Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc350fc7-bb26-3a08-9711-e34e4e9fed0e.roa
File:                     dc350fc7-bb26-3a08-9711-e34e4e9fed0e.roa (raw, json)
Hash identifier:          3yZcpMGH9RgIMguNyFA7OTcohz7YX08PbK6HLhb7n2Y=
Subject key identifier:   34:81:7D:D4:8F:05:2F:3C:6E:E0:BD:F2:F9:E5:54:96:8E:E1:4A:BB
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285849C4D4C144348FECD67F12F140
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc350fc7-bb26-3a08-9711-e34e4e9fed0e.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     31898
IP address blocks:        170.114.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:c1:44:34:8f:ec:d6:7f:12:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=b184dbfd-cc21-42db-8802-98fae36034df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:31:e4:ac:42:b2:3b:26:c0:e5:0b:00:97:bb:
                    c4:8d:15:c2:76:6b:58:0c:dd:a3:5e:18:84:87:93:
                    29:ee:98:cc:e9:14:27:06:90:8e:d4:ff:36:5e:82:
                    85:d6:14:f1:88:6c:40:d7:6e:9b:39:02:ac:54:48:
                    1f:50:25:77:72:68:dd:47:ce:b2:09:8e:c2:ec:a6:
                    fd:44:e9:bf:6b:52:07:70:b8:f6:59:66:d9:eb:bc:
                    44:1d:64:69:2e:49:37:18:2f:0c:57:91:72:90:bd:
                    6b:af:64:ea:57:aa:aa:df:96:7e:22:4a:46:6a:d4:
                    8b:e8:6e:ca:74:20:9a:33:85:2f:e8:8e:df:f0:d6:
                    57:93:a7:3c:99:7a:be:36:d8:5b:c3:9c:0a:02:e6:
                    a4:95:80:48:fc:21:62:cd:16:e9:73:cb:11:51:23:
                    fb:34:cd:4f:b8:6c:8d:a8:33:fc:73:84:e3:68:5d:
                    23:70:44:4c:6f:9f:6b:78:05:a5:ee:6d:e6:89:77:
                    dd:9e:cd:ea:55:2e:30:a1:5d:6e:7b:9a:c2:37:6f:
                    d3:40:6d:ed:54:33:e9:76:40:79:39:28:dc:ec:18:
                    91:f3:88:a4:89:fa:16:14:43:24:96:03:be:77:bc:
                    b0:02:28:c6:38:83:33:ac:22:3a:e8:d9:5e:39:74:
                    cc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:81:7D:D4:8F:05:2F:3C:6E:E0:BD:F2:F9:E5:54:96:8E:E1:4A:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc350fc7-bb26-3a08-9711-e34e4e9fed0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:b4:5f:21:37:98:dd:85:98:1a:e8:b7:1e:b8:b4:f4:28:4e:
         8d:33:74:28:26:32:95:7c:67:d4:41:24:cc:de:5a:01:18:23:
         ec:de:4c:5b:66:13:e9:a4:45:dd:ac:f8:cf:4d:ea:81:08:1a:
         25:a6:33:1b:4d:f8:12:b3:d8:eb:01:68:82:05:32:4c:54:a9:
         10:06:5b:28:1e:fd:7f:29:72:52:9b:9f:05:25:1f:95:37:f5:
         40:4b:a2:aa:08:31:1e:a8:6b:1a:98:66:cd:d8:fd:19:40:c6:
         5e:38:c7:a7:28:e1:fe:29:4d:34:61:a7:55:f3:79:64:38:f0:
         64:f2:25:8b:f0:82:50:b9:df:11:11:aa:e4:2d:04:73:6f:28:
         14:a8:4d:7c:89:3c:d0:f4:7e:3b:42:3e:e7:8c:bb:99:e8:73:
         3f:54:5c:95:d9:0d:31:c5:64:37:8e:58:c8:0e:f6:3f:7c:bf:
         49:67:13:a3:01:68:16:be:16:c3:3d:bc:41:ba:e4:fe:4d:49:
         fa:65:98:6d:74:3c:c6:b9:fa:5b:05:4f:1e:39:11:bf:d8:2b:
         3c:63:3b:1e:72:74:94:b7:12:31:29:04:72:a9:92:3e:86:cb:
         2a:7f:f4:8e:5a:49:ea:9f:a9:5a:cc:5d:f2:12:2d:07:ae:e3:
         3e:f6:bf:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 03:43:20 2025 by rpki-client