Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/2fd0b6ea-4777-3bbd-82b6-5b560a67dd1a.roa
File:                     2fd0b6ea-4777-3bbd-82b6-5b560a67dd1a.roa (raw, json)
Hash identifier:          +/j3fCTV7Bd9XARK0FDn2N99+vY3eSdAmL/V4m1szRg=
Subject key identifier:   0C:DC:0B:F5:51:0B:30:F4:45:A4:91:ED:2E:5A:2D:4C:05:1F:75:57
Certificate issuer:       /CN=57823265-9949-4030-be09-5aebdf77ae5c
Certificate serial:       010D0C9F432858495EEEE83B6F51737417EDADC0
Authority key identifier: 1C:6D:47:DA:B4:8D:E7:E4:D7:89:61:7B:B7:05:BD:DB:14:10:64:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/2fd0b6ea-4777-3bbd-82b6-5b560a67dd1a.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     16509
IP address blocks:        162.249.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/57823265-9949-4030-be09-5aebdf77ae5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/57823265-9949-4030-be09-5aebdf77ae5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:e8:3b:6f:51:73:74:17:ed:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57823265-9949-4030-be09-5aebdf77ae5c
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=aff0f03c-8115-451e-a3a7-cf00eb0271c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:23:2e:1e:97:f2:24:4b:42:b2:e5:79:69:64:
                    f6:03:ee:d3:6d:03:94:1f:17:25:17:d4:86:07:84:
                    9b:eb:9c:34:ca:66:e7:f4:30:63:9c:d0:9c:63:03:
                    83:2b:9f:4d:f5:df:d7:61:ae:aa:95:b0:d5:54:91:
                    7f:7d:76:b9:4c:e9:83:d4:13:00:61:1b:e6:3b:11:
                    af:d0:cd:fd:04:fb:e2:41:a5:13:29:c2:d1:b5:74:
                    de:aa:e1:a9:1a:e7:34:fd:33:a7:bd:fd:53:a0:d4:
                    f2:e9:66:47:7f:64:b3:ea:9f:76:c4:9a:85:b0:5d:
                    5d:35:50:6c:9b:d0:ae:9e:16:58:e1:d7:ff:17:cb:
                    01:7d:e2:c7:58:71:60:12:4e:3c:e7:ff:bd:d6:1a:
                    c7:72:66:ec:fa:6f:d7:af:5b:36:64:06:14:bd:37:
                    45:59:f9:ad:5d:d5:b9:af:d3:1b:7c:51:8c:2e:6d:
                    31:9e:14:90:d0:98:88:a1:6e:ca:8e:03:c5:56:31:
                    b5:5b:82:a9:b0:f9:e2:4d:ba:02:3e:4e:f1:61:7a:
                    66:06:32:f6:82:be:db:50:47:bd:d1:f0:04:c4:d4:
                    fb:08:0e:d7:26:83:00:60:45:6d:45:35:e2:f8:2c:
                    9a:00:75:7a:3b:84:a1:b2:2d:1f:b9:d9:51:35:74:
                    9e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:DC:0B:F5:51:0B:30:F4:45:A4:91:ED:2E:5A:2D:4C:05:1F:75:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/2fd0b6ea-4777-3bbd-82b6-5b560a67dd1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/57823265-9949-4030-be09-5aebdf77ae5c.crl

            X509v3 Authority Key Identifier:
                keyid:1C:6D:47:DA:B4:8D:E7:E4:D7:89:61:7B:B7:05:BD:DB:14:10:64:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.249.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:10:3f:05:98:bf:e9:6b:70:2f:80:6f:bc:55:bd:a5:84:ad:
         a4:87:1e:fd:18:21:92:09:c5:c3:75:18:35:85:91:54:0b:f0:
         3b:f8:c0:23:e6:46:fd:5f:ae:06:fd:23:22:c9:51:30:c5:76:
         b4:07:0b:7a:7c:7c:2e:a0:86:b3:ba:aa:df:99:d7:51:3e:0a:
         ce:cd:7f:34:1d:2e:66:65:8d:ce:b2:33:f1:f0:83:0a:73:72:
         79:60:ae:75:5a:34:a2:b0:8b:b2:01:a7:66:79:60:43:92:94:
         87:85:a3:90:d5:75:70:d4:97:22:e2:78:f9:c9:b9:26:0e:67:
         0d:e4:af:17:43:d5:14:7e:0b:1d:6e:b7:fc:e5:8d:76:15:8f:
         07:46:d4:29:f6:09:13:fa:06:9f:cb:e7:0a:eb:bc:10:e2:23:
         6a:f9:ce:7c:78:33:c7:4f:77:0f:2b:15:d6:90:31:ce:bc:97:
         c8:d8:94:f6:c7:c8:c4:1c:cd:89:55:5b:b4:57:60:cb:9c:23:
         80:a7:bc:a2:a3:c3:43:36:7c:1b:f5:3a:3e:8b:0e:74:52:f1:
         d0:c9:25:10:d0:ac:16:75:01:e8:46:f1:5a:53:34:d2:e2:59:
         ca:34:d8:1c:ea:cc:79:13:e7:b9:27:99:b6:d4:7f:d3:dd:65:
         6a:a0:69:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:18:06 2025 by rpki-client