Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/04033b10-38cd-3486-9bc7-8736a3a78437.roa
File:                     04033b10-38cd-3486-9bc7-8736a3a78437.roa (raw, json)
Hash identifier:          vZVkNNmGPWC0H7h4ZxQPhINCU6sq222isEdLcgjIPkY=
Subject key identifier:   77:BD:E1:E7:80:9A:72:A1:63:9D:E7:B7:74:8E:25:27:19:88:B3:7F
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858495C24701D08819091D0237280
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/04033b10-38cd-3486-9bc7-8736a3a78437.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     397234
IP address blocks:        192.100.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:70:1d:08:81:90:91:d0:23:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=782e8206-94a7-443f-aa56-ddf313f35565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:00:71:f8:55:42:1a:10:82:b6:11:13:4d:fc:
                    e9:38:c7:a9:55:5e:fa:69:f6:99:bf:e0:17:a1:05:
                    bf:a0:85:77:dc:09:49:b5:bf:de:1f:56:c8:23:9b:
                    c0:da:1d:a2:73:4d:e8:52:59:01:24:88:35:f5:80:
                    a8:5b:8e:50:29:db:bf:81:5e:f1:64:ce:5b:80:9d:
                    f7:26:0d:89:a8:2f:f6:6f:57:4d:73:6e:b7:d1:25:
                    46:3f:4a:a5:56:c8:7a:2c:57:bb:75:15:22:0f:c0:
                    22:cd:86:73:2d:0b:82:00:a2:71:19:9c:08:42:8c:
                    2c:35:3b:e8:c9:e6:c9:ac:d0:7e:59:d1:f1:37:90:
                    f5:f0:f3:09:ca:a7:3b:72:35:07:d4:b8:8c:f6:e2:
                    4c:22:54:d8:8c:b3:90:2d:f9:70:df:ba:5c:bc:8f:
                    54:83:58:14:ad:35:f7:dc:7e:d7:25:22:05:85:0e:
                    9a:c4:88:64:bd:ee:fd:f5:3d:72:07:71:7b:df:e3:
                    9b:19:18:a3:a9:d5:5c:71:f1:b4:07:2e:32:c2:03:
                    37:52:fc:3f:42:19:56:9c:a7:4d:a1:e7:fc:e4:a8:
                    ad:e2:51:62:9a:c6:1a:06:40:54:5a:9c:a5:96:29:
                    78:0c:d7:07:48:a5:47:b1:52:61:ed:bb:8c:92:9d:
                    4a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:BD:E1:E7:80:9A:72:A1:63:9D:E7:B7:74:8E:25:27:19:88:B3:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/04033b10-38cd-3486-9bc7-8736a3a78437.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:d9:1c:8f:f4:d9:9b:bd:ad:77:78:b9:e0:aa:e7:e5:66:84:
         4e:83:cc:8b:2e:b4:12:79:5f:a3:fa:eb:15:12:75:5a:7a:54:
         19:54:05:4c:22:cc:2e:db:c9:fd:ac:38:5e:6c:30:8b:b2:6c:
         3c:70:f8:a5:46:67:66:8c:4f:29:c6:6c:73:e9:be:5d:3a:73:
         05:f8:7f:2e:fe:ea:9a:39:04:14:28:ba:f6:64:c9:be:38:1b:
         ac:e7:c2:da:21:57:e5:05:e4:00:29:e9:6b:56:93:94:e1:d0:
         1d:5b:e6:c8:cf:37:78:98:25:da:c7:6f:ec:ad:fb:32:97:aa:
         18:b5:d3:e7:d9:0d:9f:ad:06:87:88:7c:61:c1:0e:86:b5:06:
         2f:35:5b:9e:7f:e3:6e:f6:eb:af:d7:22:e6:dc:7d:6b:85:c4:
         3b:39:70:b1:11:a9:9e:62:63:ad:63:b1:b1:50:aa:7c:4d:03:
         a5:fb:b2:d4:dc:d6:b6:f0:ed:08:94:6f:87:d5:83:49:91:77:
         7e:62:7c:6a:81:aa:6f:11:0e:11:92:f3:f9:2e:87:d7:2d:75:
         63:a9:b1:92:14:9d:69:a2:0a:99:d7:a2:94:1c:7c:2d:ce:16:
         f3:27:8c:2a:7c:f1:1e:d3:1d:0b:3d:8b:e5:05:21:15:a1:58:
         85:08:61:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:21:55 2025 by rpki-client