Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/18ca51fd-04fb-3e26-a7a6-36a7145d759e.roa
File:                     18ca51fd-04fb-3e26-a7a6-36a7145d759e.roa (raw, json)
Hash identifier:          cWa9GOF1q3KR11/S9eFkDj6sYI6JF32/wvXfhYdxc5w=
Subject key identifier:   14:F7:75:46:C8:6B:5D:F5:16:FD:15:1C:1C:F6:06:66:4B:17:08:C3
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285849213436BC9A3706C16C4ADC00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/18ca51fd-04fb-3e26-a7a6-36a7145d759e.roa
Signing time:             Sun 09 Mar 2025 10:20:42 +0000
ROA not before:           Sun 09 Mar 2025 10:20:42 +0000
ROA not after:            Sat 07 Jun 2025 10:20:42 +0000
asID:                     577
IP address blocks:        174.92.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:36:bc:9a:37:06:c1:6c:4a:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:42 2025 GMT
            Not After : Jun  7 10:20:42 2025 GMT
        Subject: CN=2d5d661e-1b32-45f0-8d7c-f5050f3d83c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:86:ce:dc:a7:57:7d:3c:7a:1c:6c:bb:14:38:
                    87:d9:1e:5e:f0:ca:17:3a:30:f3:28:79:4d:cc:75:
                    3d:54:4a:b6:fc:0a:90:58:2a:a7:f5:16:77:e3:47:
                    9c:f5:35:c3:21:f6:c7:36:66:d9:35:4b:78:ec:0e:
                    25:90:b7:63:0e:5d:a1:e1:39:51:e9:13:58:71:6e:
                    32:40:c0:3c:22:36:fe:1a:2d:76:74:a5:9d:e0:f8:
                    2d:f7:a4:64:63:ed:62:23:bc:d5:f7:e8:cb:d5:de:
                    c9:af:f4:45:6c:e3:35:d0:e6:21:8b:eb:89:13:ab:
                    cb:d0:92:22:6d:2f:6e:3c:9e:c8:24:39:d4:38:65:
                    4c:2d:9c:ab:df:f4:a9:10:88:a1:8c:3b:94:7c:72:
                    8b:70:4d:21:d1:e1:90:6b:f0:73:04:19:e4:14:e7:
                    a3:16:0d:ad:e7:1c:80:fc:3f:cc:e9:38:15:62:15:
                    80:1e:ee:59:33:81:ee:f8:63:ae:a6:d2:13:99:c7:
                    27:8f:73:33:1b:97:43:f6:8f:fb:8d:35:e2:ba:c1:
                    92:a2:61:2f:5d:72:91:a1:5d:e1:6a:a1:05:68:ed:
                    70:3c:95:bf:ec:28:66:6a:b0:d8:7f:38:cf:bd:72:
                    60:03:6b:29:cb:0f:c5:43:fe:0b:12:c5:14:78:c5:
                    45:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F7:75:46:C8:6B:5D:F5:16:FD:15:1C:1C:F6:06:66:4B:17:08:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/18ca51fd-04fb-3e26-a7a6-36a7145d759e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.92.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:45:f3:f9:67:d0:31:5d:d7:71:d4:2e:d0:2a:e3:94:fd:f1:
         99:e2:c9:04:77:3c:d0:ec:70:fc:a4:cd:79:84:a5:df:14:cd:
         9e:a4:ed:94:04:84:5f:c7:16:33:1e:ea:46:f0:5f:7e:ee:0e:
         75:9f:6a:f2:5d:b7:a7:5b:dd:b7:f4:9e:58:bb:70:f0:00:1b:
         3b:d0:05:9f:c9:25:f8:c4:3c:49:48:d6:d1:e3:f9:f5:67:69:
         54:67:fd:60:be:1b:f1:b8:dd:75:3a:84:f5:9e:a4:18:db:c3:
         b8:9d:27:d2:ab:a1:d9:12:66:00:41:50:97:25:80:2d:59:5f:
         cf:16:14:ff:cd:ff:cf:2b:cb:91:72:6d:aa:0a:01:78:a9:00:
         25:0d:db:a1:91:d1:b3:1e:eb:3b:98:94:75:75:d2:e1:10:92:
         a3:c3:ff:6b:9b:59:aa:1d:eb:bb:de:a1:b2:9b:72:22:6f:c0:
         6b:5c:ac:1c:f7:35:1c:54:b0:52:4a:0d:96:ec:be:00:91:d1:
         bd:c4:1f:56:b0:38:4d:8a:b9:a7:57:1b:ad:13:ce:48:e4:74:
         18:d6:b1:d9:b3:ee:9a:64:84:39:4f:00:14:00:ad:0c:be:1a:
         89:f5:1d:c7:2c:bd:42:ce:b7:6a:0c:e7:c4:cc:87:84:7c:7b:
         e5:17:90:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:07:09 2025 by rpki-client