Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7574108f-d7cc-487e-90e1-c9c14011c9bd/fc2d3d0a-24fd-3bc5-9059-0c87576f485e.roa
File:                     fc2d3d0a-24fd-3bc5-9059-0c87576f485e.roa (raw, json)
Hash identifier:          OUY52lqLiEeUJx56RvzZD8gTAKtja397vYg1uwcj9CQ=
Subject key identifier:   14:9A:D3:D3:77:52:7C:7C:A2:26:B7:2D:E8:26:25:9E:7D:7B:B2:0C
Certificate issuer:       /CN=7574108f-d7cc-487e-90e1-c9c14011c9bd
Certificate serial:       010D0C9F432858494B640DD99FF7B0BF3BF6CCC0
Authority key identifier: 5A:3E:28:BB:1A:0C:F4:BE:4B:0D:EE:1A:E7:F9:41:59:C6:04:97:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7574108f-d7cc-487e-90e1-c9c14011c9bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7574108f-d7cc-487e-90e1-c9c14011c9bd/fc2d3d0a-24fd-3bc5-9059-0c87576f485e.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     1055
IP address blocks:        192.112.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7574108f-d7cc-487e-90e1-c9c14011c9bd/7574108f-d7cc-487e-90e1-c9c14011c9bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7574108f-d7cc-487e-90e1-c9c14011c9bd/7574108f-d7cc-487e-90e1-c9c14011c9bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7574108f-d7cc-487e-90e1-c9c14011c9bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:0d:d9:9f:f7:b0:bf:3b:f6:cc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7574108f-d7cc-487e-90e1-c9c14011c9bd
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=58965ef2-7da7-4904-86bd-8f2db7ff11f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ee:34:c2:30:ca:9a:62:76:84:69:dd:08:1b:
                    8a:c4:23:0d:bf:d4:7a:0f:13:64:b3:3c:36:4b:ea:
                    6d:5b:e0:28:7d:16:0a:d3:01:fa:5e:40:a6:e5:bb:
                    e7:12:22:c9:eb:0b:64:59:93:3a:09:94:1b:e2:35:
                    94:22:42:0d:94:d7:82:a8:f2:10:05:cd:56:b2:6d:
                    17:11:dd:d1:00:10:7c:f1:2f:22:d2:bb:ba:ae:54:
                    6a:bf:9f:08:64:52:4c:e1:a0:f9:74:b3:fc:96:91:
                    f1:f5:7a:42:d1:a7:ec:21:47:ef:db:1c:63:24:95:
                    4a:09:37:08:16:e0:d3:68:fd:5e:e5:b9:ec:d5:97:
                    7d:f5:f2:05:9e:77:89:1f:6b:bb:10:68:82:e0:82:
                    77:fa:eb:16:5c:36:5b:67:f1:48:09:c7:2d:f7:b4:
                    d2:40:9b:b1:6d:ea:c3:0f:39:ce:f0:1a:45:33:53:
                    29:13:2c:50:69:92:76:cf:a9:df:61:dd:51:56:38:
                    44:90:70:1d:d9:31:b8:b9:3d:21:e5:5d:da:f4:2a:
                    85:ea:d2:e2:2b:74:b9:58:31:ad:dc:cf:7f:1b:a4:
                    5d:27:2a:4e:cd:44:33:9a:10:3e:a1:8a:e1:30:b7:
                    0e:7f:d4:0c:f5:6c:d5:bc:6b:09:70:7a:1f:d2:a7:
                    e2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:9A:D3:D3:77:52:7C:7C:A2:26:B7:2D:E8:26:25:9E:7D:7B:B2:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7574108f-d7cc-487e-90e1-c9c14011c9bd/fc2d3d0a-24fd-3bc5-9059-0c87576f485e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7574108f-d7cc-487e-90e1-c9c14011c9bd/7574108f-d7cc-487e-90e1-c9c14011c9bd.crl

            X509v3 Authority Key Identifier:
                keyid:5A:3E:28:BB:1A:0C:F4:BE:4B:0D:EE:1A:E7:F9:41:59:C6:04:97:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7574108f-d7cc-487e-90e1-c9c14011c9bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.112.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:c8:fb:a4:48:38:c3:aa:79:73:f5:68:41:90:fb:ff:3b:35:
         3d:66:37:eb:6e:37:7e:99:3b:51:19:18:82:0c:65:0d:11:fe:
         22:65:c0:cb:e2:d1:12:13:f3:26:86:2f:8c:6e:07:b8:4b:09:
         5a:47:50:e5:2a:cf:c2:f7:3a:90:e8:fa:43:2b:0b:fe:6c:2e:
         eb:e2:58:4b:88:51:dc:47:6f:b3:c8:4a:e8:f8:70:ca:3c:28:
         de:e6:89:b0:2c:61:69:56:ba:52:86:7a:17:61:42:aa:b0:ca:
         c9:68:a4:8e:fd:cf:9e:1d:cf:af:cc:94:e2:8c:30:b2:12:46:
         9c:df:9c:1a:60:fd:52:9b:10:6a:83:de:5b:b6:e2:ca:02:52:
         bc:11:a0:bf:58:23:b2:d2:ec:3d:4d:fb:bf:f3:71:cf:b8:fc:
         53:b6:41:fc:58:0a:4c:28:b2:58:ba:3a:aa:8c:ab:fb:5d:b2:
         64:b8:d1:e6:bf:a4:19:3d:e2:b0:86:c3:54:89:e8:d7:d6:52:
         20:d5:2f:2e:4d:71:c3:fc:75:28:13:95:c1:bc:b8:a3:32:c7:
         1b:b0:bb:42:3c:16:f7:1a:46:7b:00:e5:20:ce:29:62:ec:fb:
         a8:77:c3:a7:0a:61:39:73:a0:5a:bd:86:0b:ac:c7:b1:5a:7b:
         28:c8:b7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:53:15 2025 by rpki-client