Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8/b531e632-8932-3c9c-afb6-2fc6e31e30a0.roa
File:                     b531e632-8932-3c9c-afb6-2fc6e31e30a0.roa (raw, json)
Hash identifier:          aviI6XbZB6vv0ms1CC9C+S4CNf2R9sCphuh2ULMvaaA=
Subject key identifier:   DA:F9:40:49:64:2B:35:F7:5C:FE:A2:58:EC:A9:1A:DF:52:D6:D5:59
Certificate issuer:       /CN=73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8
Certificate serial:       010D0C9F432858495EEEE2D40692EFD2EAC18200
Authority key identifier: 52:7B:70:BA:7C:3B:9D:0F:59:59:42:0D:91:87:3D:5D:B9:D8:84:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8/b531e632-8932-3c9c-afb6-2fc6e31e30a0.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     62643
IP address blocks:        192.234.120.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:e2:d4:06:92:ef:d2:ea:c1:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=05282cac-51eb-4019-b07c-90a4f0018014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b3:09:2d:c7:7d:fa:60:10:7a:ed:68:91:c8:
                    18:c3:60:a3:93:7b:44:1e:44:17:7d:2f:74:2b:27:
                    a4:56:82:f3:6c:8c:74:88:c9:a7:89:73:db:c2:38:
                    17:9e:4b:1a:9d:fd:2e:b2:d1:f9:4d:72:fe:69:48:
                    d4:01:7e:e2:9e:14:c5:7c:01:99:9d:6e:41:64:18:
                    46:f1:e1:9a:1e:b9:3c:89:b0:66:be:1c:0e:ff:cc:
                    fc:91:65:06:59:da:65:79:76:77:22:ff:6d:a4:98:
                    ca:7c:40:a4:7c:12:8a:2f:09:f8:05:7a:74:7f:cc:
                    a5:f6:25:3b:ac:b8:9c:ed:3f:3f:be:bd:fe:2c:10:
                    dd:4f:d8:6a:9b:7c:b2:b2:58:8e:14:21:fd:2b:f3:
                    44:97:57:10:09:91:61:da:d9:82:8d:65:b2:0a:1d:
                    14:7c:e3:09:ab:03:08:c2:0e:3b:27:a3:61:d1:01:
                    a8:75:74:6f:ac:06:73:85:c8:c6:ef:01:2f:a0:5d:
                    cc:91:1d:fc:88:99:bd:47:a4:44:b8:8f:67:94:6e:
                    60:f0:13:d2:d8:59:56:02:22:7c:35:30:d0:60:6b:
                    83:06:25:c9:96:eb:b7:fe:b1:3b:29:f9:47:21:90:
                    56:9d:bd:a1:71:d0:f0:41:d2:d5:ea:c5:2d:ce:84:
                    1e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F9:40:49:64:2B:35:F7:5C:FE:A2:58:EC:A9:1A:DF:52:D6:D5:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8/b531e632-8932-3c9c-afb6-2fc6e31e30a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8.crl

            X509v3 Authority Key Identifier:
                keyid:52:7B:70:BA:7C:3B:9D:0F:59:59:42:0D:91:87:3D:5D:B9:D8:84:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.234.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:f5:30:2d:f8:c5:3d:d4:4f:e5:ab:4b:13:a8:33:b4:f7:23:
         24:f5:6f:67:f6:04:77:96:d1:66:e8:30:1b:91:f2:e7:0f:fa:
         ae:88:2a:d0:98:fb:f6:8e:41:a2:f4:95:1e:d0:e3:cf:80:a5:
         b2:97:25:02:5c:99:ef:4a:03:0a:5e:64:81:35:0f:ad:cc:d0:
         a2:32:9e:4a:df:43:63:43:d4:f9:d1:3e:5f:86:46:6e:f1:e1:
         1c:2b:f6:42:27:90:66:c4:c5:3c:02:61:1f:7d:5e:b5:e2:79:
         2f:52:47:48:61:d0:85:f3:fb:83:84:1d:79:96:f1:77:26:bf:
         ef:5f:52:af:d6:d7:b8:0b:ec:7e:cb:b4:89:a8:79:d4:fc:4f:
         ad:5c:ad:52:61:3b:b9:3d:28:85:ab:c2:3c:f0:9d:1b:3a:f8:
         f7:63:0d:15:a0:ec:de:e9:3b:f7:4a:3e:ff:3b:10:66:cb:87:
         d9:26:db:2d:45:87:e5:5c:d8:8b:e3:81:18:dd:aa:f9:14:5e:
         c3:26:50:91:9f:ab:c8:b1:c9:a2:75:9f:72:ec:28:62:48:82:
         7b:e1:eb:e5:3a:5d:2b:7a:6e:f3:a0:f0:ea:b9:86:1f:f7:11:
         38:94:fb:d1:63:94:a7:b2:0c:3c:bd:63:14:96:81:7a:14:39:
         fe:65:42:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:12:52 2025 by rpki-client