Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/796a5e55-8001-3aaf-84b5-2ced363092f8.roa
File:                     796a5e55-8001-3aaf-84b5-2ced363092f8.roa (raw, json)
Hash identifier:          H8j/sEIiuofLQOCNjlL5J+DD10Ox5t0Ein9Krv3Aqy4=
Subject key identifier:   E8:D9:F1:2C:2B:24:E8:3A:BD:2A:29:08:A6:4E:35:7E:0B:16:FD:0C
Certificate issuer:       /CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
Certificate serial:       010D0C9F43285849C20A10D7536FDCCD0A8964A0
Authority key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/796a5e55-8001-3aaf-84b5-2ced363092f8.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        173.240.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:10:d7:53:6f:dc:cd:0a:89:64:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=2517a6c3-9966-4324-a345-559ef8d09e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:77:25:96:c1:de:d6:64:d3:ed:3c:31:97:ee:
                    fd:3f:8b:66:d8:78:90:c9:96:7d:7a:eb:6b:15:e2:
                    14:74:c2:20:77:3e:c9:e1:10:6a:d7:d4:a1:85:7e:
                    3d:30:d2:e4:30:f7:bc:f1:83:1d:4a:88:ff:a7:a1:
                    fb:07:82:70:3f:2f:77:78:5a:cb:1b:07:5f:04:c6:
                    a8:84:99:0c:ec:21:c5:1e:3a:2d:cb:61:1f:21:04:
                    bc:7e:95:5e:4a:79:d1:ab:de:97:90:3f:c7:6d:1b:
                    31:f8:8c:13:74:a7:c8:2a:aa:b7:cb:58:52:c4:a1:
                    ce:7a:10:74:9d:04:a6:18:06:96:8f:39:ca:0b:52:
                    cf:2e:a9:0b:58:e7:ef:1a:e4:d3:19:8f:3e:6c:10:
                    7b:4c:12:92:3c:dc:d0:be:23:7e:bd:60:5a:63:12:
                    61:ef:9c:b7:23:c9:75:9a:1b:af:44:b7:b9:a0:1c:
                    d5:8a:40:0f:49:85:9f:d4:b6:67:01:b1:6e:09:06:
                    d6:50:98:74:83:ef:95:11:ba:c2:30:58:19:6d:ea:
                    be:6c:e7:79:86:03:9c:2a:28:93:a7:39:7b:5d:a9:
                    15:0f:f6:0e:78:f8:bf:10:9f:20:86:e6:3f:04:18:
                    c5:04:65:dc:d9:78:ab:90:7c:74:0c:9f:02:3f:18:
                    a9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D9:F1:2C:2B:24:E8:3A:BD:2A:29:08:A6:4E:35:7E:0B:16:FD:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/796a5e55-8001-3aaf-84b5-2ced363092f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl

            X509v3 Authority Key Identifier:
                keyid:97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.240.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:28:d0:6a:f5:f7:6b:3a:37:f8:f3:1e:f0:e6:38:9d:c7:79:
         65:5a:30:86:32:da:0d:ea:9c:2d:3d:e5:26:ee:4f:06:a2:82:
         cf:31:f4:13:b9:a5:2c:3c:e6:2d:92:13:44:2f:82:d4:1e:f2:
         74:39:d4:f0:3a:ae:fd:3b:62:85:91:86:5a:d5:1e:26:d0:30:
         85:4f:40:60:80:76:84:f1:32:4f:86:fd:5e:1e:2f:82:47:2e:
         c4:81:0f:64:72:a6:04:4f:f7:1c:26:e6:7d:0c:23:69:4e:53:
         df:f4:df:c4:58:3d:e8:05:f2:f0:f2:70:bc:5f:fd:b2:66:fc:
         64:47:fc:6e:b2:30:39:8f:e6:b5:a1:e6:50:d4:7a:85:d5:7a:
         58:29:05:ca:a6:1a:1a:fe:68:cb:9c:ce:90:35:af:23:2d:7e:
         06:d1:fa:dd:c3:c2:61:28:10:cc:17:a9:68:28:ae:eb:da:4a:
         31:63:d9:24:e6:41:f0:1d:4d:b5:00:3f:8c:dd:e1:74:46:9f:
         c0:b1:f7:00:98:74:22:4c:55:b3:b7:05:e0:ac:00:f5:86:0e:
         3f:79:f8:c7:95:25:0e:fd:d7:79:67:2f:45:fc:2a:04:a4:75:
         37:c1:be:d9:45:19:6c:0b:f4:36:b2:b2:d8:30:d7:82:f2:f6:
         b3:fb:db:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:54:50 2025 by rpki-client