Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fce46eeb-4860-4c58-a01e-b357cd55e055/ebc74433-3042-3b63-ba72-c1ab7ba1f42e.roa
File:                     ebc74433-3042-3b63-ba72-c1ab7ba1f42e.roa (raw, json)
Hash identifier:          1rVNJEsyU/E9Cizyh10HU9LT5C6XxUYy6qX56Wh2vIs=
Subject key identifier:   CD:19:09:DB:9A:A7:4A:8D:C8:3E:1A:F1:45:DB:FE:96:33:D6:96:F7
Certificate issuer:       /CN=fce46eeb-4860-4c58-a01e-b357cd55e055
Certificate serial:       010D0C9F43285849C904F0ECCB2C9EEF8F40D150
Authority key identifier: 7A:15:3E:25:DA:09:EC:39:48:A4:91:CB:25:93:76:4E:FE:8F:EB:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fce46eeb-4860-4c58-a01e-b357cd55e055.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fce46eeb-4860-4c58-a01e-b357cd55e055/ebc74433-3042-3b63-ba72-c1ab7ba1f42e.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     376
IP address blocks:        205.237.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fce46eeb-4860-4c58-a01e-b357cd55e055/fce46eeb-4860-4c58-a01e-b357cd55e055.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fce46eeb-4860-4c58-a01e-b357cd55e055/fce46eeb-4860-4c58-a01e-b357cd55e055.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fce46eeb-4860-4c58-a01e-b357cd55e055.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:f0:ec:cb:2c:9e:ef:8f:40:d1:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fce46eeb-4860-4c58-a01e-b357cd55e055
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=80429232-bd85-4b11-a164-6b68e099da05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a4:24:3e:9b:fc:71:e9:a6:79:0e:5d:46:cf:
                    90:5c:55:88:68:60:25:79:8c:74:17:13:43:2b:3f:
                    d1:67:4f:28:55:f1:83:76:69:44:7c:96:87:ed:97:
                    9f:4f:56:ab:6e:d8:40:4f:e7:18:cd:3f:41:a3:80:
                    f9:a9:b4:f0:de:9b:bb:ad:24:fe:6c:90:7e:5c:87:
                    82:7e:87:2d:4a:79:d5:5e:52:bc:2e:ee:68:21:56:
                    67:0d:65:16:4e:92:55:8f:9d:c9:fe:e6:34:92:14:
                    cb:8f:18:54:6a:88:ab:d7:58:86:e8:b3:42:da:2f:
                    b6:41:c0:94:a6:58:ef:80:54:2b:ae:37:9d:fd:d5:
                    ab:2a:07:da:e5:17:58:d3:5f:1b:ec:cc:72:5e:3e:
                    2d:85:4d:9b:1c:a6:1e:55:ca:d4:87:90:c0:cc:96:
                    a5:63:02:9d:42:bd:eb:4b:d1:e0:47:49:e9:f1:c0:
                    1b:4f:0b:57:cb:9f:24:45:7e:07:d5:ed:5f:81:4b:
                    33:fe:c2:7a:aa:e7:b7:c1:bc:73:ed:6e:26:d3:09:
                    ce:9e:77:db:e7:8c:46:06:28:20:91:33:84:da:d5:
                    41:77:4b:15:92:24:ab:1d:9a:02:7c:d0:35:b9:49:
                    99:77:0d:b6:52:4a:b2:a7:d3:fd:bd:65:0a:d9:47:
                    9d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:19:09:DB:9A:A7:4A:8D:C8:3E:1A:F1:45:DB:FE:96:33:D6:96:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fce46eeb-4860-4c58-a01e-b357cd55e055/ebc74433-3042-3b63-ba72-c1ab7ba1f42e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fce46eeb-4860-4c58-a01e-b357cd55e055/fce46eeb-4860-4c58-a01e-b357cd55e055.crl

            X509v3 Authority Key Identifier:
                keyid:7A:15:3E:25:DA:09:EC:39:48:A4:91:CB:25:93:76:4E:FE:8F:EB:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fce46eeb-4860-4c58-a01e-b357cd55e055.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.237.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:b2:3a:48:87:b9:a3:00:58:bf:ae:e8:b9:61:55:99:9d:fb:
         62:1b:a5:06:72:fa:ec:f3:53:97:c8:85:73:2f:1d:aa:a2:07:
         ca:05:b5:2b:0a:f5:2f:57:2e:40:97:e1:d8:61:72:4c:59:9c:
         9c:a6:fd:fe:d7:b3:74:00:45:e6:5e:56:da:a6:40:f2:9c:37:
         2e:db:12:05:ce:83:4f:e7:0e:c6:db:9c:e1:e2:c8:1f:01:2f:
         cb:99:4e:e3:63:10:65:07:0b:2f:a4:de:6a:c7:56:84:85:04:
         3f:79:5e:e0:71:74:c5:d5:75:46:ae:e5:f9:f0:36:2a:1e:2d:
         a4:d9:a4:96:6b:68:a8:0a:ff:39:fc:51:69:77:f8:cf:16:79:
         80:40:37:00:81:75:2c:f2:71:0a:59:b3:01:f1:10:6d:e5:df:
         ea:d7:43:a2:2b:10:1f:f4:5e:45:cf:d4:3b:ec:c2:6d:17:28:
         c5:fd:d9:5b:41:7b:13:3e:e6:e4:79:00:05:95:eb:c5:cd:1f:
         6c:40:eb:d4:38:1c:73:2c:22:db:94:1e:91:30:8f:d1:76:01:
         18:a2:11:94:cf:11:70:59:ea:66:30:51:f9:2b:88:e5:e7:0a:
         22:ed:3c:f0:83:c8:62:26:18:ce:ac:2b:f7:36:40:82:a8:7c:
         4b:78:15:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 17:04:37 2025 by rpki-client