Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/b1d4fba3-ede3-33e2-bcba-4d20996c48d0.roa
File:                     b1d4fba3-ede3-33e2-bcba-4d20996c48d0.roa (raw, json)
Hash identifier:          PsO0t6Juu8L+NMioNhCKdnSfAvj7yiW3JwIZG4dUIKg=
Subject key identifier:   5C:57:66:87:32:AE:56:D9:A8:8F:8B:D5:6D:DC:CB:81:C6:5E:68:B0
Certificate issuer:       /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial:       010D0C9F432858498CFF14909FC28259A4883880
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/b1d4fba3-ede3-33e2-bcba-4d20996c48d0.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     400196
IP address blocks:        208.52.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:14:90:9f:c2:82:59:a4:88:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=253e13ea-07f6-43a0-bce9-65f3b7495909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:29:64:55:7a:3d:31:5b:df:f5:4a:ba:30:78:
                    87:e3:84:a6:d1:26:28:a0:02:37:3f:12:61:05:31:
                    02:74:c3:a4:b0:42:a0:fc:28:34:1d:b6:35:65:e0:
                    63:69:c0:d2:32:05:17:d5:13:99:eb:a5:a9:a7:02:
                    02:09:ea:22:7b:74:45:27:99:21:03:38:ce:6c:ac:
                    f5:20:db:96:cc:44:4d:14:da:64:ba:a3:6b:81:57:
                    92:e2:66:b8:31:7b:f5:5c:86:85:fa:ab:7f:41:a0:
                    5d:c1:e7:01:7c:da:76:58:f7:c7:54:66:8a:37:8a:
                    ce:7c:3a:75:3c:7e:2e:9a:9e:16:b6:26:c1:a6:ef:
                    77:c3:96:37:f6:df:ee:61:b8:df:ff:19:1b:81:f6:
                    ca:4d:17:c6:94:59:81:ea:dd:65:9d:8c:2e:e3:2c:
                    24:a3:26:a9:bf:8b:f9:7d:b5:11:e9:63:6a:61:8e:
                    1d:48:59:c7:76:a1:be:86:25:3d:56:6b:4a:8a:52:
                    b2:b7:36:a5:59:e4:b1:fc:32:ff:d9:4a:19:bb:c3:
                    e3:69:a7:29:a5:e1:14:9c:df:2b:a7:78:74:f9:ee:
                    1c:ed:02:ed:a6:14:7b:26:8f:68:fd:30:dc:93:32:
                    28:53:8e:e0:08:28:7a:66:b9:e3:07:40:74:57:6e:
                    a4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:57:66:87:32:AE:56:D9:A8:8F:8B:D5:6D:DC:CB:81:C6:5E:68:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/b1d4fba3-ede3-33e2-bcba-4d20996c48d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.52.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:ba:e9:22:f5:da:eb:46:6d:4f:ab:5e:28:47:a4:64:ed:f8:
         78:66:c6:70:ef:b7:d8:ff:c4:39:78:48:e9:d5:e0:37:fb:5e:
         8d:a6:d3:d2:1b:e7:47:08:4c:5e:04:eb:0b:4a:df:7b:98:28:
         55:2d:61:19:4a:93:aa:0a:3b:d2:da:11:d3:33:7d:bc:90:a4:
         dd:17:76:c2:e1:50:c2:e7:58:6b:e0:6b:58:5a:23:f8:9e:0c:
         b3:27:a4:d5:30:f0:40:ed:81:4a:e6:9f:cf:b5:8b:ee:8d:db:
         f4:08:07:b8:a4:70:8b:91:3c:aa:f5:86:db:8e:73:5b:8c:1f:
         45:df:61:f0:c0:7a:55:b3:eb:2d:92:d5:86:a8:aa:63:df:6e:
         bc:54:8d:7e:15:23:6f:64:2c:56:85:eb:2e:8d:a3:ce:5b:ce:
         14:f1:8a:1e:df:32:ce:dc:f2:8f:37:bd:eb:22:9b:e2:d1:e4:
         a4:71:70:5a:40:f5:b9:16:6e:19:b7:11:05:cd:6f:52:c8:51:
         77:bc:e5:52:56:6e:5a:44:18:95:f2:8b:36:50:11:d4:2d:59:
         d0:bd:f5:56:49:7e:17:12:ef:dd:ef:91:97:c3:96:d8:b4:fe:
         79:49:22:98:9d:69:c7:fc:66:e1:1d:27:e1:9c:17:03:a1:d0:
         8a:42:af:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:45 2025 by rpki-client