Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/523c1c5b-45fc-3345-b9c8-bd62476a96a3.roa
File:                     523c1c5b-45fc-3345-b9c8-bd62476a96a3.roa (raw, json)
Hash identifier:          d7O0dpUWQJLBNDm5flHFYOYisrEW1n0vhVRtlPPSP5s=
Subject key identifier:   B4:FA:A5:74:39:19:2F:E1:80:EF:DC:D9:2A:E8:68:E3:49:D6:C1:6F
Certificate issuer:       /CN=552db743-b442-4066-8e02-0dcd47471dce
Certificate serial:       010D0C9F432858497AD9B0205782FD5188EC0180
Authority key identifier: EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/523c1c5b-45fc-3345-b9c8-bd62476a96a3.roa
Signing time:             Thu 10 Apr 2025 13:00:59 +0000
ROA not before:           Thu 10 Apr 2025 13:00:59 +0000
ROA not after:            Wed 09 Jul 2025 13:00:59 +0000
asID:                     211373
IP address blocks:        136.175.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7a:d9:b0:20:57:82:fd:51:88:ec:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552db743-b442-4066-8e02-0dcd47471dce
        Validity
            Not Before: Apr 10 13:00:59 2025 GMT
            Not After : Jul  9 13:00:59 2025 GMT
        Subject: CN=7dfef095-82b7-4014-a604-1f074d87df6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:23:dc:fb:28:06:60:d8:c3:d1:d1:21:fd:b3:
                    06:0c:c4:5c:71:e3:8f:d1:b5:03:77:ea:b6:c4:30:
                    8d:21:75:4e:f4:a5:43:f1:83:ee:63:20:cf:ea:a9:
                    37:43:db:43:ad:47:2d:d9:32:cd:d8:69:0a:ec:11:
                    21:f2:d8:19:a7:4a:ef:b9:b7:49:82:99:73:30:10:
                    01:11:38:37:0f:f8:cb:f3:85:42:cc:03:a7:83:51:
                    6d:2e:d7:69:7d:3a:8e:57:9b:2d:5c:79:54:dc:b4:
                    b1:5f:44:00:3c:47:4b:67:1c:ed:89:bc:e6:b9:83:
                    b8:65:b8:c4:cd:60:8d:e3:37:1f:59:12:a6:b0:a6:
                    8a:c8:6c:8e:e5:aa:ff:d5:3b:3c:a7:49:25:81:b7:
                    bb:fe:69:f2:68:07:4f:82:1f:b7:14:5e:ca:42:23:
                    ab:c9:93:f3:81:ad:33:19:6e:17:c3:e2:43:e6:59:
                    5b:09:86:9d:a5:49:a4:7a:c7:77:5b:7d:52:5a:0a:
                    57:1f:3f:af:bf:39:11:98:33:6e:74:81:06:60:e1:
                    2b:9c:91:74:99:c6:9e:73:38:13:f7:40:99:36:8d:
                    2a:23:5c:0c:a3:78:94:fa:e0:93:72:ce:70:9c:13:
                    56:e1:63:66:cf:dd:2f:1c:60:3b:a7:77:d2:0b:8b:
                    f0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FA:A5:74:39:19:2F:E1:80:EF:DC:D9:2A:E8:68:E3:49:D6:C1:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/523c1c5b-45fc-3345-b9c8-bd62476a96a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.crl

            X509v3 Authority Key Identifier:
                keyid:EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:e6:c9:73:d9:27:b8:22:83:f2:53:31:44:f2:4e:31:1b:3f:
         89:8f:72:fe:2f:8f:1b:2d:c5:3b:d5:3c:21:77:6a:79:44:be:
         7e:63:e8:11:5c:dd:35:57:8c:40:6d:92:66:e0:bf:6b:15:0f:
         d8:9c:14:f4:04:bd:72:d2:55:75:ae:61:e3:5b:63:bd:eb:47:
         4d:d7:8a:3f:f6:1b:47:22:33:7f:a9:00:8e:9b:05:0e:c8:14:
         5e:56:dd:6b:cd:ea:83:6a:3f:c1:0a:c0:1b:31:de:f8:4c:9a:
         10:1f:09:c0:10:3f:d5:19:06:4e:5a:93:62:0f:c8:8e:49:c3:
         c8:f7:db:f1:be:7b:44:22:32:d3:c8:b5:7e:9f:87:e1:f4:b4:
         42:84:bc:1f:d8:61:5d:9c:b5:bb:47:ce:bd:2a:ab:f4:f2:22:
         a5:c9:aa:a9:16:d5:9f:a3:63:de:dc:ee:5d:f2:27:0b:f8:65:
         26:8e:11:86:1d:00:e3:96:e4:62:56:22:5f:e3:be:f5:a8:b1:
         91:4e:32:0d:9d:1e:4e:7d:f3:18:97:bd:99:cf:c8:5f:13:28:
         15:62:a8:00:60:71:c6:7e:27:1e:bb:30:2f:3d:2b:ee:83:7a:
         67:e5:61:a0:76:e9:49:e2:3b:be:54:45:4a:06:0b:0f:85:37:
         8c:52:47:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:01:08 2025 by rpki-client