Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/1994c67f-79fb-3ba9-b195-812927849e45.roa
File:                     1994c67f-79fb-3ba9-b195-812927849e45.roa (raw, json)
Hash identifier:          s9jMRNDnZ297S9sDNIrIYlxL5+WkleeC5HTRZY/DkAE=
Subject key identifier:   25:08:1A:88:0B:BE:2C:B0:78:D0:74:16:EF:4C:19:42:46:64:AE:DA
Certificate issuer:       /CN=e8abcb36-7d75-4654-a098-d032ddf03d8a
Certificate serial:       010D0C9F43285848A830AF8ECD121725E6D9C710
Authority key identifier: E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/1994c67f-79fb-3ba9-b195-812927849e45.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        192.84.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:af:8e:cd:12:17:25:e6:d9:c7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8abcb36-7d75-4654-a098-d032ddf03d8a
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=8aba7904-8e28-4b6f-a2b7-739e76006a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:eb:00:3d:a1:8d:48:ff:a7:9e:a1:65:94:0e:
                    c1:79:d6:c3:fa:18:c5:b5:ae:cc:cd:da:e4:5a:73:
                    90:4c:00:8e:23:43:fa:d1:46:1e:f9:50:0f:ad:86:
                    7f:8c:e8:ed:0f:a8:92:7a:82:a1:aa:d3:37:2f:f1:
                    17:29:d2:6e:5c:6c:3c:7e:85:47:28:f9:bc:2d:3c:
                    15:b8:c8:35:68:9f:91:05:1a:4a:d9:de:0e:a9:58:
                    d4:6f:66:ed:58:26:dd:79:3a:e2:a2:77:bf:79:22:
                    d7:ea:e9:3e:08:8e:e6:6d:91:e3:c9:de:64:8f:98:
                    59:9b:20:fe:81:60:73:4c:88:65:17:4c:8c:6d:05:
                    df:7b:ed:90:11:ef:25:76:bd:5d:55:59:e5:d7:ee:
                    a9:8a:48:bd:97:af:9e:71:2a:57:6a:7c:5b:13:30:
                    01:01:56:ff:75:3e:0a:0d:94:ce:69:51:51:06:f0:
                    d5:76:25:80:b2:7b:1e:41:01:b0:97:e1:5a:0b:87:
                    66:6a:4d:11:ea:40:81:f2:b6:fa:79:05:d0:bb:60:
                    81:28:8b:5e:1a:b2:00:a7:8d:6d:d8:74:d4:ca:d0:
                    5f:3a:bd:fe:69:e8:66:6f:be:9a:e1:7c:8c:da:c6:
                    23:d7:a1:92:39:77:85:29:52:75:c6:c7:c1:e4:ba:
                    ec:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:08:1A:88:0B:BE:2C:B0:78:D0:74:16:EF:4C:19:42:46:64:AE:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/1994c67f-79fb-3ba9-b195-812927849e45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl

            X509v3 Authority Key Identifier:
                keyid:E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.84.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:9a:3c:04:0e:42:1c:02:39:36:76:6e:89:0a:ab:f0:f7:e7:
         68:1f:30:fb:0e:da:a5:07:d7:eb:0a:bc:b9:cd:3e:23:a9:50:
         4b:cb:bf:ef:94:3d:cd:86:fe:97:01:00:68:09:f2:59:56:52:
         30:ea:a9:ff:6a:81:ee:4a:fe:79:51:ac:b9:f8:d0:cf:de:9d:
         5e:74:24:8d:7d:5f:a1:23:a4:49:00:f8:cf:c1:db:3c:37:76:
         a8:b4:61:02:32:b6:f4:45:4d:2a:eb:84:d4:28:5a:0c:47:ea:
         d2:e6:15:3d:49:ed:58:a6:8d:23:c2:d3:ad:aa:94:b2:c0:db:
         5f:9a:30:73:88:94:dc:09:0e:3b:b3:4c:e3:1e:f7:71:e1:c8:
         7c:b6:1b:d2:ff:0a:43:10:ec:c3:f3:4d:63:17:b9:9d:7e:f8:
         a0:bd:f6:a5:bb:e7:bf:de:f1:e2:07:35:34:80:bc:df:3e:67:
         25:7e:33:bd:c4:56:44:53:35:1f:f7:c4:ba:39:4e:08:d5:c4:
         40:35:69:04:94:51:d3:48:40:98:e4:cb:86:b9:46:8f:56:a3:
         d7:af:7e:61:2d:80:7e:05:d6:da:b6:ff:f6:86:02:98:15:5a:
         34:e3:83:2f:4f:2a:40:69:f5:6e:ed:3f:b4:9f:e7:f6:eb:b9:
         88:f7:75:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:14 2025 by rpki-client