Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/a838f49d-f401-38c0-8985-7a049f64a168.roa
File:                     a838f49d-f401-38c0-8985-7a049f64a168.roa (raw, json)
Hash identifier:          yZQaRVVlahnSakNxtLyHU427eLwS1Fu0FllSoPeYMuU=
Subject key identifier:   AD:47:05:7E:F0:9D:F7:A4:2E:C9:D2:C2:19:A7:76:ED:24:D3:D7:F3
Certificate issuer:       /CN=512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2
Certificate serial:       010D0C9F43285849C20A22DCA52992CFF867B380
Authority key identifier: 08:DE:39:A7:0E:01:3D:8D:65:B0:9E:22:68:F7:61:28:97:EE:3E:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/a838f49d-f401-38c0-8985-7a049f64a168.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     15164
IP address blocks:        205.236.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:22:dc:a5:29:92:cf:f8:67:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=c23f0732-d190-467d-8af2-31db3c07ae66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:95:77:dc:a0:8d:e2:36:8b:0b:ff:fe:d0:98:
                    d2:c1:c4:4b:38:04:cf:dc:28:f1:e1:1b:9e:5e:a2:
                    03:b8:3e:be:26:65:8f:2b:fb:bc:2c:46:7f:56:4c:
                    6a:91:61:e2:9e:7b:4d:61:cd:ed:50:e8:4e:1b:29:
                    c6:de:03:e1:02:fd:21:15:26:f5:cf:ea:a8:a1:84:
                    03:7f:b5:76:1c:a3:63:ae:f1:bd:49:d1:aa:75:d4:
                    fb:b3:aa:2d:dd:11:29:25:5a:5f:f9:63:fb:74:af:
                    88:68:57:bf:37:21:8c:1f:ab:bd:44:9f:5e:b7:40:
                    0a:de:ea:88:51:0e:e1:90:7f:18:bc:1c:d5:29:b1:
                    34:48:4e:d8:c1:b7:c0:96:61:26:0e:96:82:d8:8e:
                    3a:5d:cb:12:6f:31:17:7d:47:77:fe:e7:dd:95:21:
                    61:a2:24:53:f8:4f:06:84:68:e0:9f:15:ae:b8:87:
                    7a:2c:64:44:96:56:a1:e0:73:eb:72:83:7a:41:a4:
                    2a:23:a9:b7:5e:89:57:f2:5d:e4:fe:1a:f6:a2:dc:
                    a1:1b:43:de:6e:f6:64:b9:a6:40:0d:2d:2a:de:0c:
                    42:41:dd:f1:2b:ae:49:5f:19:b2:91:56:3b:03:e9:
                    dc:95:46:56:4a:96:f5:b3:2b:5f:5d:5e:c0:68:e3:
                    b3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:47:05:7E:F0:9D:F7:A4:2E:C9:D2:C2:19:A7:76:ED:24:D3:D7:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/a838f49d-f401-38c0-8985-7a049f64a168.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.crl

            X509v3 Authority Key Identifier:
                keyid:08:DE:39:A7:0E:01:3D:8D:65:B0:9E:22:68:F7:61:28:97:EE:3E:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.236.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:52:b7:c8:0d:8b:16:a3:dd:2b:87:54:d2:89:56:41:07:08:
         28:75:f4:61:91:f6:6e:25:65:7a:43:61:44:fb:49:72:07:d9:
         7a:f3:b3:50:2d:81:93:32:8f:b5:46:b4:75:2f:49:c2:be:7e:
         f1:95:28:da:92:1c:21:73:0b:3f:e5:22:b6:d2:78:fe:88:41:
         75:97:c8:17:f2:52:4b:e7:eb:6c:2d:a2:42:8c:a7:01:76:9a:
         48:be:2a:9c:61:80:67:88:51:9f:23:e2:dd:8c:65:de:db:c7:
         5d:9f:35:38:4d:a5:e3:45:82:5d:2c:f7:d1:25:1d:ed:b0:6c:
         f4:2a:a4:e3:08:e0:f6:b2:48:75:41:65:5c:3e:58:5d:ae:65:
         7f:a0:9c:fb:d1:fd:fd:01:63:3a:da:f5:cc:fc:8a:12:36:cc:
         df:25:9a:a7:d8:07:e1:5b:a9:f0:38:36:7b:65:01:64:e5:a5:
         a3:b7:73:6a:4a:bb:cb:61:51:ab:c9:bf:6d:c4:3a:1a:c4:e2:
         57:ef:24:25:c5:60:f1:9b:82:b4:66:3a:62:1b:46:b2:e6:7c:
         c9:00:6c:47:42:36:89:24:c3:05:97:dd:e8:9a:52:9a:5a:3d:
         2d:1c:5e:2f:91:58:1f:d8:22:f1:dd:40:85:88:d1:48:fa:61:
         c4:f4:e6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 21:37:02 2025 by rpki-client