Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/1568ffa4-448a-3377-932d-fa759841f527.roa
File:                     1568ffa4-448a-3377-932d-fa759841f527.roa (raw, json)
Hash identifier:          5VE04jbk+n3rBAm7l5IkKKvPd505KtdOMGWLh/gIbhE=
Subject key identifier:   91:F8:3D:17:95:79:29:19:B9:10:52:36:01:F1:54:A5:17:78:FE:D6
Certificate issuer:       /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
Certificate serial:       010D0C9F4328584AC016343F940B136AA9FF7380
Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/1568ffa4-448a-3377-932d-fa759841f527.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     36445
IP address blocks:        205.178.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:34:3f:94:0b:13:6a:a9:ff:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=14e7b00d-d947-44b2-aa52-0a62a9916df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:15:1e:a3:4a:83:0d:63:b6:f3:16:90:f4:1d:
                    68:7b:0d:0b:7f:e5:02:3d:f3:d1:11:e6:33:bd:e0:
                    ca:b3:2c:27:48:88:52:15:eb:27:e1:19:91:42:47:
                    6a:91:da:43:8f:7e:1b:73:ee:40:e2:8c:8f:e7:74:
                    fb:62:8f:4e:2a:35:94:91:00:28:d8:eb:bb:02:d7:
                    f6:83:33:e5:32:eb:0d:f4:b5:62:45:ad:23:a1:c0:
                    c2:de:ae:52:df:e0:ec:1b:d5:21:24:34:ec:18:67:
                    ab:30:05:81:68:94:6a:7c:10:f4:d3:2b:04:e6:a3:
                    7c:31:66:74:2a:55:f2:37:d7:1f:bb:d1:d8:87:61:
                    45:1e:47:ee:06:e0:33:de:06:16:a6:c9:cb:14:03:
                    e4:d5:27:75:f3:d3:54:86:fa:87:be:df:e1:db:a6:
                    5b:a7:7c:42:62:fe:1d:3a:82:2e:2a:95:52:35:1e:
                    28:13:11:00:f7:47:8e:44:7a:a9:12:1f:be:8c:e1:
                    72:d9:f3:87:0e:c1:ca:b2:f6:ed:78:49:c8:66:0e:
                    79:4a:ec:10:73:3e:87:fb:49:b1:d7:f7:e1:bf:75:
                    6a:f1:4b:a9:9d:45:db:eb:b2:ee:1d:9e:c5:97:37:
                    44:0d:06:0d:8f:60:3f:9e:5e:64:fa:72:a4:56:01:
                    71:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F8:3D:17:95:79:29:19:B9:10:52:36:01:F1:54:A5:17:78:FE:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/1568ffa4-448a-3377-932d-fa759841f527.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl

            X509v3 Authority Key Identifier:
                keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.178.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:1a:dc:82:5c:9c:9c:03:8e:54:98:7d:2a:ab:22:8d:1b:ff:
         bc:ee:36:c6:92:1b:c6:26:89:8a:76:31:7a:bf:a4:31:d4:80:
         f4:fb:da:43:39:5a:ca:82:be:d6:12:6c:b8:13:63:3d:a3:86:
         fa:d2:2f:1b:e4:ea:81:9a:43:16:dd:98:88:03:9d:63:b8:fd:
         cc:02:58:2c:6c:1b:64:33:bd:a4:26:a9:56:2b:1c:01:8a:f5:
         29:73:33:57:6e:17:50:ea:33:a9:45:a3:9a:06:fb:6b:8a:7b:
         d9:f8:bf:5f:62:6e:2a:7d:59:6b:c8:24:be:01:45:11:27:1f:
         1c:3e:00:08:b5:81:41:9c:e0:fc:43:2b:42:20:ea:04:98:16:
         64:e3:56:87:10:ac:06:44:b3:fa:f3:98:53:27:a5:ea:e6:ca:
         81:4c:e8:ef:36:7b:6a:45:65:d4:30:41:f2:21:39:4c:d3:1e:
         e3:cd:ec:53:cd:0f:35:73:95:b5:bf:c6:61:b8:a5:c9:a3:ad:
         5e:3b:3a:f0:86:63:3d:4f:0a:20:e3:12:ab:86:f9:d1:fa:24:
         1d:8b:73:2e:af:ef:2e:60:3e:9f:64:fa:90:c2:e0:40:a9:db:
         8e:11:b3:7d:2d:7c:c5:c2:99:7c:1e:31:7c:1e:54:40:9e:49:
         bf:8f:97:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:01:04 2025 by rpki-client