Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/87306ae8-1630-3ec2-9f4a-2719c4cdd54a.roa
File:                     87306ae8-1630-3ec2-9f4a-2719c4cdd54a.roa (raw, json)
Hash identifier:          ymkXXf+R5u+nDioqFnpZOwQOxGir0xolgRL8R7K7H+g=
Subject key identifier:   C1:C2:9A:C8:AF:E2:ED:F8:E5:49:C1:09:A3:3C:CD:99:6F:69:00:25
Certificate issuer:       /CN=8e159820-cf56-42eb-b9f0-0187b10bb721
Certificate serial:       010D0C9F43285849C4D4AF36D1F0F0DD53419080
Authority key identifier: 3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/87306ae8-1630-3ec2-9f4a-2719c4cdd54a.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     376
IP address blocks:        205.151.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:af:36:d1:f0:f0:dd:53:41:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e159820-cf56-42eb-b9f0-0187b10bb721
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=cd054d4e-7428-4359-b9e1-20c06998f7d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cd:0b:0b:21:8b:fc:57:b6:e4:f7:36:28:1e:
                    d6:17:71:4e:d2:df:ac:a9:92:c7:0c:0e:39:10:2c:
                    47:76:d9:e0:40:72:37:f0:5b:b5:71:75:81:43:1e:
                    15:b4:fb:4e:e4:d7:e3:f8:77:22:29:87:0b:d5:f5:
                    04:1e:14:5f:7a:ee:ab:8e:7a:70:56:7f:d9:22:0a:
                    6b:89:1d:d1:a0:1d:88:c3:07:fe:75:dd:2a:62:0e:
                    12:60:d7:24:6d:39:50:c1:90:18:5f:68:2f:51:e0:
                    92:f0:04:6e:4a:a7:48:cf:c9:6a:68:35:00:4c:f3:
                    38:e7:6b:e4:80:3e:1d:91:99:dd:3e:b4:ba:a5:55:
                    cd:de:98:8e:c7:49:47:ef:8b:07:42:ff:9f:98:59:
                    fa:1a:fb:c6:e3:de:a9:4a:04:85:dd:73:21:d6:b3:
                    3e:f6:02:1d:5f:1f:19:8c:38:f4:fe:f9:b1:c0:82:
                    ed:f3:e2:01:3a:1f:96:e2:b4:ba:f0:ce:fe:d1:30:
                    56:de:35:3c:c1:bb:7f:28:3a:b4:40:ca:09:e2:70:
                    25:a9:9f:b9:86:96:49:36:ea:87:aa:e4:1a:ac:8e:
                    9c:d4:19:6c:a8:f5:b2:c5:01:a9:e6:d9:91:66:b8:
                    35:2c:ae:dc:45:6e:9b:55:16:14:3d:4f:fa:bf:3d:
                    af:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C2:9A:C8:AF:E2:ED:F8:E5:49:C1:09:A3:3C:CD:99:6F:69:00:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/87306ae8-1630-3ec2-9f4a-2719c4cdd54a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl

            X509v3 Authority Key Identifier:
                keyid:3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.151.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:f4:78:6e:17:a2:bc:9f:e9:9c:dd:12:8a:26:92:00:eb:69:
         45:53:9c:8c:e5:71:4f:c6:95:69:f0:c5:9b:8a:f9:d2:9c:89:
         ef:33:34:b7:2d:f2:e7:cf:b8:17:59:f6:64:e4:2a:1a:f0:77:
         9b:c3:c8:bf:1d:9e:e8:b2:68:77:db:9c:5c:4a:5c:48:8a:fb:
         bc:45:71:61:6e:82:d5:d1:04:39:ae:ec:43:e5:52:d0:7e:37:
         3a:6d:4b:ba:77:80:33:81:33:d8:19:e1:4b:5e:2e:f5:a8:e0:
         9c:a0:8a:c1:3c:4b:26:16:7a:7e:8b:8e:00:c7:c3:f1:fb:45:
         52:f9:34:9c:eb:56:5d:b0:8f:fa:77:ef:d1:f2:6d:ab:9b:78:
         81:f7:54:34:5a:d1:5a:5f:8b:1e:11:23:e8:e1:06:79:9d:2b:
         f2:ff:5d:74:f6:a8:d5:96:b5:67:0c:b8:d5:a4:b4:21:dd:3d:
         19:e3:ab:4c:58:f2:52:5c:55:9a:c3:b4:d4:bc:0b:25:2e:2f:
         dd:6b:87:b4:49:a6:65:4b:ab:9c:ef:c0:89:fb:e7:75:ce:9c:
         67:97:48:b5:9a:63:fa:b5:6d:1e:f2:52:7f:94:62:77:b9:c5:
         d8:a6:47:7f:f0:2b:00:dd:06:91:bd:6f:cf:2d:65:6f:ee:7b:
         57:cb:6a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:39:37 2025 by rpki-client