Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/dd0f35f7-5560-3486-967e-db25d4288162.roa
File:                     dd0f35f7-5560-3486-967e-db25d4288162.roa (raw, json)
Hash identifier:          261MKQogcJiM4bObTi463u6FYC/+tiwaYrFB08HWvaU=
Subject key identifier:   88:8F:EB:A6:7F:C8:08:21:0C:F5:C8:1E:4E:92:33:22:D9:0B:E7:17
Certificate issuer:       /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
Certificate serial:       010D0C9F43285849E654F04ABB1E44F62EC76C80
Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/dd0f35f7-5560-3486-967e-db25d4288162.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     5744
IP address blocks:        151.207.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:54:f0:4a:bb:1e:44:f6:2e:c7:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=51a0a93a-0615-4878-bc80-e7aced662a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ed:9a:ea:b9:2b:10:6f:b1:ee:2b:70:a3:b1:
                    9a:c5:d0:b3:4c:0f:d4:c5:47:c3:48:e9:b5:ee:95:
                    66:9e:ee:54:55:32:19:b7:e4:85:f3:f4:4a:55:fa:
                    c9:90:40:1f:a9:22:c8:81:a6:4a:a2:81:c6:61:4c:
                    44:49:a6:c9:bf:0e:d5:77:de:fe:f7:3e:94:02:41:
                    de:3f:cb:97:a9:12:a5:41:33:57:8c:9c:bc:79:6b:
                    32:fe:01:12:da:05:5c:02:d3:68:1d:74:df:d5:c5:
                    58:f1:28:42:62:4d:57:66:3c:cf:2d:76:82:a3:a0:
                    3b:35:77:79:f1:26:23:03:c8:ed:43:4d:01:f1:92:
                    9b:01:d6:ba:ff:b2:cf:bf:f4:a9:54:76:65:96:80:
                    90:a2:a7:ab:e6:13:82:4d:71:10:82:51:49:ec:97:
                    53:c2:ed:1f:60:93:a0:97:03:1f:6c:b2:d1:8d:49:
                    32:db:96:99:44:6f:ee:6c:b8:de:06:1b:85:ec:91:
                    01:ab:dd:f3:2c:f6:cc:cd:d0:c9:98:20:37:6a:d7:
                    7c:4e:72:8e:06:ce:1e:1c:49:c7:dd:e5:2c:86:04:
                    f6:c8:b1:07:13:85:55:31:8f:d0:eb:f5:84:a3:76:
                    89:12:4a:ec:0e:9e:bb:e2:4c:2a:10:f9:23:91:25:
                    78:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:8F:EB:A6:7F:C8:08:21:0C:F5:C8:1E:4E:92:33:22:D9:0B:E7:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/dd0f35f7-5560-3486-967e-db25d4288162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl

            X509v3 Authority Key Identifier:
                keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.207.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:14:0f:76:0f:53:c3:9c:1e:db:5a:54:76:ea:20:43:87:65:
         ec:24:42:0a:41:a3:5c:51:77:0e:32:a9:3d:f5:c5:80:31:f8:
         ed:09:65:93:93:27:d7:6f:1d:34:37:59:8c:b7:3f:bd:8d:df:
         25:ae:04:0d:20:c6:14:3f:97:11:1e:51:28:53:f4:56:9a:91:
         a9:f8:02:6b:4b:aa:c2:ab:8d:c8:80:f8:9e:9e:56:b8:d2:5e:
         32:2d:2c:45:d0:37:1c:04:0e:32:e6:e8:58:92:d9:4b:15:d3:
         d4:7d:19:c4:64:bf:6c:85:c0:cd:19:ba:d4:32:a2:20:8d:5b:
         34:a1:ec:87:86:70:8e:91:12:80:f6:53:27:c8:b1:41:89:a7:
         b6:9e:09:5b:65:fd:5e:88:ed:c7:a8:78:cc:0c:98:3e:c7:eb:
         c1:78:ea:8d:b2:a0:d8:fc:d7:af:0f:87:89:e6:e2:54:19:9c:
         7f:c7:15:8d:97:09:6d:69:99:56:0f:99:e7:d8:2e:80:f9:b8:
         2a:c9:ff:df:54:f2:63:d8:59:a6:58:85:8d:35:55:16:3c:09:
         3e:0d:f9:3f:1d:93:03:48:82:4f:a1:a4:c3:e7:05:fd:6d:24:
         34:96:a3:99:3c:63:11:da:16:39:a9:cc:22:d1:a7:66:a6:32:
         c1:b1:0d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:53:01 2025 by rpki-client