Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/a7d20787-ab53-329d-990c-d091714ed0e7.roa
File:                     a7d20787-ab53-329d-990c-d091714ed0e7.roa (raw, json)
Hash identifier:          xc5ZxfSMrW1RvVAFHW0SnL4tnjc4IAobjJyh1NDy9WM=
Subject key identifier:   AA:13:BF:94:BD:4E:E4:97:B8:61:2B:BD:F4:98:5C:C9:7D:F1:6F:16
Certificate issuer:       /CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
Certificate serial:       010D0C9F43285849D6351DF9A54720724A2E9D00
Authority key identifier: A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/a7d20787-ab53-329d-990c-d091714ed0e7.roa
Signing time:             Tue 13 May 2025 06:23:50 +0000
ROA not before:           Tue 13 May 2025 06:23:50 +0000
ROA not after:            Mon 11 Aug 2025 06:23:50 +0000
asID:                     25655
IP address blocks:        173.241.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d6:35:1d:f9:a5:47:20:72:4a:2e:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
        Validity
            Not Before: May 13 06:23:50 2025 GMT
            Not After : Aug 11 06:23:50 2025 GMT
        Subject: CN=a4054a82-51a1-4d20-8aea-f4bd753d9e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:27:97:97:81:24:dc:6a:9c:bf:19:04:7c:4b:
                    13:d0:72:ab:87:89:e7:51:bf:35:c7:67:f4:b2:99:
                    ec:f8:2f:92:5a:d4:96:a5:4e:82:ac:4f:04:f7:21:
                    7f:b1:f0:10:49:94:32:9e:1d:39:3d:10:95:7c:db:
                    18:d3:1d:5b:9f:6f:27:d1:e9:f5:af:38:25:6f:80:
                    12:64:73:7f:35:54:f3:0c:9b:c2:7a:48:ff:57:42:
                    66:56:18:7c:a5:c9:1d:a5:ff:4e:40:d5:c4:d9:57:
                    7f:7a:a3:4c:5e:62:4e:b5:47:b7:b8:09:89:21:4a:
                    08:15:a0:45:3b:df:21:d6:c2:fa:01:3a:6c:ef:6d:
                    b2:9f:c1:6c:ed:22:11:11:61:b5:f2:0f:ed:bf:95:
                    b4:62:ab:b0:17:d8:c0:4b:cf:54:9a:45:86:e8:d3:
                    9d:c7:20:bd:47:1f:1a:e2:46:f3:bb:dd:81:7d:cc:
                    a2:c8:ee:7a:75:ab:52:4f:82:14:07:6e:1b:9e:27:
                    b6:ee:d3:c1:4b:70:a8:01:99:63:91:71:33:39:3c:
                    66:ff:a1:40:5b:be:8c:42:86:68:51:c8:30:80:ed:
                    b3:03:d7:76:b2:93:36:17:a0:ad:bb:f2:8d:00:96:
                    69:63:37:28:30:0c:fc:36:91:17:57:86:82:29:89:
                    73:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:13:BF:94:BD:4E:E4:97:B8:61:2B:BD:F4:98:5C:C9:7D:F1:6F:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/a7d20787-ab53-329d-990c-d091714ed0e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl

            X509v3 Authority Key Identifier:
                keyid:A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:aa:be:54:47:4f:aa:5c:2c:8b:bd:d8:2e:79:63:cf:4a:d4:
         c4:57:80:13:f9:e0:00:c5:d3:9b:ea:40:f0:29:48:02:77:3e:
         0e:99:d6:a1:71:ec:a4:59:85:99:78:fd:4c:a8:e6:e4:a6:11:
         b1:e1:06:3e:31:21:ec:2a:b8:95:4c:e2:2c:e8:f8:9d:cd:58:
         0f:37:27:f5:b1:3c:70:22:1b:3c:17:21:1c:65:78:a6:57:ac:
         40:aa:72:33:eb:ec:6c:93:b6:5c:13:ab:7f:ce:3c:f2:e5:03:
         e5:49:99:b7:e6:68:77:95:b0:5e:6a:1b:c7:1b:30:f4:34:d2:
         dd:1c:6e:9b:e1:d1:16:4d:a1:7a:15:bf:6b:d5:48:d3:a4:10:
         6d:df:74:37:3e:75:55:d6:d5:f9:af:4a:15:40:3d:86:40:ab:
         0a:d9:39:f0:e9:42:36:d2:f1:28:1b:bf:0d:59:8c:58:03:88:
         19:5e:23:04:60:0a:bd:96:a8:03:29:ee:b0:a0:58:da:ff:e9:
         fc:d8:78:75:4a:71:c9:04:5b:b1:6f:bf:8a:e6:3b:86:1a:da:
         be:18:0a:92:5d:52:bf:a3:31:f8:86:be:08:28:dd:26:b6:33:
         a3:92:27:b9:89:dd:cd:b3:d7:e8:8c:77:f4:13:7c:00:fb:73:
         01:0d:10:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:26:45 2025 by rpki-client