Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/04477d9c-7b78-3e6f-8e26-aad090d37c24.roa
File:                     04477d9c-7b78-3e6f-8e26-aad090d37c24.roa (raw, json)
Hash identifier:          oyqx9Qh38w1BiYgJUh649Xbs5ZabwmA+XYaoebuRJ0c=
Subject key identifier:   D9:75:5C:F7:DD:2A:18:6C:49:44:7D:2C:6A:2B:3D:F9:83:48:0C:67
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F43285849C79F683843757836DA62F900
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/04477d9c-7b78-3e6f-8e26-aad090d37c24.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     5769
IP address blocks:        198.252.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:68:38:43:75:78:36:da:62:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=6561f8a5-49cf-4e3e-9bfd-e4e499891e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:66:ed:7a:fd:5e:d3:b0:f0:a8:e9:1b:38:07:
                    34:2b:24:89:c8:5d:ad:a7:57:5b:bb:84:d2:ad:ac:
                    0b:4d:a5:f6:12:9f:39:48:09:65:11:fb:dd:93:4d:
                    94:98:66:a7:d0:b3:9b:7e:81:12:3c:9e:80:d3:dd:
                    6e:d1:e9:d1:d2:2e:1b:43:45:15:eb:42:87:fa:cd:
                    0b:28:92:0e:d4:15:7b:27:3f:fc:93:54:4e:a8:79:
                    7f:46:c0:c3:15:f2:40:8a:b0:77:28:e7:fe:a2:cf:
                    99:4e:1a:16:c8:41:74:a2:9d:c4:3a:8a:8d:fb:63:
                    1b:ed:02:9b:44:4b:b7:38:aa:4f:24:1a:1d:29:da:
                    da:e5:7c:8e:85:11:18:66:28:48:0a:d7:15:b6:09:
                    30:ae:a8:b4:c8:4f:df:e4:f6:3b:e3:95:11:0b:57:
                    0f:73:f6:23:92:94:d3:89:83:79:6c:6a:96:19:7f:
                    6e:cb:d0:d1:da:90:be:1f:ee:14:b0:2b:ab:fd:24:
                    f2:fa:74:ed:91:cf:be:cf:1c:46:e4:9a:e4:cd:51:
                    61:73:9b:55:c5:42:83:c8:e7:75:03:46:63:0b:fe:
                    9b:c6:23:a5:4e:b2:6e:c1:21:48:86:26:84:3c:db:
                    fa:4e:d7:89:36:5f:3b:04:af:78:bd:28:49:95:6f:
                    40:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:75:5C:F7:DD:2A:18:6C:49:44:7D:2C:6A:2B:3D:F9:83:48:0C:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/04477d9c-7b78-3e6f-8e26-aad090d37c24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.252.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:01:17:9b:71:cf:26:4e:40:44:b3:34:b9:6b:15:b4:1f:90:
         83:68:55:3f:e6:9f:47:8f:5d:60:a8:d1:d1:0b:4c:8d:7a:34:
         50:d8:63:2e:60:08:e3:9a:f3:06:aa:7d:63:85:f3:88:f5:84:
         05:3d:c4:17:f6:b6:6e:0d:8c:4b:f8:68:85:b6:75:c1:ef:9a:
         20:82:08:be:c6:d6:d6:bb:76:09:99:67:08:a7:d6:53:03:f9:
         a3:00:c8:d7:7c:28:9b:6f:f1:96:ce:92:43:69:29:d5:72:ca:
         89:ea:ab:03:3d:7a:7a:a7:37:d4:44:74:13:13:65:f9:06:1a:
         9c:db:1e:08:ad:7f:db:3e:06:d8:07:48:99:df:96:00:d2:34:
         cf:7b:7b:58:22:bd:c1:97:93:80:d6:6d:4f:08:0c:8a:c5:5f:
         02:ba:2c:e5:12:8e:89:63:d5:73:d6:8d:53:99:93:8c:11:32:
         b3:25:59:c2:83:5e:d3:db:ca:40:3f:30:8d:d6:0f:1e:9b:d2:
         7e:72:13:10:f6:cb:0f:ca:7f:ba:d9:93:b7:08:fd:6c:cd:cb:
         38:fd:7a:52:1b:12:cb:0f:76:27:1f:ea:2e:10:02:f5:6e:86:
         3d:7f:e5:70:e4:ab:3e:68:55:45:6e:5e:7d:80:27:d9:2a:08:
         71:c7:14:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:21:45 2025 by rpki-client