Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/ec8ade42-f384-3872-bf6b-790c544fbeca.roa
File:                     ec8ade42-f384-3872-bf6b-790c544fbeca.roa (raw, json)
Hash identifier:          nz7PISQtVs1RZDWDPjAfijSroKVe0mGXufLQDXz14Ys=
Subject key identifier:   E3:EC:EF:F2:DF:A6:86:40:F7:07:06:DC:98:84:AE:E4:52:AE:0D:6F
Certificate issuer:       /CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
Certificate serial:       010D0C9F43285849F17FC00E4C6B1E7A381DD280
Authority key identifier: DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/ec8ade42-f384-3872-bf6b-790c544fbeca.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     14579
IP address blocks:        167.80.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:c0:0e:4c:6b:1e:7a:38:1d:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=e381bf8b-a1d2-4ece-b27e-62cbc5bf0878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9a:fd:18:44:76:00:22:08:05:65:db:87:16:
                    55:db:bd:26:95:50:4f:50:fa:f7:74:d8:13:8b:9e:
                    2a:1e:db:d9:1f:03:a3:5c:7b:e5:49:76:f8:0e:03:
                    c0:83:b4:95:80:9b:d4:74:f4:67:79:49:07:1d:52:
                    58:43:e2:f0:ad:bf:0b:ec:1f:e5:c2:de:1c:75:e9:
                    d4:6a:e8:e4:c1:1b:01:55:53:81:08:9d:a7:3c:65:
                    ec:a5:fe:ef:2d:39:0f:a9:b2:cb:0c:8c:0d:b2:55:
                    5b:02:41:5a:5a:a4:3e:b3:ab:db:cf:9d:b5:e9:5c:
                    9c:a2:8e:7c:c3:a3:6e:0c:db:ff:0c:dc:d7:ec:2f:
                    e5:a2:51:f1:0d:8c:f4:67:d2:61:87:0e:0a:c5:7d:
                    1b:ed:62:ca:b9:85:82:52:e8:7a:dc:78:02:84:7a:
                    ef:da:70:94:90:db:3f:db:39:54:40:cb:11:87:0e:
                    69:a0:7a:0f:19:69:83:7e:e8:de:fa:ef:d5:c8:91:
                    47:ce:b0:83:1c:79:ca:72:68:92:e5:b0:cb:4c:07:
                    14:bc:3d:8b:bd:e9:9d:d1:9b:e5:45:70:a1:7b:9e:
                    bf:70:25:a2:a6:8e:2c:ae:f7:bd:27:51:c0:56:f6:
                    c1:af:c2:fc:01:97:c6:2a:ea:54:42:b2:12:c6:ad:
                    53:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:EC:EF:F2:DF:A6:86:40:F7:07:06:DC:98:84:AE:E4:52:AE:0D:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/ec8ade42-f384-3872-bf6b-790c544fbeca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl

            X509v3 Authority Key Identifier:
                keyid:DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.80.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:e8:14:9d:5a:d5:06:41:3c:8c:46:2d:f3:84:05:88:4f:e7:
         d4:56:bd:be:60:70:4e:1e:37:0e:43:12:a7:af:d5:a1:f4:5c:
         23:91:1a:cf:5a:35:0c:65:62:6a:62:f0:24:91:ef:8f:f8:70:
         fc:d7:35:b9:60:79:57:f1:03:f8:cb:f9:8b:16:53:76:38:17:
         e1:49:60:c5:74:52:1d:c1:18:ab:4e:47:fd:77:9e:0e:bf:a1:
         f7:23:3b:ae:0b:2b:91:ae:cf:84:65:25:d1:cf:ca:33:d6:90:
         ea:5e:dd:c4:43:89:f8:e5:a8:31:db:c0:cc:86:bf:94:ed:6d:
         3f:80:98:3c:9d:3c:aa:1d:83:48:bb:5a:5f:a0:e4:73:d5:28:
         69:7e:01:dd:6e:36:8f:bf:4f:24:33:a7:2f:0b:77:69:2f:13:
         9b:3c:8e:69:2e:07:15:fd:9e:ac:e1:c6:75:d6:c3:ef:06:1c:
         7a:31:f5:2c:9f:81:7a:f0:86:16:a9:60:54:d7:f1:90:6f:4a:
         d7:e7:64:dc:7c:e3:d4:fd:f7:47:77:f2:2a:f3:e7:f4:0e:5a:
         23:c6:de:04:0b:3d:76:83:db:b2:c3:84:ad:12:42:e5:15:33:
         cc:29:53:73:c3:ba:6a:c7:e1:0b:8f:5f:d3:32:12:be:c3:c2:
         0a:1c:1f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:13:47 2025 by rpki-client