:c5:e3:18:cc:
         87:e4:7d:90:3f:b6:4d:92:a5:f3:3d:01:4c:b5:72:e1:8c:17:
         7a:49:29:42:f1:54:78:20:e3:91:33:e5:34:d3:fe:74:04:fe:
         62:79:28:2c:b1:d7:d3:2d:e0:a4:d6:30:f4:32:c0:15:98:e5:
         ac:db:4b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:27:08 2025 by rpki-client