Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/6a52f0d5-c02b-38ba-b3e5-4bf611f9767a.roa
File:                     6a52f0d5-c02b-38ba-b3e5-4bf611f9767a.roa (raw, json)
Hash identifier:          94khE9G91RfytsdacBeaP+o+TrE29LGuJzKPZgNzFPs=
Subject key identifier:   50:B9:5F:63:9A:1C:B8:1D:25:22:02:7D:16:BF:17:79:07:D8:5B:9E
Certificate issuer:       /CN=dfffa5c3-b5c7-4347-8d57-96bc3102df8a
Certificate serial:       010D0C9F4328584961F7E1DFEF352C97EDDCA680
Authority key identifier: 21:EF:A2:95:82:70:C4:A7:B7:7D:3E:26:4B:DE:9E:B4:66:0D:AE:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/6a52f0d5-c02b-38ba-b3e5-4bf611f9767a.roa
Signing time:             Tue 01 Apr 2025 15:06:41 +0000
ROA not before:           Tue 01 Apr 2025 15:06:41 +0000
ROA not after:            Mon 30 Jun 2025 15:06:41 +0000
asID:                     7029
IP address blocks:        192.100.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:f7:e1:df:ef:35:2c:97:ed:dc:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfffa5c3-b5c7-4347-8d57-96bc3102df8a
        Validity
            Not Before: Apr  1 15:06:41 2025 GMT
            Not After : Jun 30 15:06:41 2025 GMT
        Subject: CN=26775589-5bcd-4b58-915a-efac1fdd050a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fe:93:e1:ba:a5:97:fd:74:d4:34:2e:dc:06:
                    b7:d8:1e:1c:2e:6e:42:c9:78:cf:63:e1:06:a8:26:
                    64:cd:5b:62:bd:a0:ce:d2:95:e4:f4:b6:c3:76:45:
                    8f:b7:32:90:8e:0a:50:0c:20:e9:e0:24:e3:30:29:
                    89:b3:94:78:d4:1f:82:52:9e:ba:70:6a:65:cf:fa:
                    e7:1f:9f:24:7b:c0:d3:98:2d:91:47:73:69:df:9f:
                    11:09:5c:b6:a5:70:be:ef:49:3c:50:90:1a:91:72:
                    91:f1:b2:65:a4:4d:db:9c:ce:d3:5f:ff:41:0b:3c:
                    dc:13:11:11:d4:a6:ea:5a:01:76:0c:4b:a1:7c:59:
                    73:51:67:49:93:86:a8:db:14:66:85:69:ec:53:f5:
                    d2:d5:4a:5e:d9:55:df:11:73:b2:17:fb:1b:65:a2:
                    81:2c:f6:cc:dc:4f:c1:fb:e4:de:05:4f:fc:9e:15:
                    b5:8f:e4:e6:a2:dc:b8:f3:d4:18:53:76:e8:0e:bb:
                    20:a6:41:14:e5:b2:5b:42:e1:a2:32:f7:c3:54:da:
                    c1:e3:4c:b8:6f:ff:d2:ac:d8:41:52:d3:49:de:db:
                    ad:3f:d2:83:4e:b0:b0:c0:61:d1:9b:73:46:23:6d:
                    ff:f4:99:55:61:54:f5:1e:b3:ab:27:c5:98:13:3e:
                    b0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B9:5F:63:9A:1C:B8:1D:25:22:02:7D:16:BF:17:79:07:D8:5B:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/6a52f0d5-c02b-38ba-b3e5-4bf611f9767a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl

            X509v3 Authority Key Identifier:
                keyid:21:EF:A2:95:82:70:C4:A7:B7:7D:3E:26:4B:DE:9E:B4:66:0D:AE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:88:a1:f7:31:c2:f3:7e:06:d6:dc:51:7c:e7:ee:bc:d2:3e:
         ec:8c:ec:fb:f2:c9:30:94:fc:4b:03:1b:cf:48:39:f8:d8:6e:
         94:79:fb:96:2f:c0:7f:ae:30:1a:26:92:60:ce:bf:88:be:f0:
         f3:96:36:dd:e3:c7:46:cd:fc:17:37:de:64:c4:3f:b4:99:12:
         18:a8:85:15:1f:79:47:bd:1d:b6:05:81:ab:69:55:3e:bb:e0:
         20:f8:4f:00:42:7a:b5:74:d0:49:54:36:dd:c9:83:4a:7d:46:
         18:7d:8e:a7:45:94:3f:eb:90:62:b8:04:3d:13:7b:91:f5:b4:
         50:1f:14:1f:8d:b6:bb:78:18:23:83:54:16:55:ea:e0:c4:50:
         c6:f0:6d:66:f8:42:29:fd:f4:ee:1d:46:ee:59:ca:bf:8e:d0:
         e0:3b:ec:6d:02:f4:a1:40:cd:9a:c4:69:50:e9:32:6b:20:79:
         38:1b:ec:8d:70:c5:21:6c:a6:54:11:86:26:0b:85:e3:69:fc:
         83:38:4e:02:43:1f:ce:8f:5f:d2:90:7e:f9:37:d5:90:82:93:
         e6:38:d0:6f:8c:76:38:06:de:6e:1b:f7:27:c2:72:20:5e:e0:
         88:17:2c:96:5b:98:92:d9:62:e3:9a:43:4f:86:06:75:e9:f9:
         a5:c3:1d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:35:00 2025 by rpki-client