Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/d31d8a68-3aae-31fb-8758-9c9ec721c48c.roa
File:                     d31d8a68-3aae-31fb-8758-9c9ec721c48c.roa (raw, json)
Hash identifier:          6RdrYQo1bd8IJZYx3oKkeolwv29G0ARqKDjY80LC88Q=
Subject key identifier:   F0:96:A1:1D:3A:D6:9C:90:EF:6D:8F:AA:70:9A:EE:E9:A2:A8:7A:25
Certificate issuer:       /CN=19039935-462a-4b14-8e96-78798283eeff
Certificate serial:       010D0C9F43285849C4D4CC9D5A039C6AD366F480
Authority key identifier: 30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/d31d8a68-3aae-31fb-8758-9c9ec721c48c.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     7018
IP address blocks:        167.253.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:cc:9d:5a:03:9c:6a:d3:66:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19039935-462a-4b14-8e96-78798283eeff
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=a5a51c5b-178e-43c0-bb2b-08cab0edfb6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:94:19:5f:02:8a:2f:d5:10:01:a3:71:87:8b:
                    cf:5e:3a:1a:f9:9c:04:dd:cc:3c:9f:4e:b7:4f:ee:
                    51:4e:93:18:05:ae:a3:10:80:04:8b:af:92:b4:d5:
                    f2:93:0b:4d:54:fe:48:fa:fe:19:9a:f8:dd:94:66:
                    44:81:4b:f8:32:b2:f5:3b:f2:6a:87:ae:06:25:6a:
                    4c:ed:97:b3:2e:6f:a8:23:93:39:84:0c:50:c2:a3:
                    61:c1:08:6e:20:76:5f:04:7d:0f:d4:1f:12:75:29:
                    c1:c3:0d:bf:46:29:52:3b:e9:8b:b6:2d:5a:22:60:
                    38:3a:9b:e3:f0:cb:e4:3e:8b:41:de:43:80:b9:00:
                    77:e4:d4:c1:9d:07:f6:20:0f:9e:52:e0:1b:47:e0:
                    61:7a:0d:b0:02:0e:0d:c5:ce:0a:8b:b8:6a:de:f6:
                    02:06:2f:5e:63:b5:e4:62:d6:b1:84:9a:e8:fb:e6:
                    df:e0:62:93:6b:6c:fe:55:39:ab:cf:2b:41:0b:01:
                    9b:5d:ae:b4:52:56:fc:06:56:da:1a:ae:6a:3b:af:
                    f6:a6:e7:b9:5c:2c:64:f2:ae:da:7a:f8:32:27:ec:
                    af:f4:cc:f2:dd:70:9a:3d:1f:33:84:5d:1b:a5:45:
                    2e:6b:62:8d:1f:45:ac:dc:b0:be:63:1c:5f:9a:d7:
                    97:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:96:A1:1D:3A:D6:9C:90:EF:6D:8F:AA:70:9A:EE:E9:A2:A8:7A:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/d31d8a68-3aae-31fb-8758-9c9ec721c48c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.crl

            X509v3 Authority Key Identifier:
                keyid:30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:a4:01:f6:1e:15:fa:76:cd:66:b4:f5:a2:e3:1a:46:ed:51:
         46:48:b0:9c:26:7f:7f:f6:34:c0:39:d7:11:ac:00:43:42:e1:
         0c:2e:05:a6:a3:61:61:2c:d5:b3:80:af:e9:0b:94:40:8c:7c:
         1a:ac:44:34:1f:f1:46:66:5c:09:06:11:ab:5d:d4:fe:f8:2e:
         a6:52:6e:e5:fb:2f:06:95:4c:55:5d:0b:69:8e:04:ad:2d:ca:
         a2:a7:3e:17:a6:8f:58:30:43:e3:cd:88:76:8b:d2:a9:8f:f4:
         1c:7b:ff:94:3f:83:fc:5a:f7:56:61:1d:e1:18:61:f1:41:b8:
         a6:26:cb:a0:5e:ab:89:9d:5a:52:21:43:52:89:85:a7:1f:5a:
         4a:43:21:eb:57:b5:e6:30:5f:97:1e:8b:6a:05:55:6b:d4:43:
         c9:8e:88:65:24:a3:a7:bc:e0:84:79:53:31:de:79:7f:51:50:
         cd:f9:5d:a7:ba:1a:f7:02:19:73:2b:d2:bb:d3:c4:5a:47:5b:
         36:56:e1:22:1b:27:bc:06:f4:5b:f3:eb:c9:42:76:09:64:ea:
         0f:2b:39:a9:49:96:e4:16:f8:53:7f:df:d6:fb:f8:30:71:d1:
         fd:1e:d9:b2:1c:b5:f0:06:01:59:be:16:81:af:97:bc:0d:84:
         1e:bc:42:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:26:45 2025 by rpki-client