Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/184c4ea1-9be5-30b6-b2a0-97daf91eb572.roa
File:                     184c4ea1-9be5-30b6-b2a0-97daf91eb572.roa (raw, json)
Hash identifier:          MUQfABkJnobvESkhwe+eCm0/P2ApfbkrRygT+3tuvws=
Subject key identifier:   F3:0B:4C:14:5E:E2:6E:91:17:6B:D8:22:5C:6A:02:78:DA:AB:76:60
Certificate issuer:       /CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f
Certificate serial:       010D0C9F432858493ED3D3AF84249748F31D4A80
Authority key identifier: 3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/184c4ea1-9be5-30b6-b2a0-97daf91eb572.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     42831
IP address blocks:        104.128.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:d3:af:84:24:97:48:f3:1d:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=d92532a3-f01a-4215-a0fb-b8bdd97ff160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5c:c0:c1:10:0d:53:06:f0:c5:6f:4b:c4:95:
                    9e:14:9f:e8:a2:1f:05:38:61:d9:51:e2:33:38:40:
                    95:c7:51:b8:d2:3c:c8:30:32:c4:ef:be:1b:dd:10:
                    ba:a1:86:3a:1d:6f:66:6e:ee:de:03:ac:1f:bc:c7:
                    89:67:31:52:f8:a0:b1:a9:64:d4:57:6e:6d:17:88:
                    80:50:5d:41:ef:6d:3a:48:f1:79:82:55:43:3a:63:
                    38:84:c9:a6:02:13:50:68:8d:63:94:92:d8:13:86:
                    e3:09:fb:16:fa:52:79:bf:52:2d:1f:39:a3:ca:ff:
                    5d:d6:9e:49:10:1f:59:41:dd:40:5d:ea:b4:60:00:
                    b2:b0:1b:c2:a6:63:60:41:4d:5d:9c:6f:ec:7f:38:
                    82:13:56:92:b0:1b:c7:b0:d4:28:69:3a:69:6e:5c:
                    ac:41:67:29:ee:c8:a1:ff:43:1f:d4:b2:1c:ae:01:
                    f6:fa:ec:43:d6:3a:2e:46:c5:09:ff:6a:a6:7e:02:
                    91:d3:2b:d2:6c:ed:00:7d:57:c4:de:90:f5:50:46:
                    2c:52:00:7a:b4:f2:7d:bb:99:62:7c:3a:d8:cc:c5:
                    50:c9:ba:b3:ee:ce:e3:d1:59:a5:65:55:a9:4a:86:
                    08:81:ac:13:8e:26:ee:c4:e6:93:00:e7:46:34:62:
                    96:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0B:4C:14:5E:E2:6E:91:17:6B:D8:22:5C:6A:02:78:DA:AB:76:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/184c4ea1-9be5-30b6-b2a0-97daf91eb572.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl

            X509v3 Authority Key Identifier:
                keyid:3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.128.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:04:2f:e1:ea:c7:17:52:9d:89:fc:cc:cf:7a:18:19:86:98:
         59:d8:7f:f4:7f:94:30:be:51:4e:3f:79:10:b4:02:0d:2f:40:
         a4:8f:09:78:a0:54:30:3c:81:92:04:3b:d9:80:f8:3f:6b:e7:
         7f:57:99:6a:7e:1b:e0:99:87:97:85:00:ba:aa:de:6d:55:d0:
         35:b3:d5:3b:12:7c:47:35:51:c4:33:88:91:5d:3d:9a:43:9b:
         55:22:41:7c:8c:6d:6f:6b:ec:13:dc:35:9b:91:82:05:36:77:
         b6:4b:57:dc:9c:93:9d:61:92:8d:bd:a4:30:49:f4:d2:dc:7e:
         ae:ab:e8:79:c7:a6:91:7b:05:35:a0:d2:67:de:44:68:8a:a1:
         20:6d:e6:6f:8e:54:e6:98:33:1d:9f:9a:c8:6a:e7:1c:03:5d:
         41:b4:72:1d:45:67:75:fe:5f:44:97:40:42:e3:3a:c9:df:2c:
         42:c2:90:1e:dd:1a:d8:be:56:76:df:fc:da:e2:6f:9d:f3:bf:
         c1:18:d9:5e:22:6f:3d:90:7d:bf:d5:69:57:1c:7b:94:ff:5e:
         30:4a:93:b5:75:0f:a5:cd:8d:52:cd:40:a6:08:09:47:90:17:
         99:fb:4d:df:98:2e:74:b1:a3:22:19:6d:a3:4b:91:91:90:31:
         c1:4a:88:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:20:41 2025 by rpki-client