Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e5bf948d-3374-4f00-a644-72f834e81382/e7715a5f-8678-3eba-a4d7-5c726e7cd137.roa
File:                     e7715a5f-8678-3eba-a4d7-5c726e7cd137.roa (raw, json)
Hash identifier:          msvbLRf77Jl2kFqvrfkhj1+SFIsbcSTr2tm4HTVsCps=
Subject key identifier:   FD:95:45:B3:7A:8F:64:C6:F1:39:AC:8A:89:32:39:7E:45:49:D8:79
Certificate issuer:       /CN=e5bf948d-3374-4f00-a644-72f834e81382
Certificate serial:       010D0C9F432858499F2499EC5DAF9F92FE6C72F8
Authority key identifier: A0:CE:F9:97:AD:25:A3:1F:82:94:A2:BC:21:A8:13:E4:50:72:9A:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e5bf948d-3374-4f00-a644-72f834e81382.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e5bf948d-3374-4f00-a644-72f834e81382/e7715a5f-8678-3eba-a4d7-5c726e7cd137.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     16509
IP address blocks:        192.195.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e5bf948d-3374-4f00-a644-72f834e81382/e5bf948d-3374-4f00-a644-72f834e81382.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e5bf948d-3374-4f00-a644-72f834e81382/e5bf948d-3374-4f00-a644-72f834e81382.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e5bf948d-3374-4f00-a644-72f834e81382.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:99:ec:5d:af:9f:92:fe:6c:72:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5bf948d-3374-4f00-a644-72f834e81382
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=91333c3c-c38f-4fd2-8095-7a319a7fc2c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3a:19:12:c2:ce:71:c0:33:53:bf:75:da:56:
                    99:7b:f3:2d:33:85:ff:08:7d:10:74:dc:00:d6:db:
                    36:ba:a3:9b:78:e6:7a:03:b2:90:11:e4:6a:67:a6:
                    9a:ae:0e:0a:29:b9:20:f9:73:91:08:cd:5c:48:73:
                    7f:80:fe:da:70:35:37:4f:56:8d:6b:4d:9a:43:7b:
                    7c:7c:41:c7:7b:01:34:ca:06:7f:89:38:10:86:66:
                    71:31:2d:01:c5:0e:be:88:55:04:d0:88:fa:3b:e2:
                    a4:c3:9f:23:d6:5d:fb:82:eb:d7:fc:10:a7:2d:41:
                    a1:40:ee:cc:87:87:80:fe:7f:f7:a6:68:5f:53:5d:
                    79:d3:dc:59:7a:5e:78:69:05:9f:cd:00:a7:4a:4b:
                    20:60:53:34:b3:39:57:b2:a5:19:ed:5d:90:7b:d8:
                    06:24:63:4d:e4:ec:e5:50:7c:ff:c1:58:59:96:90:
                    73:9e:b3:b5:54:fa:20:6d:f2:1e:88:9c:72:a2:8d:
                    7d:a0:a6:9a:22:d9:85:a8:2b:34:51:a6:1f:e0:ae:
                    47:7e:3c:23:04:22:b2:82:91:03:f2:ef:4e:ed:46:
                    9a:cc:e0:f0:88:62:34:61:7a:c2:ca:5a:2b:5d:b2:
                    e8:63:b1:81:e1:e6:ab:1e:22:51:f8:c7:db:ea:33:
                    e4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:95:45:B3:7A:8F:64:C6:F1:39:AC:8A:89:32:39:7E:45:49:D8:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e5bf948d-3374-4f00-a644-72f834e81382/e7715a5f-8678-3eba-a4d7-5c726e7cd137.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e5bf948d-3374-4f00-a644-72f834e81382/e5bf948d-3374-4f00-a644-72f834e81382.crl

            X509v3 Authority Key Identifier:
                keyid:A0:CE:F9:97:AD:25:A3:1F:82:94:A2:BC:21:A8:13:E4:50:72:9A:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e5bf948d-3374-4f00-a644-72f834e81382.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.195.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ad:2b:c1:f5:c0:ba:c9:3c:8e:4a:dc:c7:28:24:04:c7:13:
         f9:67:26:a8:6b:1c:0a:4e:00:0d:9c:44:f2:2f:8f:a7:05:85:
         05:db:f9:ce:9e:24:0e:86:0b:56:92:39:d3:ba:1c:25:df:97:
         44:2d:cd:70:be:2f:7c:57:85:63:62:ff:4f:1a:d5:57:77:4e:
         4e:53:88:a3:99:70:78:cd:52:55:f5:f6:5d:eb:93:18:01:9c:
         56:ed:98:c1:fe:97:81:33:dd:4d:8f:ff:ff:61:03:35:93:0a:
         d6:c7:64:8d:72:64:6c:9e:d6:66:bd:9d:24:49:a0:40:cf:ae:
         86:6c:22:ae:d8:c6:66:5f:48:2e:02:69:90:30:4d:80:eb:db:
         d1:68:0f:44:a6:c5:b8:ee:fc:66:46:f3:97:b5:7c:87:53:28:
         c6:fe:c9:98:73:db:88:af:cf:d6:09:f2:22:74:16:9e:8c:dd:
         3b:0b:87:51:80:fa:bf:fb:d9:48:9e:4c:a7:0a:bd:2c:1b:44:
         65:c2:54:5f:f6:e1:9c:1d:29:1a:fa:74:67:95:5e:c8:3c:65:
         9e:bd:1a:88:ba:51:dd:c5:ba:11:76:0e:1b:f4:00:06:9b:6b:
         f8:a7:c9:f8:3b:ac:b5:69:3f:b0:10:ec:c6:9a:be:b7:8a:67:
         22:20:f6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:45:05 2025 by rpki-client