Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/dde2ebd1-37f4-3a48-811f-c139ff13a7a0.roa
File:                     dde2ebd1-37f4-3a48-811f-c139ff13a7a0.roa (raw, json)
Hash identifier:          UwGOtjqekXaze1BfZ0Qt+tFjWXZIL0fgHvic16BaV2Q=
Subject key identifier:   E5:63:83:B5:26:82:7E:F0:A3:38:81:72:D2:C2:94:3D:10:FE:B6:16
Certificate issuer:       /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial:       010D0C9F43285849A089CF4CB9C1FB49D8473080
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/dde2ebd1-37f4-3a48-811f-c139ff13a7a0.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        159.183.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:cf:4c:b9:c1:fb:49:d8:47:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=5eaf1496-ceef-4e1f-a8ac-c1f9d2405eeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:02:82:22:05:69:31:7f:96:a9:a7:42:1e:e2:
                    84:3b:5b:8e:ab:96:fd:74:0d:b6:8b:42:f9:b5:59:
                    41:6c:21:54:17:20:99:35:e4:24:1d:36:e8:99:d8:
                    d8:d2:39:69:ee:93:ac:be:8a:e3:a7:87:99:f8:54:
                    fb:7e:a4:75:dc:de:6b:9d:d9:ac:bd:c1:f1:d1:b8:
                    21:05:f2:c1:07:45:0d:9e:0a:ff:86:a5:37:50:b3:
                    fd:42:4c:0b:d5:8e:a5:1c:37:a5:46:dd:4e:cb:df:
                    5c:67:8b:f8:87:7e:76:cd:8c:09:b6:da:cd:be:06:
                    2f:e7:c1:ba:c2:b8:00:59:91:92:b3:90:c3:1b:e8:
                    ce:e3:23:e2:ac:22:42:be:90:af:d4:14:5c:42:ec:
                    46:f2:a8:27:5c:7c:e9:a0:a1:52:32:39:6e:b9:a8:
                    c8:df:46:a5:d0:d1:5e:9c:3b:be:7d:23:c6:17:82:
                    76:69:c9:7a:42:4b:db:5d:0f:08:a2:49:96:43:22:
                    2f:12:6d:39:36:1c:70:cb:cb:70:22:e9:e4:27:84:
                    65:74:ba:32:29:0f:0b:cd:98:21:9b:fb:26:be:9d:
                    03:3d:2f:30:e6:d9:ff:a7:da:87:c5:3e:b4:c9:14:
                    15:e8:94:d9:b0:0d:96:1f:3e:d7:03:d4:e8:44:5d:
                    2e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:63:83:B5:26:82:7E:F0:A3:38:81:72:D2:C2:94:3D:10:FE:B6:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/dde2ebd1-37f4-3a48-811f-c139ff13a7a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl

            X509v3 Authority Key Identifier:
                keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.183.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:28:2b:17:ac:6f:5b:a1:d8:ab:76:89:3d:54:53:74:36:47:
         f4:9a:35:04:4e:df:75:a7:3d:9a:c9:46:c8:af:1a:18:34:0e:
         4a:c6:ba:22:db:b9:18:57:a5:4e:56:a6:1e:f1:ae:b8:a3:5b:
         9e:e3:87:8e:22:4b:51:5b:05:fd:65:58:1d:19:90:43:a5:e4:
         d3:bc:61:08:ff:c9:a6:61:59:66:5f:c1:97:10:69:9d:fa:25:
         04:b7:cc:e6:45:69:ec:94:e1:47:46:e6:ad:6f:3c:f0:0a:dc:
         e8:ec:22:86:95:f5:b6:f2:83:45:31:ee:96:a1:45:2e:ee:92:
         04:06:84:b1:be:9b:80:db:4f:19:10:d5:87:c4:d8:94:85:2e:
         00:dc:11:9c:45:b2:d1:10:17:a1:d1:be:09:18:62:40:4c:13:
         49:1e:51:4a:d9:0f:79:c9:ae:c9:bb:a2:8e:36:25:d2:6d:f7:
         5c:be:0f:2a:57:96:34:04:01:fb:ca:b2:94:3b:aa:59:04:16:
         52:a6:22:29:df:e6:b7:ce:d5:60:0b:1b:88:1f:df:96:b3:00:
         e5:7a:3a:79:66:d7:21:fb:59:ba:83:90:e5:5f:74:49:f7:f2:
         80:ea:c8:d8:6f:bc:ca:f6:f2:12:a1:07:df:c3:98:c3:cc:63:
         a7:1c:47:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:02:48 2025 by rpki-client