Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/ad31075d-6561-3431-956d-53bb1915b644.roa
File:                     ad31075d-6561-3431-956d-53bb1915b644.roa (raw, json)
Hash identifier:          ddsck4NXPP/1jL51CXbuH06oxNPca+PeAogf1HEQsm8=
Subject key identifier:   69:F0:05:80:D4:34:C0:42:2A:11:5A:4C:5A:B4:2C:CD:86:C0:BB:B3
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F43285849C20A1077678B6122285F4800
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/ad31075d-6561-3431-956d-53bb1915b644.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        192.161.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:10:77:67:8b:61:22:28:5f:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=6015268a-34a9-474b-a2ae-73939e66faa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:90:db:ee:1c:b0:3b:15:18:e5:01:ef:34:a2:
                    3b:dc:bd:37:39:87:2c:da:4a:37:b3:70:86:da:20:
                    2d:48:a3:cc:f4:5c:97:61:82:59:fa:f7:8b:77:1c:
                    03:28:e8:7c:da:fa:12:b7:f6:c2:36:4e:19:0b:2b:
                    8e:24:82:14:18:d6:e9:16:79:07:4e:38:64:aa:34:
                    f0:2e:9a:63:27:98:8c:1c:58:e7:da:cb:5b:bc:16:
                    7d:76:e8:81:38:ab:32:f2:38:5c:a1:5d:21:50:0a:
                    ce:b3:6b:6e:e7:a1:ae:99:8e:9c:56:77:cb:41:d1:
                    f1:21:e4:a4:8e:fe:78:d1:59:d5:e2:2b:57:d6:bd:
                    ee:da:1a:15:78:03:62:4d:f0:6a:25:fd:f2:db:42:
                    5c:32:e0:66:ef:95:8f:a3:a7:e5:a5:a0:f2:07:b2:
                    96:5c:00:aa:ea:5a:7e:d4:d5:53:93:c5:aa:d4:1c:
                    4d:b9:92:1b:2d:e0:8d:48:8c:34:33:76:ed:82:c3:
                    42:9c:64:7f:b7:c6:ff:9a:09:c4:89:02:0a:d4:9b:
                    c0:3e:e3:aa:cd:c2:7f:19:7f:9e:a6:5c:16:41:8b:
                    f6:1d:08:3c:07:62:48:f8:06:67:bd:a3:dc:1c:76:
                    d0:9f:cd:97:37:dd:27:26:40:b9:cb:53:09:00:99:
                    c6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F0:05:80:D4:34:C0:42:2A:11:5A:4C:5A:B4:2C:CD:86:C0:BB:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/ad31075d-6561-3431-956d-53bb1915b644.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.161.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:71:a1:52:63:17:99:09:f7:8e:c9:33:10:fd:f3:4d:1a:22:
         f6:bf:ea:05:b5:85:9e:71:95:dc:33:8b:df:aa:48:10:4f:ec:
         00:51:16:81:cf:e7:a0:0c:5f:5a:76:83:24:c7:de:f6:9a:bf:
         c4:33:1e:ec:22:12:1f:02:4c:79:af:b6:e2:29:f4:96:8a:c9:
         fd:89:e2:9e:ce:63:62:56:47:36:ff:dd:6b:1a:c3:c4:b8:6c:
         f1:cd:47:79:3f:16:94:cc:a5:48:e5:9d:a9:b4:f5:e6:c0:07:
         3e:a9:be:94:66:bb:85:21:68:84:b9:4a:e6:ed:91:c2:db:f0:
         c1:d9:20:bb:5a:7c:8b:9d:83:93:ef:aa:c1:31:8d:ad:dc:0a:
         66:0d:f6:34:50:96:46:2d:77:df:b0:0c:7a:87:61:78:40:7d:
         fb:57:8f:15:2d:9d:44:f9:c2:58:27:8a:a9:bb:9d:b9:44:8c:
         63:2f:69:e1:86:f9:53:71:49:12:5e:c3:21:45:d8:51:70:12:
         1f:ac:fb:b5:1e:1d:1b:eb:e8:4f:fa:39:6e:7c:aa:7b:ea:51:
         27:87:2f:20:a6:36:02:79:71:79:45:dc:ce:82:56:9c:d7:c7:
         6a:e8:99:18:bf:b2:98:77:e5:20:d8:27:f2:31:48:ea:5d:99:
         dd:05:43:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:09:42 2025 by rpki-client