Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/40ad0a93-af7a-3b7d-97fb-c434cb896384.roa
File:                     40ad0a93-af7a-3b7d-97fb-c434cb896384.roa (raw, json)
Hash identifier:          unsXIlkqcqBk7653bCvyItmEBBsG81Cr/Tnmpc3/TM4=
Subject key identifier:   6C:33:45:8E:85:59:2F:C4:8A:17:9A:31:4B:61:E6:31:9E:CD:F7:8E
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858491AA6BD1A4BCAC84343D6DC80
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/40ad0a93-af7a-3b7d-97fb-c434cb896384.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     17088
IP address blocks:        159.18.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:bd:1a:4b:ca:c8:43:43:d6:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=85b1a5ec-77ba-4288-ae1d-1e4ae9d31f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:81:9c:30:0e:fc:1d:62:3d:6d:8e:fe:cf:a1:
                    9d:e6:01:ef:d9:ff:69:e0:87:7f:3c:31:fd:11:74:
                    3c:78:0a:c2:03:48:c9:03:5b:40:55:07:3b:ca:ab:
                    aa:e1:a6:f1:b7:b3:85:19:fb:9a:4a:f3:05:33:45:
                    c1:3b:5e:7c:96:b9:db:28:b2:08:58:be:70:02:85:
                    f1:71:e8:2f:05:ec:cb:bf:67:c2:22:44:68:6a:15:
                    41:66:e4:5c:12:ca:da:b9:8f:08:34:82:e9:de:18:
                    0e:75:e5:a9:9d:e3:d7:43:bf:2a:fe:bf:55:5a:6d:
                    4e:e8:ee:98:cc:ed:0a:4c:7d:94:10:f2:f5:30:74:
                    71:26:86:15:16:92:37:31:c1:bf:25:53:3a:56:91:
                    36:a2:d9:bd:21:9d:23:93:84:fd:ba:c3:bd:c4:ac:
                    fa:8c:ea:7d:3f:f0:25:d9:16:6f:91:8a:60:99:c7:
                    3f:59:11:15:08:f8:c9:db:e9:93:df:2b:47:d2:68:
                    98:eb:ba:88:97:f9:71:86:e8:4e:13:3c:14:50:80:
                    df:3c:ba:64:12:4f:07:dd:14:00:77:c4:4d:fd:ef:
                    1a:b6:4e:67:e5:d6:77:e3:3b:7f:e0:68:89:b0:f4:
                    54:e9:8d:65:5c:b5:8c:9c:bf:f8:79:92:90:ee:0e:
                    f3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:33:45:8E:85:59:2F:C4:8A:17:9A:31:4B:61:E6:31:9E:CD:F7:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/40ad0a93-af7a-3b7d-97fb-c434cb896384.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:93:54:a9:b6:e2:b4:d8:6a:c9:a2:6e:ec:31:6b:07:e2:00:
         b5:ab:da:ac:72:c2:91:0c:c6:8b:bd:8d:dd:cf:4d:d1:c5:df:
         b7:e6:e2:dc:a4:ca:10:54:6b:24:af:0a:fa:7a:2b:6b:b2:0b:
         d3:ac:ac:b1:56:1d:03:e7:9f:1a:95:b7:9d:1a:26:2a:4e:e4:
         95:f9:d9:8a:1c:09:e9:62:c2:65:ed:2a:b9:f5:44:c8:d9:4f:
         77:f2:92:19:e3:c7:2d:f5:ef:61:61:d3:86:8e:bf:98:72:28:
         2f:ef:5c:f7:a1:e8:15:7d:be:49:ea:c3:da:1e:6d:6a:23:a2:
         90:cf:12:b4:2a:95:0b:f7:99:95:61:cc:4e:89:b2:3a:ae:7d:
         6d:1f:a1:d6:f3:50:46:4d:c3:be:7e:60:90:85:8c:9d:f2:3b:
         fe:75:dd:ad:53:00:3f:4e:95:e5:bb:ee:f4:d0:41:e5:2f:ac:
         5e:90:05:66:f2:ed:ee:b7:07:f1:4f:42:b0:06:bd:8c:e1:67:
         06:46:a0:f7:c2:c3:cc:db:f5:cb:b5:01:2b:34:b9:72:09:a6:
         43:91:d2:7b:62:8d:20:37:10:96:f9:b6:96:bc:24:13:52:96:
         b7:71:fd:f8:a5:4c:26:2d:72:fc:41:f1:e9:49:09:06:eb:20:
         fa:00:f1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:18:25 2025 by rpki-client