Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ee1b32e0-0ba8-3200-94c2-a135e2c6f445.roa
File:                     ee1b32e0-0ba8-3200-94c2-a135e2c6f445.roa (raw, json)
Hash identifier:          EPCKZtu3xnAWGj0ZIJoDRAZx00LEpkd5/GE43+sUDLA=
Subject key identifier:   43:6A:60:BC:CE:3A:24:44:C8:6B:3D:79:40:4C:0D:7D:C6:9F:7E:77
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F432858498FC9B71C0580D17661F0E300
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ee1b32e0-0ba8-3200-94c2-a135e2c6f445.roa
Signing time:             Fri 18 Apr 2025 01:00:47 +0000
ROA not before:           Fri 18 Apr 2025 01:00:47 +0000
ROA not after:            Thu 17 Jul 2025 01:00:47 +0000
asID:                     15164
IP address blocks:        173.244.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8f:c9:b7:1c:05:80:d1:76:61:f0:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Apr 18 01:00:47 2025 GMT
            Not After : Jul 17 01:00:47 2025 GMT
        Subject: CN=d470cccb-eee2-49f5-a4d4-58fe56492075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:71:a4:6a:66:39:bc:3e:d4:55:f3:ab:e7:93:
                    0d:33:b5:ee:85:77:ab:19:cf:38:35:87:6f:76:7c:
                    98:36:66:8d:fd:83:2a:4b:b7:8f:b5:8f:e6:cb:d5:
                    4c:00:d1:2b:87:c7:be:d5:d9:b1:c7:16:58:10:a0:
                    c4:ab:15:b3:5b:3a:a7:c6:46:38:92:cb:7b:3b:3e:
                    b7:48:5b:4a:f5:9d:72:54:d8:c6:d2:96:61:2e:61:
                    04:11:9e:d4:78:f3:1e:30:e4:b0:86:fc:55:cf:f9:
                    91:d6:7d:92:7b:88:c3:0e:53:79:7f:79:ae:d8:03:
                    5a:27:4f:5c:59:a0:d4:4b:9e:9d:47:ca:3a:11:0d:
                    98:8c:1d:b4:61:e0:89:bf:bc:e1:27:e2:91:17:f1:
                    58:47:b3:a4:98:e8:fc:47:a9:19:02:f4:f1:9b:9b:
                    15:7e:30:93:55:ef:cd:9c:8c:8d:ff:54:c9:d8:33:
                    c2:b3:9d:88:ef:21:6b:b8:7d:dc:07:b0:66:c8:a8:
                    45:70:64:b7:9a:43:99:40:55:29:83:7b:5f:49:6f:
                    c3:59:11:6b:61:ba:ad:39:7c:08:62:a2:c4:60:c0:
                    20:30:a4:89:4a:82:a7:29:18:dd:fc:e1:92:bd:b7:
                    c5:5e:d4:12:a0:6a:42:2d:ae:e8:8a:17:9a:71:cf:
                    5e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6A:60:BC:CE:3A:24:44:C8:6B:3D:79:40:4C:0D:7D:C6:9F:7E:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ee1b32e0-0ba8-3200-94c2-a135e2c6f445.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.244.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:9c:a8:13:58:8f:b8:bf:38:e3:9f:2c:70:17:40:d0:99:35:
         15:4e:05:08:8c:5b:80:49:c4:e4:ff:dd:cf:5d:05:21:96:69:
         61:66:d1:67:61:6d:b0:6a:8d:50:f7:3e:7b:db:08:e6:36:69:
         8c:b6:bd:54:b0:47:a2:94:26:d5:10:27:83:75:d7:c1:e3:7e:
         7f:af:8b:f4:b1:c0:eb:4b:cd:73:93:0d:e5:49:0a:51:ed:cf:
         e8:72:00:79:2a:49:35:fc:42:a3:30:a5:cb:74:e8:62:8a:ff:
         79:40:bf:de:44:56:de:7a:72:1f:f5:4e:f7:64:49:63:72:74:
         99:73:60:23:69:73:2a:eb:7a:de:0c:e2:47:11:3d:4a:46:d1:
         9a:a3:5b:38:b3:e1:ea:d7:58:9b:ab:1e:8b:b3:06:1f:54:9c:
         0a:6f:9f:c5:94:a4:e3:ff:af:07:fd:14:8c:87:99:8f:31:99:
         1e:09:83:79:87:23:9a:c7:63:d1:e8:e5:69:ce:4c:62:a8:85:
         f8:96:cf:77:75:84:21:f8:91:7b:93:dd:8b:3d:c7:fb:28:71:
         50:9c:8b:f9:06:99:a4:17:e4:0c:9f:6b:c1:62:ae:fb:11:91:
         14:08:be:0d:d8:28:08:f8:3b:fa:7d:54:9e:55:c7:61:17:5a:
         72:f8:b1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:42:44 2025 by rpki-client