Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2f2e54a8-465a-395b-9764-01cc8e5c3b91.roa
File:                     2f2e54a8-465a-395b-9764-01cc8e5c3b91.roa (raw, json)
Hash identifier:          P4297NxOLSA1R/wKYHyDaeCeimyZHvTZTCFAAXMyWPU=
Subject key identifier:   0E:11:F0:1D:FE:47:C3:76:EF:FE:82:09:86:FC:46:A1:00:79:3D:5C
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285849C20A0E1240F6BEECD385CA40
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2f2e54a8-465a-395b-9764-01cc8e5c3b91.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11537
IP address blocks:        163.253.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:0e:12:40:f6:be:ec:d3:85:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=7935a2f8-922d-4889-9885-77db1783dc65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:82:b0:ee:47:d3:91:c7:94:4a:16:3d:6e:73:
                    fa:83:3d:48:b9:3f:d7:6c:63:3d:99:12:b0:23:e8:
                    84:66:ec:54:e1:3e:40:d1:d4:99:fc:2a:a7:9b:85:
                    a2:24:ed:04:63:48:7a:89:8b:b3:51:85:92:0e:63:
                    22:84:66:d0:f4:c3:6e:48:1f:2c:84:c6:12:db:c1:
                    86:2c:67:e8:2c:96:a6:a3:e3:ab:3a:af:30:da:08:
                    e7:70:56:14:2b:9d:c2:2b:8b:e5:08:e5:3d:d4:55:
                    85:f2:35:73:aa:96:03:c1:7c:a2:5a:87:4c:c2:5a:
                    21:b7:59:0d:f4:0b:5e:8e:39:62:c4:29:b2:9c:b9:
                    67:ef:3a:dc:f5:06:66:88:7b:14:09:a9:32:29:e5:
                    4e:12:d1:6c:ce:4d:83:20:05:38:4b:84:23:98:f5:
                    99:91:be:cd:a6:31:d2:9b:28:7d:79:43:dc:b1:54:
                    8f:30:de:f5:7b:bc:f8:de:8e:15:56:b1:2e:9e:2c:
                    97:2c:3c:10:d0:bc:11:ec:c7:e5:a2:9e:39:86:29:
                    a0:1b:bf:d6:f4:98:fc:90:10:1b:a8:29:e8:03:84:
                    67:87:bc:d5:b7:22:24:89:f7:35:fb:be:59:45:19:
                    e4:0a:ba:e3:ca:bb:d5:34:29:b1:c1:ed:3a:b9:13:
                    35:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:11:F0:1D:FE:47:C3:76:EF:FE:82:09:86:FC:46:A1:00:79:3D:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2f2e54a8-465a-395b-9764-01cc8e5c3b91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:1d:c0:d8:1b:c3:6d:33:b1:79:bb:d1:70:02:46:6d:0c:ec:
         b3:22:58:0f:72:81:1d:28:4b:b3:33:0d:e3:46:f1:52:d2:1e:
         f9:e6:a4:e8:7c:b9:2a:1b:00:67:2a:62:01:a5:b8:3f:26:c7:
         ff:fa:2f:c7:73:bb:48:ee:dd:84:e4:de:5f:81:b2:5e:5d:2b:
         e1:6f:44:7c:1d:6b:46:87:89:57:56:64:95:ef:f3:35:d1:9d:
         47:08:df:69:fa:01:87:cc:a4:7f:17:6f:50:54:35:c1:47:4c:
         4b:2a:1a:3a:1a:18:7c:a5:2f:c0:04:9e:56:39:3b:44:8b:84:
         f4:7e:33:79:6a:0a:e7:95:e4:19:71:ac:13:13:b1:b2:a9:66:
         bf:f2:74:fa:f5:38:5d:51:6e:52:61:90:1a:8e:07:4d:db:06:
         0e:33:e1:ca:7f:1a:58:c2:fe:b5:ba:cd:bf:4c:e4:82:2d:06:
         13:34:47:30:61:00:54:65:ae:88:5a:a6:9e:60:8a:8a:17:50:
         ab:eb:dc:75:8d:31:1a:be:9d:d6:a2:c4:fe:d4:35:4e:1b:ce:
         09:38:2c:6c:78:39:07:98:d2:ff:0a:93:62:60:74:ca:d6:f2:
         cf:84:ae:e9:5d:54:24:9d:91:f3:56:a4:12:dd:d8:49:51:27:
         33:c3:c8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:23:34 2025 by rpki-client