Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cf7e221d-6ab2-31eb-8bb1-81f9693b3145.roa
File:                     cf7e221d-6ab2-31eb-8bb1-81f9693b3145.roa (raw, json)
Hash identifier:          6h9jVgfOprps938j7gcRXxZAIxTox3M9sY1YsTBE6Q0=
Subject key identifier:   62:66:CC:4A:3B:A3:8C:6D:41:4A:40:B7:93:17:98:71:1C:AB:AB:5C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849F2949C8E6541547E0FBA1980
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cf7e221d-6ab2-31eb-8bb1-81f9693b3145.roa
Signing time:             Fri 23 May 2025 10:17:34 +0000
ROA not before:           Fri 23 May 2025 10:17:34 +0000
ROA not after:            Thu 21 Aug 2025 10:17:34 +0000
asID:                     44477
IP address blocks:        192.177.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:94:9c:8e:65:41:54:7e:0f:ba:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 23 10:17:34 2025 GMT
            Not After : Aug 21 10:17:34 2025 GMT
        Subject: CN=37535cb0-1bc3-438c-8d33-6850cd4d939d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c5:6a:d6:63:11:cd:ca:df:53:77:6b:34:8a:
                    bc:3b:28:af:ff:07:b6:2d:14:0c:38:60:cb:ba:e6:
                    a9:f4:42:3c:1c:91:5f:ba:2a:54:05:71:a2:fb:97:
                    26:77:27:e5:7f:c1:fe:4b:93:31:6a:33:50:ec:eb:
                    77:72:15:7a:6f:90:bf:05:15:e4:2a:dc:60:1f:08:
                    e9:00:77:a6:d3:6e:df:20:75:23:15:8a:ac:c0:07:
                    43:1e:83:c7:bd:50:50:ff:0a:7b:96:18:36:bb:84:
                    36:60:c1:f0:8f:37:47:a1:3c:81:25:e5:fe:3d:ad:
                    06:e9:97:cd:ba:e7:f3:3d:fe:fd:0e:de:c6:f2:28:
                    77:5a:de:1e:23:0a:07:76:6e:f7:fe:1a:3e:de:f5:
                    be:d9:34:80:43:9f:79:89:01:e4:37:21:b4:0d:b9:
                    55:30:4f:fc:ec:ec:a0:48:dc:5e:79:67:15:9c:77:
                    ae:5b:b8:20:52:82:57:1e:b6:96:c0:7a:fe:a0:0c:
                    9a:69:46:87:cf:ed:dc:4f:2b:b1:dc:ce:94:97:e7:
                    5c:02:8e:f0:4d:ed:92:01:0b:8a:73:e8:45:59:7d:
                    d9:52:7c:05:b0:36:15:e5:57:d1:df:f3:c8:24:69:
                    c9:f2:3c:92:d0:95:38:32:d0:a2:69:83:7e:f4:1b:
                    75:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:66:CC:4A:3B:A3:8C:6D:41:4A:40:B7:93:17:98:71:1C:AB:AB:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cf7e221d-6ab2-31eb-8bb1-81f9693b3145.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.177.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:7f:a7:18:d3:02:8b:a9:41:dc:62:6d:bf:b8:c7:8b:d7:0b:
         99:4e:e6:2d:94:88:04:3f:9b:f1:ab:1f:93:85:29:30:40:23:
         79:db:34:26:c4:57:2d:a8:9f:e2:de:22:89:6f:e4:0d:e3:b8:
         9f:3f:f3:60:50:3e:19:4f:dc:14:f7:c0:47:86:76:1f:b5:0c:
         de:31:13:fa:e7:17:06:82:7f:55:9b:a4:13:ba:23:4f:13:2d:
         05:cb:a3:1e:82:c4:77:69:85:d7:0b:31:59:c8:6b:f6:38:9e:
         3e:3b:38:9d:b6:b2:8e:d2:f7:ab:f5:ea:15:73:02:f5:91:ab:
         2e:33:43:0c:ef:72:87:d9:e6:df:25:6a:7b:09:9e:7a:ea:ed:
         01:e8:45:10:45:01:03:45:c6:96:db:42:59:75:4b:cf:83:b1:
         b3:17:a2:d9:47:43:7b:a9:8a:ec:d9:07:73:52:97:a2:5d:99:
         a1:07:17:ae:a0:21:13:f8:68:96:09:4a:37:b2:fb:5c:36:4a:
         a7:d9:be:71:f1:ad:cf:e6:e2:97:6d:86:17:ad:76:a7:bd:19:
         a1:d2:d1:50:8a:52:5f:b9:e4:e6:0c:0c:83:d0:9a:cc:09:a5:
         20:c6:69:a2:eb:77:04:bb:aa:d5:24:9b:e1:87:4b:5a:e4:f0:
         3d:a3:d9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:40:09 2025 by rpki-client