Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/deb8eb20-1960-36d5-9c48-e7fe23e453f0.roa
File:                     deb8eb20-1960-36d5-9c48-e7fe23e453f0.roa (raw, json)
Hash identifier:          tFqMWVtVo4Ox+vvqVGEgYjCXv5MtpKI/BxDcBcgS10g=
Subject key identifier:   04:72:CF:A7:1C:7E:78:C7:98:8A:CC:4B:BD:D4:26:AD:80:41:F8:0B
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F43285849C79F67FDB77AC66FC2C0DEC0
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/deb8eb20-1960-36d5-9c48-e7fe23e453f0.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     5769
IP address blocks:        205.151.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:67:fd:b7:7a:c6:6f:c2:c0:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=2471c411-0c31-43a3-95f2-a7c0a74fe3ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6d:23:17:b7:54:20:22:b9:e0:d3:c7:11:c2:
                    b4:a1:f8:1c:1b:a6:b6:ed:4c:ec:38:a5:6f:0f:58:
                    f4:dd:d5:3c:10:94:5e:39:47:44:bf:f9:4a:c2:25:
                    43:c1:42:20:9d:e7:40:9c:88:f9:2e:7e:86:13:a9:
                    e1:d9:f5:0f:02:ca:d8:aa:34:2e:7a:b1:0a:4b:b6:
                    67:4b:73:0b:2c:3f:22:da:e4:f4:50:af:31:e3:d3:
                    87:5c:8a:2c:45:a7:4d:91:d1:ce:48:f2:d7:3f:a0:
                    52:97:15:13:7d:7c:9e:2d:7b:76:4c:39:b7:6e:17:
                    cb:e8:cb:7b:17:08:02:b0:b3:90:d7:cf:ea:af:fb:
                    df:03:18:8c:8d:2e:ac:5d:30:22:f0:23:86:9a:3a:
                    ed:40:59:dd:8d:5c:d0:60:4f:99:7e:42:78:67:a9:
                    96:4e:78:8f:38:37:c9:a7:51:e3:1e:65:be:10:5b:
                    ed:4b:5d:c6:92:c5:fb:cc:6c:d1:e4:a2:1d:31:be:
                    94:c6:c9:a7:7a:93:2b:73:2d:db:4e:65:72:d4:23:
                    15:2e:15:ce:47:16:82:60:85:8c:77:60:c9:64:27:
                    fb:b4:64:fa:93:30:78:01:5f:7a:21:68:17:de:b0:
                    ab:5d:06:86:e5:1a:49:34:33:6c:9b:8e:71:c1:72:
                    d8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:72:CF:A7:1C:7E:78:C7:98:8A:CC:4B:BD:D4:26:AD:80:41:F8:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/deb8eb20-1960-36d5-9c48-e7fe23e453f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.151.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:26:e9:46:fe:8c:61:27:9b:26:f8:ea:3b:6f:80:aa:64:da:
         95:d7:14:f4:50:2e:33:af:94:5e:82:42:7f:e6:bf:4d:7a:93:
         0b:d0:44:62:0c:8c:eb:88:c8:bf:dd:9f:06:67:16:e6:75:de:
         cb:30:e2:74:cb:91:ae:7b:78:ca:41:7c:6b:39:58:fa:aa:ac:
         6f:94:aa:a5:e5:39:09:b4:2c:5c:7c:05:14:24:c5:93:2a:bf:
         5e:53:d5:8a:1f:fa:6a:59:4b:34:dd:92:36:4e:0e:6a:84:63:
         19:e4:9e:7f:2a:9d:57:84:a3:09:17:1a:d5:db:20:be:d2:c3:
         5f:0b:19:ce:75:07:1a:5f:db:44:3a:f5:27:96:6d:3d:58:ec:
         3c:98:0e:20:fe:8e:c4:40:0e:88:30:6c:c3:73:df:9a:29:c8:
         fd:f6:e6:aa:2d:2f:6f:19:58:da:0b:98:14:bd:3b:46:56:8d:
         ed:8c:a4:94:dd:86:34:ee:13:64:10:bf:9e:a9:08:98:50:d8:
         92:2a:24:73:63:fa:ed:20:89:26:33:ec:15:ab:69:61:d7:19:
         34:34:8d:5e:d4:ef:64:e7:26:d0:49:81:e0:82:9f:08:59:b6:
         6f:0a:35:14:c0:8b:ae:f7:3a:ec:7c:72:c8:e3:f5:54:ce:8a:
         a6:c6:ff:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:31:37 2025 by rpki-client