Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6fbb6b5d-3be3-3154-a556-543df2e9ed2b.roa
File:                     6fbb6b5d-3be3-3154-a556-543df2e9ed2b.roa (raw, json)
Hash identifier:          mal8C9v/coj5isNWxmOMabHhk0oA/blUs+dr1zF4bv0=
Subject key identifier:   C4:8C:50:91:71:C7:2A:EE:BD:13:61:67:DE:F2:E4:E2:D0:25:C6:14
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285849955F183275679952C0D65A80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6fbb6b5d-3be3-3154-a556-543df2e9ed2b.roa
Signing time:             Sun 20 Apr 2025 01:00:47 +0000
ROA not before:           Sun 20 Apr 2025 01:00:47 +0000
ROA not after:            Sat 19 Jul 2025 01:00:47 +0000
asID:                     852
IP address blocks:        137.186.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:95:5f:18:32:75:67:99:52:c0:d6:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 20 01:00:47 2025 GMT
            Not After : Jul 19 01:00:47 2025 GMT
        Subject: CN=fd0a0bf9-8d59-4da7-8ac3-03615a70b0dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3d:c8:5d:79:45:e3:b8:f2:f5:5b:b0:ee:b1:
                    4d:84:fb:14:04:5e:99:4e:36:62:72:49:2d:c2:c2:
                    0f:1c:bf:de:b4:01:24:46:de:fa:ae:a5:b4:e9:21:
                    45:37:ed:96:c2:5a:6f:01:b6:ee:9c:64:b9:63:01:
                    dc:99:a6:ba:01:fa:e8:4b:da:2b:dd:ff:44:a6:a4:
                    c9:a7:c7:03:81:d8:e6:f3:3d:6e:9c:ca:a0:84:b0:
                    16:17:4c:10:57:02:b4:69:92:cd:fd:fd:5f:85:1f:
                    ad:92:48:e6:d1:5e:d1:cf:3c:3b:04:3c:bd:d5:73:
                    f2:b9:78:1e:cc:ff:2c:d6:70:60:e4:85:ec:bb:d7:
                    b8:91:19:71:31:76:66:4f:7b:9b:1e:ce:6f:b5:0c:
                    25:24:15:23:c3:44:b1:52:98:5f:7a:a7:5a:98:df:
                    87:60:5c:7b:79:72:aa:b1:ad:09:19:33:3e:a4:ca:
                    09:57:de:bc:56:2c:f7:a7:87:0a:7d:5e:3d:19:fa:
                    4d:42:b8:d5:64:3b:fd:ae:86:ce:31:91:8c:02:fe:
                    b7:ff:33:14:00:1b:8c:9f:90:ce:34:cf:e5:9f:ee:
                    71:61:8f:e8:17:8e:b6:9a:a0:d0:c7:1d:1a:1c:cb:
                    6a:af:d7:9e:bb:f2:31:9a:5b:9d:5b:5f:59:5e:f0:
                    ff:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8C:50:91:71:C7:2A:EE:BD:13:61:67:DE:F2:E4:E2:D0:25:C6:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6fbb6b5d-3be3-3154-a556-543df2e9ed2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.186.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:c6:dd:e0:cf:fb:f1:4b:1d:6a:2e:b5:7c:12:4a:36:f7:5e:
         1a:47:c6:08:4b:93:25:88:43:7d:34:b5:11:84:c7:a3:22:11:
         c2:50:c7:75:22:39:03:92:fe:d9:5a:3e:6f:4b:40:5b:f9:5c:
         87:f6:e8:79:19:f5:28:6d:d5:34:00:09:85:c9:83:13:d6:52:
         98:0e:0a:5b:7d:fc:ce:20:7f:4d:d6:f9:e3:e2:6d:ae:db:ee:
         31:6e:6e:44:b2:4b:88:d6:cb:58:25:a4:da:75:8b:39:85:b4:
         11:b8:4d:03:84:0e:45:2f:3b:71:fd:3f:e6:7a:a2:60:b0:d0:
         ed:c6:a6:af:1c:7b:10:65:a5:2f:fc:83:22:a6:00:67:8a:55:
         fa:4d:b5:a5:f1:ce:a9:13:48:f0:9b:43:f2:81:f6:25:72:f6:
         8b:e2:18:7a:5e:ac:b9:1f:bd:da:8e:e6:ef:65:29:e8:98:ed:
         b7:eb:ac:02:b7:27:72:82:49:7e:50:06:6b:04:a8:5f:fb:aa:
         c4:eb:f0:fb:b1:5b:8c:28:45:0a:51:20:fe:a4:97:27:77:59:
         e1:a1:20:5b:04:ce:3f:63:f3:02:29:41:e4:89:59:30:d9:1c:
         b7:93:77:cf:17:6d:48:42:df:29:a1:a3:78:b0:d6:4d:c5:44:
         82:06:6c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:09:56 2025 by rpki-client