Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/6e0a30c7-f238-30c2-bcf5-677f0f4adb83.roa
File:                     6e0a30c7-f238-30c2-bcf5-677f0f4adb83.roa (raw, json)
Hash identifier:          4NxFPOYRN7dUl74uGTGXEfuDEHB+RzsOYUmicS44svo=
Subject key identifier:   8B:BF:E8:92:C3:A7:10:23:67:9F:8B:8C:E2:60:53:5A:56:80:43:94
Certificate issuer:       /CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
Certificate serial:       010D0C9F43285849C4D4B55D0F83DA2082AED580
Authority key identifier: DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/6e0a30c7-f238-30c2-bcf5-677f0f4adb83.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     16509
IP address blocks:        168.245.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:b5:5d:0f:83:da:20:82:ae:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=0a2bbe4e-584e-4fe8-bf82-1e9e66b1c988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1c:11:0d:9f:2f:a0:d4:d0:ea:58:1e:8a:f1:
                    0d:ac:b8:d3:a1:49:13:b2:2c:2c:24:c3:88:39:05:
                    d6:59:51:67:55:50:f1:bd:e9:ce:a3:2e:ee:b4:31:
                    ef:c9:18:80:50:ef:00:17:ad:8c:1a:00:61:5b:ab:
                    5c:30:88:bf:40:49:a3:e9:c9:1f:5d:0b:66:2f:d1:
                    6a:81:8b:3b:66:26:42:ed:d8:da:2b:67:97:a4:6c:
                    a4:9d:fd:35:3c:a1:0d:9c:ea:94:31:28:10:62:8d:
                    f4:8e:61:b0:01:27:d0:8a:61:c2:d2:ea:87:7a:5f:
                    20:e7:d2:23:bb:38:e7:8f:52:d2:cc:f7:0b:fc:f4:
                    ce:03:91:09:83:2b:5e:ae:56:91:e0:9e:8e:17:11:
                    7c:18:c1:f7:a0:17:ec:9e:e8:8f:30:0f:b2:8a:c8:
                    2d:cc:07:ca:86:f9:3c:ec:58:7b:a7:70:c9:2c:ca:
                    bf:3f:07:6d:10:be:79:1c:21:03:ee:0a:71:35:96:
                    58:3d:c0:21:85:ec:18:c6:ab:2d:8c:26:30:20:57:
                    03:52:87:61:b7:97:02:64:a1:84:61:22:62:0b:30:
                    1e:4e:00:ef:00:42:92:07:8a:13:64:a1:c0:29:58:
                    c6:4d:05:b4:f4:e3:f8:1e:b6:0c:cb:36:b4:44:6f:
                    a2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BF:E8:92:C3:A7:10:23:67:9F:8B:8C:E2:60:53:5A:56:80:43:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/6e0a30c7-f238-30c2-bcf5-677f0f4adb83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl

            X509v3 Authority Key Identifier:
                keyid:DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.245.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:ec:1d:66:18:20:9d:c4:ad:8e:5b:02:4d:cb:2c:9e:8a:b6:
         37:40:58:6d:95:56:88:5c:2f:95:2a:29:f3:87:63:ce:4f:33:
         15:e0:b2:1c:a6:7c:21:27:62:34:bc:c7:cd:58:4b:c2:ed:52:
         7b:b0:49:db:99:2c:d5:4a:8c:7c:8e:48:a1:c6:9d:d0:91:6d:
         81:f7:89:3c:0f:f0:59:2f:21:0a:77:d9:f3:73:23:12:e0:a5:
         13:0c:38:33:51:91:84:92:9b:6f:1a:a1:88:33:58:1c:3c:c0:
         b5:d1:14:62:5f:e7:1f:b5:ee:27:9a:fa:16:df:f6:98:22:9d:
         8a:7c:ba:c8:5b:d8:07:a6:5e:d2:1a:10:54:30:68:6a:92:14:
         e6:55:b7:4b:af:59:d5:f7:74:b0:7b:f0:0e:e1:8a:8c:2d:e1:
         71:3f:e5:99:9f:14:a6:56:8f:7f:22:1f:d9:a4:4f:33:7d:a9:
         5b:34:dc:33:9d:f5:f8:c8:d3:47:cb:58:47:35:8e:fb:55:52:
         be:91:cc:c9:01:42:1c:6f:5a:85:f4:be:dc:f3:a5:bc:28:58:
         d8:73:b0:04:37:de:d8:df:fb:58:10:12:51:1f:5b:33:86:1e:
         49:58:69:b9:fd:76:18:3b:10:90:49:ba:99:68:14:d2:e2:ca:
         3a:66:89:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:24:15 2025 by rpki-client