Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/0cec7da6-a705-3b88-a2b7-aceb9de763f9.roa
File:                     0cec7da6-a705-3b88-a2b7-aceb9de763f9.roa (raw, json)
Hash identifier:          jo78wtyuXrO2LYaMhXXQoGFLSsBvVfg1mbbX7mg3z9g=
Subject key identifier:   8D:55:A5:29:49:F2:CD:89:96:B0:66:8C:A3:8D:25:8C:6A:F7:96:6B
Certificate issuer:       /CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
Certificate serial:       010D0C9F43285849393E735386A465D2D6535CA0
Authority key identifier: 8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/0cec7da6-a705-3b88-a2b7-aceb9de763f9.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     26057
IP address blocks:        168.238.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:73:53:86:a4:65:d2:d6:53:5c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=461984d3-dfc9-4e77-aeea-a066ba2f90bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fd:93:f7:38:90:ec:9e:a8:23:e9:c6:98:cb:
                    6e:39:81:e6:f2:fa:f5:56:0c:87:b5:2a:6b:e7:b1:
                    d3:17:d5:fc:3b:35:a2:48:b9:11:46:58:5e:44:42:
                    cd:34:f9:c0:92:af:20:7d:e2:28:39:b0:e1:25:ad:
                    21:70:45:cf:ba:84:18:27:db:52:77:f3:34:2a:bd:
                    60:d1:e6:3c:7c:26:77:92:8a:00:c7:d2:3a:b8:22:
                    3f:7d:4c:e1:31:9d:1c:73:94:71:4c:94:86:ef:ff:
                    c6:3a:f9:95:f1:81:cc:96:76:2e:97:1d:4b:a4:4c:
                    28:9b:fb:46:6a:5d:23:20:3d:15:4c:0a:45:ee:c0:
                    95:7f:47:4b:23:2d:4e:d6:f2:1b:5c:c3:0f:ef:2f:
                    5b:7b:69:6d:7d:10:b5:63:f5:e7:ef:cc:21:1d:9d:
                    8b:d6:33:f3:28:87:41:1a:74:d5:fd:5a:fa:55:21:
                    f2:a2:bc:7f:dc:7d:28:63:17:ab:38:4c:a5:b9:af:
                    4f:4a:88:c0:bc:f2:d5:78:0f:0a:ef:72:74:5c:95:
                    97:9e:9d:9a:cb:d7:ab:44:35:4b:f7:13:da:96:32:
                    fe:bf:78:91:e8:9c:04:b6:dd:03:d3:fa:67:bd:f6:
                    b9:38:cd:e6:fd:39:43:ab:4c:1a:99:33:64:68:3e:
                    2f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:55:A5:29:49:F2:CD:89:96:B0:66:8C:A3:8D:25:8C:6A:F7:96:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/0cec7da6-a705-3b88-a2b7-aceb9de763f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.crl

            X509v3 Authority Key Identifier:
                keyid:8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.238.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:35:b5:52:a0:a9:e2:5c:29:4f:ab:de:e6:86:dc:0b:96:6d:
         66:74:1f:a1:6f:fe:96:ad:bf:61:a3:e4:a4:36:86:ee:45:5e:
         7c:7a:4b:be:43:09:73:04:fc:74:29:43:56:e6:fe:68:c8:a0:
         cb:46:35:d1:b2:32:5b:55:dd:d4:7a:64:27:d7:3a:0c:14:22:
         17:05:e1:e9:5e:35:de:49:3f:19:50:2e:9c:e4:b1:fc:72:1c:
         ee:2b:85:6f:dc:aa:ab:70:53:31:88:65:2d:12:e6:0c:e4:79:
         02:f4:c0:e7:95:1e:ef:b0:0a:df:4d:b1:d2:f9:be:90:37:3a:
         18:32:0e:53:12:98:a0:5d:83:09:f2:ec:62:65:68:bc:66:46:
         f4:ea:7a:64:10:05:05:2d:35:11:b3:80:97:eb:58:48:4a:7b:
         cb:1f:8d:f8:a9:04:b4:79:d2:0f:04:aa:d0:0f:f0:04:8f:63:
         bd:bc:35:a4:dc:f9:f4:1b:37:16:bd:24:8f:8a:27:f0:fe:96:
         84:42:ec:1e:0c:81:8c:31:d4:6e:f2:ea:aa:80:90:8c:36:27:
         ba:42:ea:51:a3:d4:00:f1:07:97:6f:fb:f9:d4:3e:89:f3:26:
         17:a2:81:5d:6c:d3:af:a0:f0:14:93:01:9a:34:d6:6c:41:53:
         2a:b9:3e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:06:06 2025 by rpki-client