Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6c42378c-2b90-319e-9292-aebd96d35ec3.roa
File:                     6c42378c-2b90-319e-9292-aebd96d35ec3.roa (raw, json)
Hash identifier:          tlHjEBpcI/6EprcHI7XHYTWeJuZsHCqO+tTEvAaAEmg=
Subject key identifier:   B2:76:9C:8F:10:34:CF:51:CA:0D:F4:A2:52:49:89:72:7C:CC:8B:64
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285849955F17BD58E2A45083B35C40
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6c42378c-2b90-319e-9292-aebd96d35ec3.roa
Signing time:             Sun 20 Apr 2025 01:00:47 +0000
ROA not before:           Sun 20 Apr 2025 01:00:47 +0000
ROA not after:            Sat 19 Jul 2025 01:00:47 +0000
asID:                     852
IP address blocks:        208.181.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:95:5f:17:bd:58:e2:a4:50:83:b3:5c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 20 01:00:47 2025 GMT
            Not After : Jul 19 01:00:47 2025 GMT
        Subject: CN=26d77f05-c710-4918-87b1-191bd7c4c4cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:45:56:11:e1:6d:1f:5c:2b:60:c6:b6:d3:b2:
                    7b:15:51:8d:c2:94:3c:59:df:60:61:85:3b:c4:79:
                    86:da:5b:6e:17:de:be:70:53:2a:43:52:ae:34:94:
                    5f:6d:7e:a2:1e:db:5f:c1:42:d8:a2:af:a5:ef:b8:
                    11:00:f4:82:a1:78:8f:22:c5:da:ad:4e:a2:5a:9e:
                    10:55:0d:79:25:66:4c:4e:83:ef:28:12:02:ab:8d:
                    ee:3a:0b:d7:05:7e:a8:ce:9b:1c:53:3e:0f:c2:41:
                    58:04:09:66:d9:e2:76:a1:72:b0:59:cc:a0:eb:e5:
                    33:b1:10:92:4c:1e:23:a1:36:c6:25:a4:2a:d0:68:
                    af:ed:44:bf:f0:4c:76:db:f2:62:6e:e9:bf:dc:a3:
                    73:ad:50:c5:91:8e:51:81:9b:55:42:38:72:a5:39:
                    59:47:51:79:f8:ce:7e:e5:f8:9b:2f:a7:a9:d3:38:
                    38:b1:f5:3a:15:de:29:cc:25:b1:3c:40:14:e2:a3:
                    1a:12:b5:3d:39:6e:a1:b6:f5:79:34:c3:ca:b7:b8:
                    9f:35:14:45:d9:64:93:e6:0f:31:1b:7e:b2:ba:35:
                    fb:dc:82:ee:ab:a3:f2:75:9f:1d:cc:29:e7:45:07:
                    b2:ce:4e:4c:50:ad:df:bc:b4:5c:77:be:0b:f2:ae:
                    88:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:76:9C:8F:10:34:CF:51:CA:0D:F4:A2:52:49:89:72:7C:CC:8B:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6c42378c-2b90-319e-9292-aebd96d35ec3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.181.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:bf:a6:3d:86:4d:73:00:11:5e:ef:d8:2f:a1:1f:c5:e7:3b:
         29:e4:58:b8:82:40:7c:0e:7a:35:a0:cd:1e:07:5f:b9:0f:a5:
         4c:70:f6:d2:94:ac:45:22:26:a8:fa:6c:0b:23:fa:63:76:05:
         69:e0:c7:4e:4b:d5:c3:1e:96:89:c8:92:f4:b7:26:8c:7c:7b:
         5b:e4:ca:93:8d:14:af:97:ec:4d:74:f8:46:10:c2:47:0a:14:
         62:93:5b:9a:b9:0f:63:8c:e4:04:90:42:28:1c:74:fb:9c:b4:
         a6:4f:ed:bc:4a:4b:c9:c0:c8:a7:c0:5b:e0:03:b7:eb:b7:2f:
         c5:09:cf:46:d9:e0:47:4e:e9:f5:fc:14:f8:e6:d9:0c:d3:b0:
         0d:9e:50:1d:f0:7e:38:92:5f:ef:ec:07:ed:99:a9:51:a1:8b:
         8b:ae:35:fc:c8:c8:98:99:a5:70:6e:33:37:cd:e9:01:74:19:
         c0:b7:2d:35:91:7e:b5:c5:a8:5a:77:60:be:f8:d2:90:48:54:
         c5:28:39:df:65:1c:5d:dc:a0:f7:2f:68:ab:e4:e3:c9:6b:4f:
         31:51:e9:5a:1e:81:fa:d4:c1:56:e2:4a:39:7c:f2:3f:18:b0:
         71:ee:66:e0:e4:60:ad:53:05:e9:f2:78:de:77:bf:c5:73:b7:
         d1:8a:2a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:16:15 2025 by rpki-client