Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338/4eb2587f-0f39-37f8-9e34-fc5695ce1299.roa
File:                     4eb2587f-0f39-37f8-9e34-fc5695ce1299.roa (raw, json)
Hash identifier:          NOisFHq7YBwsNtnc8DenQSg1OcTuzlZ6mfZjDu0L/yk=
Subject key identifier:   CE:D7:3F:58:74:E0:B5:5E:73:E8:96:00:1A:76:F7:67:5E:0D:89:3B
Certificate issuer:       /CN=e6e72b41-233c-402b-b910-1acb71542338
Certificate serial:       010D0C9F432858494733DE5FABDE84F640DDF800
Authority key identifier: EF:83:88:C9:37:AC:D2:74:26:58:ED:FD:A2:A0:43:E9:E9:49:B3:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338/4eb2587f-0f39-37f8-9e34-fc5695ce1299.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     394049
IP address blocks:        192.250.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338/e6e72b41-233c-402b-b910-1acb71542338.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338/e6e72b41-233c-402b-b910-1acb71542338.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:de:5f:ab:de:84:f6:40:dd:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6e72b41-233c-402b-b910-1acb71542338
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=359f991a-38d8-4b97-a004-a9af335b480d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:86:e0:77:ef:ac:47:2d:c4:6e:f0:00:bf:f9:
                    0d:53:dd:91:39:77:9d:e1:8c:75:9d:ef:de:dc:6f:
                    07:b9:67:0c:11:51:83:c4:17:0a:fe:85:6b:fb:3c:
                    7f:1a:b3:40:09:21:95:fc:04:23:e7:8f:a3:c0:b2:
                    dd:84:79:dc:6d:3f:d9:ea:d1:65:69:71:4b:ba:be:
                    48:4f:cb:59:de:5b:4b:1a:f0:70:60:31:ff:e2:80:
                    09:8e:a9:5c:14:bc:c8:fb:4f:e2:a4:64:07:24:c9:
                    9e:c7:3f:aa:25:20:0c:7d:3e:5b:4f:3a:b4:b1:09:
                    55:03:11:08:18:88:16:1d:7d:b4:3f:ed:5f:a6:f5:
                    01:10:0e:a6:49:95:25:47:c6:71:bd:e9:b1:5c:ba:
                    84:28:c0:1b:a7:e9:87:42:44:14:e1:ed:f1:78:25:
                    48:16:79:2b:cb:5a:91:25:d0:39:94:79:54:a8:48:
                    17:e0:5e:16:1d:79:a8:1d:67:83:8d:68:f0:70:f4:
                    7f:83:92:9c:2f:4f:55:c0:87:e8:af:1a:87:10:c0:
                    f0:52:8d:cf:4f:5f:9d:29:88:51:a0:7d:46:61:56:
                    2c:eb:c5:b7:13:8f:e2:59:e1:31:c9:6d:45:9c:60:
                    fb:75:c4:00:87:d4:1f:65:85:92:6e:f4:3c:e7:ea:
                    51:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D7:3F:58:74:E0:B5:5E:73:E8:96:00:1A:76:F7:67:5E:0D:89:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338/4eb2587f-0f39-37f8-9e34-fc5695ce1299.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338/e6e72b41-233c-402b-b910-1acb71542338.crl

            X509v3 Authority Key Identifier:
                keyid:EF:83:88:C9:37:AC:D2:74:26:58:ED:FD:A2:A0:43:E9:E9:49:B3:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:f5:83:21:10:ea:b1:ed:31:77:ff:2b:c2:e9:77:71:42:26:
         b3:b0:4c:19:c8:fe:70:51:40:dc:5d:a3:b4:6d:b4:b9:7f:fb:
         9d:33:40:9c:54:25:5b:7e:e1:70:65:aa:ec:e2:2f:27:1d:75:
         c8:56:64:23:c0:13:43:60:76:0c:96:57:59:e7:d6:a3:14:95:
         03:5f:ad:8e:1a:79:e6:e4:c3:a5:77:59:09:d1:cd:d9:10:7d:
         9d:89:33:08:dd:50:a6:07:85:18:e4:c6:d7:c9:24:93:45:8a:
         65:94:d8:60:ef:9b:5e:cb:65:14:e9:22:45:f9:3e:25:ab:3b:
         86:27:60:e8:5c:31:71:36:de:27:2d:ab:56:48:42:02:e9:b6:
         9a:3d:9b:d5:c3:18:75:92:9a:d8:b4:09:a7:88:fe:a1:14:98:
         7d:02:d0:e7:dc:b6:75:d2:fb:84:e0:75:1b:2e:c0:f9:1b:38:
         9a:0e:3f:ad:a2:16:95:d4:25:06:dd:84:21:fa:0d:d8:6f:f4:
         b5:fd:bc:a8:e4:d7:6e:be:94:7d:15:b5:f1:d9:ba:aa:53:f9:
         01:e3:31:9e:1f:73:69:29:d2:42:ab:e7:cb:3b:c7:6e:0c:82:
         19:34:de:a9:a8:08:e7:5e:d3:9b:f8:31:e4:db:41:ef:f0:d9:
         2f:7d:37:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:30:45 2025 by rpki-client