Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ac3c5bd3-05ea-366a-a3ee-f01234e9dda3.roa
File:                     ac3c5bd3-05ea-366a-a3ee-f01234e9dda3.roa (raw, json)
Hash identifier:          f60Jz5XJaJux26HS8Gese1KWSru68HxKyw89ptDEbYI=
Subject key identifier:   78:D8:38:DB:51:2E:93:AD:17:F9:85:7D:AE:B2:E6:84:C6:07:72:C4
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F432858499294A1E870F58EC1EE3CBD80
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ac3c5bd3-05ea-366a-a3ee-f01234e9dda3.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     3477
IP address blocks:        205.166.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:a1:e8:70:f5:8e:c1:ee:3c:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=9eeed0f3-a4bf-4143-bb4d-9ad625b1ad36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5a:91:21:0d:05:7d:dc:c2:d6:13:53:05:12:
                    57:0a:20:e2:d5:df:b9:46:39:19:ec:79:a6:d6:e6:
                    fc:01:3c:af:47:29:9e:d1:6a:cc:64:4b:1f:eb:56:
                    ef:c8:78:41:4c:c0:1d:f0:50:0d:64:a6:5e:0d:82:
                    c3:1c:af:0d:8f:c0:3b:58:bc:9f:eb:da:c8:5f:6c:
                    55:78:6b:19:5f:d8:36:82:6e:df:95:b9:4e:bc:3f:
                    09:d4:0e:8c:56:f9:a6:1f:6c:61:e6:22:3b:5e:fa:
                    e5:b9:58:ae:69:1f:6c:f4:c3:2f:01:e5:62:2d:4c:
                    a1:f2:13:38:96:bc:ab:ca:67:c1:89:fa:56:73:75:
                    d7:76:67:c9:31:c4:0c:52:29:72:22:87:c9:da:a6:
                    db:2f:35:e4:bb:1c:12:66:86:f3:5d:4f:09:5c:a4:
                    25:ac:1b:f4:b3:08:27:40:0b:36:48:18:fc:2d:6f:
                    ff:97:21:69:50:d0:df:4f:fc:5d:54:ad:3d:df:48:
                    09:b3:9b:26:e0:c4:f6:e1:93:a9:2a:b9:57:95:a8:
                    d3:b8:8d:c3:4f:58:90:01:0e:40:2d:78:12:c2:f8:
                    ce:87:17:f3:ab:1c:4e:4d:9f:60:80:1a:d9:e9:df:
                    67:74:37:22:21:44:05:91:08:d3:91:d3:88:ec:4c:
                    e8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D8:38:DB:51:2E:93:AD:17:F9:85:7D:AE:B2:E6:84:C6:07:72:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ac3c5bd3-05ea-366a-a3ee-f01234e9dda3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.166.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:f7:2e:84:fb:69:61:be:cc:af:bb:9b:2f:0e:de:f6:2f:2b:
         c1:36:56:49:de:69:bd:9d:ff:88:16:88:99:67:cf:af:60:0d:
         0b:63:bd:6b:b5:a9:4e:03:5f:a3:2d:1b:f2:7e:6d:72:c6:3d:
         80:a5:a1:5f:33:4b:83:cd:8b:c1:84:26:67:fc:d9:2d:71:35:
         f0:00:05:70:5e:94:47:b3:68:be:a9:52:64:7f:4f:8a:65:05:
         0d:71:25:dd:2b:1d:7e:78:da:0f:f9:54:96:58:36:08:2d:20:
         cc:d2:4f:36:d5:c4:3e:1e:84:5a:84:91:4e:37:38:8b:70:19:
         74:b9:0f:c0:35:f3:08:dd:9f:4e:6b:8a:57:a5:b5:b0:d9:1d:
         d2:27:1c:5e:75:5b:75:c7:02:c4:59:28:a8:66:78:38:e7:30:
         fa:3f:d3:9a:1d:85:96:d4:d7:4d:33:3d:e5:12:b3:2a:0e:ef:
         ad:9f:8b:66:b1:f6:98:9c:70:54:41:03:40:2d:85:6b:86:e3:
         c6:b7:e6:54:fc:90:ec:a2:0a:35:4d:dc:f4:64:40:cb:00:3c:
         f6:14:e9:33:be:2b:a7:66:02:b1:91:90:be:7b:e3:87:6a:3b:
         b9:7f:1b:3a:6c:f7:79:9b:c9:11:bc:9f:47:83:6b:4d:2a:06:
         64:9d:95:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 05:50:42 2025 by rpki-client