Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/a2a2fca6-4c51-39b2-8737-a4ac98592acb.roa
File:                     a2a2fca6-4c51-39b2-8737-a4ac98592acb.roa (raw, json)
Hash identifier:          xMuuBw9SR+p9dBL9sSgQrc7AFm/+XiYVLv1TvPG3y6k=
Subject key identifier:   6B:A9:1C:FD:22:AD:28:A4:DC:DE:47:0D:05:9E:59:72:23:BC:38:C0
Certificate issuer:       /CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
Certificate serial:       010D0C9F432858498CFF18CCC901F08F48700700
Authority key identifier: DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/a2a2fca6-4c51-39b2-8737-a4ac98592acb.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     14579
IP address blocks:        167.80.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:18:cc:c9:01:f0:8f:48:70:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=525e9071-869e-4d31-b3ab-7b0009e398f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:91:0e:2f:24:cf:f7:9d:84:e3:13:ef:03:58:
                    50:b5:8f:6a:93:d1:fb:75:2a:f0:1b:19:7d:35:61:
                    78:79:ac:24:29:9f:85:a4:01:10:b2:51:96:67:fc:
                    e4:26:9e:c1:ab:be:ea:fc:49:67:d8:3a:34:d0:ce:
                    6f:42:ea:09:be:d7:e6:6c:fe:92:43:a5:bc:93:d8:
                    1a:5d:83:89:e2:4a:62:48:ef:6e:df:21:89:f2:5f:
                    6b:9b:f3:66:78:52:20:09:cd:20:d4:e3:3c:78:21:
                    e3:12:00:70:e9:93:70:f0:81:f1:bf:84:45:75:35:
                    f5:81:24:9f:fa:1e:6c:e5:0e:49:67:c5:12:65:b4:
                    56:68:2d:d7:b8:da:95:1c:1a:97:7a:fd:3b:46:b9:
                    89:02:8d:3c:6e:4a:b3:26:1b:b8:70:39:ca:bf:39:
                    83:e4:cb:59:3e:ee:4f:09:ae:34:04:c1:ff:87:d2:
                    0a:f0:21:d8:1f:c8:80:48:fa:ff:a3:14:57:5b:34:
                    c5:ee:8f:e7:53:e4:05:81:1a:0c:35:08:b9:73:aa:
                    d3:95:49:7e:c8:3a:19:3e:6f:b2:6a:08:02:58:5a:
                    6a:5d:11:b6:33:6a:ef:86:a5:df:00:31:36:41:0f:
                    10:8a:f5:14:e3:51:75:39:e3:1a:19:8c:0c:59:61:
                    66:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A9:1C:FD:22:AD:28:A4:DC:DE:47:0D:05:9E:59:72:23:BC:38:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/a2a2fca6-4c51-39b2-8737-a4ac98592acb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl

            X509v3 Authority Key Identifier:
                keyid:DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.80.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:a3:9c:69:74:f4:6e:1b:0c:6d:ea:82:d8:55:b4:8a:35:15:
         80:c7:f0:00:8a:f0:38:eb:af:92:06:77:98:6a:ce:10:4e:14:
         a1:d1:2d:cd:9b:e3:c9:6b:95:2a:de:22:80:51:7f:e9:40:97:
         6f:11:73:4f:c4:48:aa:5a:7d:70:b4:4e:9c:35:21:8d:1a:2b:
         e9:f0:9c:c4:d9:2b:e7:99:a4:7d:d1:ff:cc:a3:d8:c4:c9:ea:
         8a:44:87:49:38:44:19:5c:3f:60:76:68:47:34:c8:c1:2a:3d:
         aa:c6:75:59:39:e7:20:9e:07:13:91:88:0d:22:70:b0:67:5c:
         f6:a5:8b:25:fb:e5:bc:92:fa:03:14:40:5c:ab:ec:ac:15:c9:
         26:df:fe:6d:d3:c6:51:98:38:68:4e:86:15:7f:c4:82:8c:72:
         4d:d1:31:74:5a:40:c4:12:12:5e:d1:8e:45:f4:ae:fc:59:17:
         36:45:60:85:65:4d:67:b3:55:3a:d0:24:5b:69:c0:65:f7:b8:
         83:fe:4e:0e:ca:01:b3:a0:e5:6a:e6:ad:e5:56:36:fc:0b:aa:
         5c:f6:92:33:28:be:d6:f2:79:a4:43:38:bb:6f:40:fc:24:44:
         25:b6:23:b6:31:26:6e:f4:54:96:c5:60:39:64:39:80:17:23:
         0e:b0:69:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:57:25 2025 by rpki-client