Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/5ee3aaf7-3b01-3ece-a669-fe1de5dd9a44.roa
File:                     5ee3aaf7-3b01-3ece-a669-fe1de5dd9a44.roa (raw, json)
Hash identifier:          B5nGGGaPXjnJFswllRjHWwxzTXdNIgJVnY8CObFdNRk=
Subject key identifier:   7A:92:B3:DB:F9:B2:E2:50:85:DE:CA:6A:13:A8:B8:7C:A2:30:DE:53
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285849F17FB909C20B89979E6C8500
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/5ee3aaf7-3b01-3ece-a669-fe1de5dd9a44.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     18960
IP address blocks:        24.38.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:b9:09:c2:0b:89:97:9e:6c:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=8c2776c1-0d3d-4c77-9039-a71cfde603d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:cb:52:81:26:8e:f3:4d:80:06:3a:7c:4d:73:
                    f5:13:64:47:11:1e:6e:c6:ea:6e:f7:ae:c3:7b:12:
                    ae:45:88:44:cc:73:57:95:fd:4a:16:0e:68:a3:ed:
                    ad:6a:69:38:61:61:01:e7:ed:5b:a1:47:b0:f2:a2:
                    8c:60:7b:cf:2f:b4:07:09:96:fa:0d:41:bc:b4:c0:
                    42:4e:66:54:25:76:04:fa:f9:38:ca:26:fe:bc:f3:
                    e1:38:34:74:b8:56:38:a4:bd:3b:3a:95:31:09:38:
                    80:1f:21:55:8f:45:7a:88:fc:26:b9:b5:38:e4:9c:
                    f3:b5:43:73:49:0b:d1:21:ff:5c:54:4c:c5:a5:97:
                    28:0a:c9:31:ab:04:52:d2:32:35:9a:14:07:99:f4:
                    66:7b:e1:8f:46:b3:07:38:00:d5:53:75:e4:c8:6c:
                    29:81:94:1c:91:0c:dc:c3:c2:a2:80:e9:e8:cf:b1:
                    ca:3c:18:01:bc:db:37:54:0e:8f:70:18:d4:02:a6:
                    6b:5e:e8:69:00:e5:ec:9e:67:66:cf:4e:41:01:00:
                    79:69:60:5a:79:8d:44:12:c2:6f:d0:72:87:be:31:
                    36:7a:ea:78:95:a4:26:86:96:8b:aa:c6:1e:a6:a4:
                    45:dd:2d:14:97:9e:f2:5e:94:92:3a:a8:97:b3:8f:
                    20:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:92:B3:DB:F9:B2:E2:50:85:DE:CA:6A:13:A8:B8:7C:A2:30:DE:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/5ee3aaf7-3b01-3ece-a669-fe1de5dd9a44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.38.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:21:f9:23:47:0a:3c:fa:cc:2e:05:38:78:ef:a8:61:27:7c:
         be:9f:e1:73:de:b2:2e:9b:51:68:3a:54:f5:bd:d8:dd:80:ed:
         6d:90:de:11:ec:1d:70:c8:5f:c2:56:9e:ec:bf:6f:17:29:0c:
         ec:63:c3:e9:0f:37:72:68:08:bb:cf:25:61:15:9f:07:49:85:
         4b:b9:99:80:6e:65:e1:64:ba:bd:83:6d:26:8c:de:49:4b:8f:
         75:c5:27:67:e5:90:47:c8:f6:a9:e8:a7:24:9f:f2:98:fe:6f:
         d9:da:86:94:cc:39:54:cf:6a:30:9e:79:90:65:68:5f:3e:01:
         37:05:5e:b4:8f:0d:2d:cd:80:ad:d7:5a:c6:a7:4a:9a:5f:e6:
         c7:f4:99:bc:68:d8:62:cd:f5:84:bc:8b:c2:54:e9:86:68:5a:
         55:54:96:1c:30:b9:f7:35:c5:a6:fa:89:62:14:b3:7c:dc:b8:
         a7:6a:1a:8e:51:6a:d0:1a:70:fe:4f:b0:57:0d:f5:62:58:7c:
         75:dc:54:ab:e0:7b:ca:94:07:ed:c7:37:89:fd:62:e7:f1:ee:
         26:30:d6:b8:2d:97:45:2e:5b:50:ea:d9:98:7c:b5:c1:1c:3f:
         3b:74:e2:81:0a:00:f3:cb:02:e9:e7:05:cf:d9:7f:f9:67:0d:
         59:14:ac:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:47:23 2025 by rpki-client