Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/04e03083-6005-375e-b06f-889bfeb58794.roa
File:                     04e03083-6005-375e-b06f-889bfeb58794.roa (raw, json)
Hash identifier:          vb7kravDnEzNdIDChn9XypTCcbblpf6yuMe1Voym/ys=
Subject key identifier:   5F:A5:41:92:CD:E9:64:34:F9:E3:66:39:EE:E1:AC:AF:DF:99:29:8C
Certificate issuer:       /CN=44c9f20f-94d3-45ab-b941-cca94fba4981
Certificate serial:       010D0C9F43285849658DBB629EA61C549C064480
Authority key identifier: 03:F6:F6:1C:42:4C:C7:52:8D:DD:05:02:7D:BD:F4:D8:FD:07:A3:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/04e03083-6005-375e-b06f-889bfeb58794.roa
Signing time:             Wed 02 Apr 2025 21:56:02 +0000
ROA not before:           Wed 02 Apr 2025 21:56:02 +0000
ROA not after:            Tue 01 Jul 2025 21:56:02 +0000
asID:                     26342
IP address blocks:        170.194.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:8d:bb:62:9e:a6:1c:54:9c:06:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c9f20f-94d3-45ab-b941-cca94fba4981
        Validity
            Not Before: Apr  2 21:56:02 2025 GMT
            Not After : Jul  1 21:56:02 2025 GMT
        Subject: CN=c254d290-dc88-4dd9-bf47-d87a14d7a70c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2c:70:a8:79:4d:69:ce:0a:b1:61:6a:84:49:
                    8a:74:d9:7a:47:85:7e:eb:70:4b:a5:91:7d:d0:7c:
                    42:77:f8:b3:71:04:87:d9:ff:0c:a5:3e:c8:69:c7:
                    bc:d9:29:af:f3:88:71:72:bf:f9:f5:a4:e9:0f:32:
                    5b:01:97:dd:0c:ab:34:36:30:f9:36:da:5d:de:11:
                    24:c3:12:1a:b8:02:02:1a:18:6d:29:d7:00:d1:ae:
                    81:ec:67:a8:11:38:59:1a:9c:89:fb:d4:f5:be:65:
                    28:cb:bb:fd:96:21:86:0f:f8:67:08:84:33:de:e3:
                    33:52:95:d0:d4:01:ba:88:77:06:39:5b:30:fb:18:
                    40:17:30:42:07:ab:8b:92:77:4f:ae:f9:b9:4f:77:
                    1f:66:ef:44:82:ec:fb:7d:49:9b:d5:c6:30:6f:6b:
                    47:90:db:b1:46:4f:37:03:99:ac:98:b8:ca:af:a4:
                    fd:b2:eb:bd:7c:69:cb:92:83:92:51:0d:2c:89:38:
                    6d:93:87:ba:a6:74:ab:5a:f7:ec:9d:c6:e2:21:9e:
                    ce:17:20:20:ad:58:a2:10:4a:8f:11:83:0c:31:d8:
                    ee:70:94:1e:89:7b:39:31:c2:5b:eb:38:06:42:46:
                    97:0b:36:35:54:63:f4:59:47:31:16:cf:26:dc:8b:
                    42:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A5:41:92:CD:E9:64:34:F9:E3:66:39:EE:E1:AC:AF:DF:99:29:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/04e03083-6005-375e-b06f-889bfeb58794.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.crl

            X509v3 Authority Key Identifier:
                keyid:03:F6:F6:1C:42:4C:C7:52:8D:DD:05:02:7D:BD:F4:D8:FD:07:A3:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.194.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:a7:27:3f:68:4d:41:61:a5:54:b6:6b:92:6f:55:f9:60:87:
         b9:47:fa:9a:a5:33:3e:4e:61:e7:75:66:a2:1b:8c:3b:e0:1e:
         a3:ca:92:d4:14:00:be:d8:b0:5a:45:b7:f5:ae:53:9f:77:10:
         64:1b:d8:c5:5c:db:d3:9d:fd:37:a0:47:15:bc:89:70:8a:dd:
         01:18:5d:e7:c5:ca:eb:eb:b8:8b:2c:42:13:3e:eb:ba:7f:a5:
         93:8a:d2:b0:0a:d4:b5:f3:e6:b0:a0:28:7d:ce:21:86:2d:29:
         32:48:9e:66:4a:97:3e:ad:38:b4:f1:fd:fa:6b:b0:2e:f0:14:
         37:4a:22:a5:27:b3:28:5b:78:f5:c9:c7:0f:df:85:73:87:89:
         2d:0c:27:03:db:93:b9:df:c0:f2:49:6d:c5:94:06:c0:eb:b4:
         60:4b:f7:76:ad:2d:b9:49:d2:eb:fd:98:c3:18:0a:4c:8f:48:
         90:08:d0:09:32:12:a0:4f:a1:80:73:7f:14:0e:f3:be:02:d4:
         16:19:dd:38:ea:99:59:18:3b:67:1a:60:f0:34:e1:c9:a2:d0:
         9c:60:96:01:c0:09:f0:c9:79:75:89:54:41:84:e7:20:e3:99:
         38:c4:13:b8:77:73:d1:71:89:c0:86:94:a0:b1:9a:59:02:58:
         14:8d:66:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:23:37 2025 by rpki-client