Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba/d2be373a-4ce4-35fb-810e-542b3f8888eb.roa
File:                     d2be373a-4ce4-35fb-810e-542b3f8888eb.roa (raw, json)
Hash identifier:          JxkRfWFsm1QSkc1We6DpzrjkfDAAmGvvPhrcOKrz/J4=
Subject key identifier:   EC:8A:E0:29:E1:84:93:6E:FC:9B:A6:6F:68:31:C1:07:1A:9D:FD:49
Certificate issuer:       /CN=13168988-4625-42dc-9138-e5632130d1ba
Certificate serial:       010D0C9F43285848E9CBEBB6D2108EA440B85B80
Authority key identifier: BD:52:DC:07:5C:53:AE:AF:90:86:FC:68:91:CA:5A:20:22:9D:E1:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba/d2be373a-4ce4-35fb-810e-542b3f8888eb.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        192.197.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba/13168988-4625-42dc-9138-e5632130d1ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba/13168988-4625-42dc-9138-e5632130d1ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:eb:b6:d2:10:8e:a4:40:b8:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13168988-4625-42dc-9138-e5632130d1ba
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=9cbb6d7b-9101-464b-ba1c-e2c8dbd8e416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:62:6d:c2:59:98:c6:e2:c7:bf:56:08:68:d7:
                    ae:89:16:cd:69:ae:94:b3:bc:1e:93:5f:7d:1c:d1:
                    93:2d:55:a3:d1:c7:77:f5:f1:9b:b2:f2:f0:71:3f:
                    e5:c8:a3:70:f2:b8:5b:37:44:5c:a4:aa:ef:d2:11:
                    af:54:c7:78:14:f9:72:47:e5:88:b5:36:b6:d0:18:
                    c3:bb:26:ff:04:3a:9f:06:86:c5:05:5a:f7:aa:05:
                    fd:9d:4b:b1:a9:d6:d4:59:ec:f2:42:16:24:86:4c:
                    fb:b6:85:9c:a1:29:16:d8:11:e2:ee:9c:5e:ae:8b:
                    00:9b:a0:e1:a0:90:2b:c8:62:e7:f4:46:26:3c:db:
                    66:5b:19:2a:dd:9c:6b:4b:4b:f6:b4:0d:54:90:65:
                    9e:d7:4d:a4:bf:bc:52:c8:64:4d:8d:a3:6c:33:09:
                    30:18:4d:17:b4:a3:c8:f6:d3:34:3c:d1:6d:57:92:
                    04:6d:17:33:0f:12:3f:22:b9:5c:71:04:59:ac:ad:
                    b5:6c:5c:6e:18:84:45:3f:b0:12:66:9b:af:ba:33:
                    e1:b8:dd:77:19:04:68:89:03:84:11:74:00:e3:4d:
                    23:55:81:ac:c3:c5:25:9a:9f:1f:01:c7:68:ff:c3:
                    e7:51:52:16:e3:06:47:a3:42:a3:3b:ae:b8:26:4f:
                    bf:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:8A:E0:29:E1:84:93:6E:FC:9B:A6:6F:68:31:C1:07:1A:9D:FD:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba/d2be373a-4ce4-35fb-810e-542b3f8888eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba/13168988-4625-42dc-9138-e5632130d1ba.crl

            X509v3 Authority Key Identifier:
                keyid:BD:52:DC:07:5C:53:AE:AF:90:86:FC:68:91:CA:5A:20:22:9D:E1:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.197.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:be:0b:d4:83:87:ef:33:54:93:92:7e:1f:6f:ad:7d:0f:21:
         a9:66:18:56:ac:f3:dd:ef:d9:b7:ee:e3:ba:28:eb:05:6d:e1:
         e1:96:18:be:89:03:ba:9a:9b:9f:29:bc:1a:a4:a0:04:39:0a:
         0a:a9:15:dc:30:d2:46:6c:7a:50:59:be:ec:f0:56:43:84:df:
         dc:dd:18:07:0a:4f:77:27:dc:29:63:50:cf:c3:4e:29:2c:38:
         42:9c:aa:b4:16:b0:eb:6e:38:88:12:d3:c5:31:dc:d8:a0:01:
         01:79:c6:74:ef:55:74:68:43:49:55:bc:00:73:c1:66:25:c3:
         68:09:14:6d:8c:c5:53:63:e5:ca:6d:e5:db:cf:9e:1e:7a:cb:
         4c:29:b1:c5:e6:8e:f2:b5:41:ed:fc:d1:47:b9:6f:a9:74:96:
         d5:81:ac:3f:16:72:c7:32:49:dc:2b:08:9f:ae:00:5a:d4:8d:
         c2:d5:a8:d8:b7:39:99:e5:b5:8e:fe:32:6d:5a:68:99:82:a7:
         d4:d0:13:9f:66:b1:09:49:c5:8f:13:9b:fa:a6:40:a4:ff:05:
         be:4b:33:ae:f0:86:fe:03:52:db:ec:f9:b7:5e:6a:a9:d6:28:
         be:b2:fc:d7:4d:11:e1:dd:44:a0:e1:f8:7d:78:60:c1:f7:f9:
         c0:75:d6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:46 2025 by rpki-client