Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/cd8c45de-7335-36d8-861c-1a78550f1bda.roa
File:                     cd8c45de-7335-36d8-861c-1a78550f1bda.roa (raw, json)
Hash identifier:          SMD/gZx6NJWqFo5BC2zUuSY6XR8Tvv70DWWXhQIkUAE=
Subject key identifier:   AB:25:94:57:43:77:C4:18:05:40:2A:08:8B:F6:74:B2:9C:16:87:F7
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F432858496B7ED526441294205D2D1180
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/cd8c45de-7335-36d8-861c-1a78550f1bda.roa
Signing time:             Sat 05 Apr 2025 01:00:47 +0000
ROA not before:           Sat 05 Apr 2025 01:00:47 +0000
ROA not after:            Fri 04 Jul 2025 01:00:47 +0000
asID:                     50304
IP address blocks:        172.84.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6b:7e:d5:26:44:12:94:20:5d:2d:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: Apr  5 01:00:47 2025 GMT
            Not After : Jul  4 01:00:47 2025 GMT
        Subject: CN=2cd94097-b227-4230-8cee-366fe0ecfa6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cd:58:e3:3f:27:8f:d9:ce:5b:7e:d8:42:db:
                    40:8f:af:9e:1b:97:d5:bf:45:ff:80:cd:df:ed:72:
                    7b:29:e4:53:84:6c:75:9a:e0:16:de:1f:5d:d8:2e:
                    ab:b9:03:ac:66:95:2c:7f:00:45:20:58:58:ab:5b:
                    99:fe:17:5f:bb:e0:51:77:ce:8a:2a:76:65:2c:7c:
                    e0:43:cb:ff:02:fb:6e:3a:8d:78:cd:fc:6e:29:d0:
                    ae:12:79:c8:4d:b8:f6:78:14:ff:f6:52:f2:2b:24:
                    bd:72:c6:e9:f4:0c:0e:7b:c6:7d:cd:a0:2b:eb:cf:
                    81:c4:7d:d9:07:38:eb:5a:e3:2c:eb:18:0b:d3:e3:
                    12:bc:23:86:f9:0d:2e:ce:5d:9b:9c:7d:10:89:3b:
                    36:cc:6b:55:f7:43:6f:4e:65:f5:34:19:17:45:89:
                    72:0d:74:47:b0:65:f6:37:2b:be:88:24:fa:f6:f0:
                    2b:cb:7a:21:85:a8:01:8a:77:5c:02:33:06:62:25:
                    be:57:f4:71:b0:aa:cc:9a:1c:a0:97:99:3b:f4:2b:
                    a9:57:ee:f2:f0:ca:a3:20:07:0e:c7:e7:20:e2:3d:
                    38:32:20:63:1f:ef:a7:3c:2b:bf:83:2f:56:dd:32:
                    31:c6:be:93:e0:0b:4a:df:30:c0:74:b3:09:d5:b0:
                    9c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:25:94:57:43:77:C4:18:05:40:2A:08:8B:F6:74:B2:9C:16:87:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/cd8c45de-7335-36d8-861c-1a78550f1bda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:50:01:de:f5:58:62:ed:ad:c8:fa:31:bc:2b:85:ca:7f:b7:
         2e:1a:9e:e6:fd:57:d2:9f:79:a4:a9:69:28:c5:74:f8:1d:cb:
         bc:0b:5a:2d:50:60:61:a4:c9:0f:c6:18:78:39:d9:22:45:b2:
         3a:b2:3a:c6:38:4b:fb:ae:63:3c:2e:06:b3:57:73:9b:47:fd:
         ad:8a:2b:39:93:b9:5b:a5:e4:32:07:56:ae:19:0a:1a:8e:7d:
         f0:94:bc:f2:cd:01:4d:81:c8:b9:27:72:76:20:da:0a:5e:9d:
         59:12:ae:c4:fe:d7:af:59:ee:b3:01:4d:8c:b5:09:86:62:be:
         88:f4:b4:f3:c9:e5:f7:fe:b8:ed:38:2b:b4:f2:17:4c:41:53:
         49:0b:66:8e:e1:0c:5c:c1:31:15:25:e5:43:04:40:c3:5d:0f:
         58:f0:28:cc:43:09:2b:e3:ff:e7:22:5a:ba:50:09:9c:a3:5c:
         12:27:a8:32:62:75:ff:f8:43:a3:d6:17:0e:70:55:56:2c:5d:
         81:5a:52:3b:08:2e:40:10:da:4e:ac:0c:c3:a4:70:d0:b4:7f:
         b0:88:a3:42:56:df:7f:87:e5:08:fd:3e:46:13:13:91:24:4f:
         5b:ca:b7:37:e9:53:a5:4f:48:59:72:b6:f3:e5:2d:18:43:5d:
         e0:4a:7b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:10:31 2025 by rpki-client