Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ff857103-330d-35fa-a2de-54ebb219efb9.roa
File:                     ff857103-330d-35fa-a2de-54ebb219efb9.roa (raw, json)
Hash identifier:          LuaaWKwvZn86lZbt2wMoy+yYMd6qwYa2ia69RhBRSXY=
Subject key identifier:   61:E6:0A:90:98:77:84:36:28:62:1C:A9:A7:10:F1:82:0F:69:73:87
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858490881654CBA32DB5E5235BB80
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ff857103-330d-35fa-a2de-54ebb219efb9.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        170.114.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:65:4c:ba:32:db:5e:52:35:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=35996d67-4529-4e4d-acd4-0230b96257ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:30:bb:67:d1:5f:9f:38:e2:96:78:b3:5d:46:
                    13:4f:9f:71:86:23:d4:89:d7:ac:f9:37:51:d7:2d:
                    e4:a8:ab:36:d2:a4:01:fe:18:b3:99:ac:3a:0c:85:
                    73:59:cd:98:0a:36:c9:51:15:29:7c:d0:c1:bd:48:
                    a2:87:4c:08:d7:72:6d:8e:63:14:29:f6:a2:fa:e1:
                    3f:d4:0d:c9:ce:2c:bc:3d:1d:ef:65:07:9d:94:91:
                    dc:81:7d:04:b5:72:b3:ad:de:32:e4:97:f0:e2:45:
                    b5:1e:a1:db:ba:62:0f:82:35:d1:7e:dd:f7:a0:f8:
                    83:17:a0:5a:8a:75:f9:03:93:82:2d:12:7e:2e:27:
                    d1:ae:81:14:8e:8f:0f:a6:6c:5f:08:3f:8d:21:95:
                    a1:34:c0:27:95:da:c0:96:4b:50:19:73:77:0b:43:
                    fc:bb:a4:c8:ba:8a:30:1c:dd:61:76:fc:bf:3c:df:
                    d0:5a:ee:50:51:23:cb:7c:08:eb:6c:53:69:17:1c:
                    d4:51:41:28:b7:b7:4d:eb:cf:42:ef:69:ce:a0:6c:
                    45:b9:04:14:ad:f3:f4:28:bb:a8:e5:96:dd:3b:20:
                    58:a3:11:21:d0:4f:88:57:84:66:c2:89:7d:b5:42:
                    01:40:73:ab:80:fe:e0:2d:87:fc:b5:a4:a1:34:65:
                    bc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E6:0A:90:98:77:84:36:28:62:1C:A9:A7:10:F1:82:0F:69:73:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ff857103-330d-35fa-a2de-54ebb219efb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:bc:ee:bc:4c:a8:0a:37:7e:57:59:36:34:34:26:5e:a7:5c:
         4e:72:48:d7:6b:75:ba:f8:8a:d0:49:3f:1c:64:0c:cd:dc:54:
         79:0b:d2:6e:9b:f4:ce:1c:bf:03:05:e9:ce:3b:a0:0f:4a:a0:
         01:33:55:0f:b4:b9:79:e6:bc:c8:21:60:ac:fd:3a:75:b7:cf:
         88:2d:66:5c:10:26:f0:fb:46:fa:15:7a:d0:9e:41:ef:b0:83:
         e6:f6:d3:01:0a:27:21:56:78:ac:81:9b:ff:53:14:ec:bd:01:
         9a:4b:32:3d:4f:7a:1f:9c:df:a8:67:2b:81:87:e9:28:74:9a:
         48:0e:a1:64:9d:19:40:27:f7:e8:a7:3b:ff:74:a1:37:b5:d8:
         c8:25:ae:01:9e:26:49:35:1d:b0:0d:be:06:75:d9:5d:d9:dc:
         1d:32:a1:2b:b0:58:f0:ff:6c:12:88:05:b3:48:b3:9f:62:df:
         d5:28:45:be:20:db:a9:52:9d:5f:61:25:23:bd:41:8d:ed:05:
         49:35:04:b1:c7:f1:3e:68:c8:8e:1c:31:9b:fd:51:b3:21:b0:
         b1:1f:b8:67:b7:c9:09:de:ec:14:18:cf:92:86:a2:82:02:87:
         24:03:31:d1:37:1f:a5:f1:ce:25:ee:28:0f:cb:cd:d9:78:f2:
         a4:b7:b8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:07:20 2025 by rpki-client