Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/e91e96e9-7754-3023-b602-7d853b194923.roa
File:                     e91e96e9-7754-3023-b602-7d853b194923.roa (raw, json)
Hash identifier:          sCvqWrB2LlcvSvF3IVZ5L+08oYhqMNpfTZXBPQkLjVw=
Subject key identifier:   6F:4F:E4:05:AE:F6:F8:6E:07:58:AD:C2:3B:C8:CD:4F:D7:46:F4:59
Certificate issuer:       /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial:       010D0C9F43285849B6DF5C1A9B5CADBA468FD680
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/e91e96e9-7754-3023-b602-7d853b194923.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     174
IP address blocks:        205.243.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:5c:1a:9b:5c:ad:ba:46:8f:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=42f4666a-9243-4114-980f-032320e4cbe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:00:9a:00:e4:63:ac:75:8c:39:be:4b:a3:23:
                    f2:c1:e3:23:b9:48:3c:da:9a:8c:b0:c3:f1:a3:6e:
                    23:8f:5a:4f:28:df:f1:c4:8b:35:39:6d:84:22:7d:
                    2c:ab:02:34:26:be:79:ca:79:85:a5:52:68:ff:a6:
                    7e:eb:88:4f:83:6e:40:f6:c8:46:0f:c5:72:c3:06:
                    75:36:2a:d3:ee:c5:86:13:3c:08:97:dc:2b:c7:8c:
                    0f:a8:09:01:ab:42:e1:2d:c1:93:70:a9:0d:11:6e:
                    b3:79:36:93:f8:0a:3f:38:9d:ad:4a:33:63:11:18:
                    c3:35:f4:1b:2f:93:41:97:67:6a:bf:19:f9:3d:77:
                    8e:f0:cb:2f:a6:55:5c:b1:ca:52:36:34:83:b5:a8:
                    a4:9f:73:a9:bd:ac:f9:c7:17:0c:bb:90:f4:26:9b:
                    f8:1d:83:3a:6f:5e:00:c1:db:7a:13:8c:66:4f:0b:
                    b4:58:71:a3:c0:61:c7:4b:64:b6:ef:20:a1:df:69:
                    2c:de:dc:42:c5:ef:ef:d8:ca:f7:18:40:30:5d:ad:
                    a5:9a:a4:54:28:5f:cb:d8:c8:35:7c:e8:31:26:dc:
                    c4:4e:4d:58:34:c2:e5:53:4c:ad:a8:b0:48:4d:70:
                    ca:82:6a:c2:bc:cb:14:9a:47:18:b1:70:fe:6d:c3:
                    f2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4F:E4:05:AE:F6:F8:6E:07:58:AD:C2:3B:C8:CD:4F:D7:46:F4:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/e91e96e9-7754-3023-b602-7d853b194923.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl

            X509v3 Authority Key Identifier:
                keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.243.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:48:22:d3:3d:c5:80:c1:09:4f:fc:5d:8e:3e:8a:c1:40:77:
         93:6c:34:39:37:91:1d:45:fc:ac:1b:23:b6:c4:1e:2d:78:e9:
         f6:a3:17:ac:f5:ed:1b:86:4d:2d:38:58:68:ff:ca:0b:18:fe:
         70:15:b6:e3:d4:0c:11:00:83:88:b2:3b:94:49:1f:63:d4:1e:
         ba:3c:dc:b4:69:dd:b8:ff:6e:69:7f:84:86:eb:8d:0b:79:d6:
         e8:eb:ef:f4:21:81:0e:1b:14:98:38:4d:6b:ef:ae:fb:31:d4:
         86:6a:2a:98:a2:37:6c:48:b2:96:50:6c:e0:a5:dd:3d:d9:2f:
         67:4d:15:43:fa:da:7e:8d:bb:4e:49:26:ce:25:e5:46:af:1c:
         e3:83:22:38:0e:84:a6:8f:30:e9:28:8c:92:72:25:b7:e3:4c:
         08:33:6f:e9:bf:4a:84:b2:91:23:14:4f:bb:4a:ab:e9:c5:61:
         6d:a8:6f:3a:46:e2:a2:11:4a:90:c5:c0:16:e7:0d:55:f8:f2:
         29:e4:b5:60:98:1a:e4:d4:32:e1:1c:f8:49:1d:da:eb:eb:99:
         87:da:23:f6:b9:71:49:51:23:c7:7b:63:0f:04:4f:97:e7:88:
         12:b3:0c:d3:d2:e1:55:b6:fa:53:71:2d:58:82:34:ce:9b:b8:
         c0:6d:8b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:04:11 2025 by rpki-client