Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/867ba8c6-b8e0-3c0d-b890-3ac9aa19524a.roa
File:                     867ba8c6-b8e0-3c0d-b890-3ac9aa19524a.roa (raw, json)
Hash identifier:          8luGaFiiZuvF+oUoYq+prOccEqcW2dkm8PxnVz/2LCw=
Subject key identifier:   B1:B7:DA:9E:BF:D9:F0:F6:62:A6:A7:BD:A0:F0:21:A0:AC:F0:C3:1F
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285849A61F41B9EC8140CAB00AF880
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/867ba8c6-b8e0-3c0d-b890-3ac9aa19524a.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        170.114.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:41:b9:ec:81:40:ca:b0:0a:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=17556fea-046f-4d0a-a79a-55a5a24bb6b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:05:b4:8a:31:fa:ef:6f:43:34:ce:4c:f2:ed:
                    9e:97:c2:89:ec:6c:91:8b:9e:be:d9:87:9e:29:c6:
                    5e:33:f1:bc:bb:cc:90:1c:47:16:d2:19:26:be:60:
                    f2:50:01:61:26:cb:93:a2:a9:d4:2d:88:8c:ec:e3:
                    1e:db:0e:08:54:0e:aa:2e:e0:0c:31:8b:7a:64:0b:
                    b1:b6:95:e3:e6:68:61:e0:fa:08:d5:aa:a6:b2:81:
                    82:e4:58:e7:8d:fb:52:25:b2:70:f7:9b:f7:38:15:
                    6c:4f:c0:49:ff:d4:7f:70:d0:a5:b3:9f:47:2c:2b:
                    dd:df:80:4f:ed:e6:73:06:33:25:be:3e:b9:1c:8e:
                    5e:5e:66:5a:11:f9:b1:94:e4:e8:fe:db:57:18:f3:
                    77:11:3a:33:37:b2:c6:1a:2f:7e:6b:20:1d:e9:68:
                    6f:92:95:77:16:0b:1b:59:3f:52:cc:99:00:72:a5:
                    5c:11:4b:5e:4a:f1:e6:d8:55:93:e5:bd:21:ac:2a:
                    23:03:91:82:5a:ba:db:71:b5:04:39:c9:d8:4f:ad:
                    c0:9e:db:65:9d:09:8c:b4:dc:58:67:b3:aa:a4:ec:
                    0d:9f:55:c3:fd:6e:7d:13:ff:e1:40:5a:98:24:6a:
                    48:f0:bf:a9:79:32:cd:c0:1a:50:8a:5e:9a:96:bc:
                    4e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B7:DA:9E:BF:D9:F0:F6:62:A6:A7:BD:A0:F0:21:A0:AC:F0:C3:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/867ba8c6-b8e0-3c0d-b890-3ac9aa19524a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:f7:4e:3d:9d:7b:7c:f2:20:7a:bc:00:ec:0a:9e:f1:84:4d:
         10:94:6b:d6:68:cb:a8:8d:78:86:8f:95:f3:09:75:1a:b9:41:
         32:ae:35:59:a9:74:16:6e:b7:31:70:f3:9c:c7:bf:70:be:4e:
         7a:b6:9b:c2:09:68:8d:06:49:f5:d3:00:07:3a:54:62:c5:e2:
         14:2f:35:c4:29:bd:60:80:fb:4e:e1:30:1d:45:cd:e3:8a:43:
         e8:c0:09:d6:dc:72:2e:e6:d0:7f:05:78:bb:ac:5b:fc:a6:fb:
         6c:9d:af:b8:27:28:8e:8b:93:ce:87:c9:72:cc:4f:41:5d:02:
         22:8c:ed:8f:46:76:01:0c:f0:7a:ce:8b:f2:d7:8f:c0:08:88:
         25:af:df:f2:39:c5:92:84:6c:24:0c:64:86:cd:d7:b4:e0:ca:
         7e:85:c7:d0:86:d5:71:bb:33:0b:cb:3e:b0:3f:20:ef:19:ab:
         4b:39:46:24:32:30:fc:31:dd:3a:a9:fa:d9:a5:27:4b:73:8b:
         63:70:d5:be:14:24:16:7b:1f:97:c7:ff:29:e5:f1:99:b3:3b:
         d5:3d:d5:ab:4b:49:ff:53:99:d3:c8:ce:70:5c:61:06:a6:06:
         dd:f3:fa:04:0c:36:03:30:ba:50:25:50:2f:ff:df:b4:97:56:
         14:08:6f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:23:52 2025 by rpki-client