Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/a6d89966-8ce5-3e5b-83c8-f1a003b5e9bb.roa
File:                     a6d89966-8ce5-3e5b-83c8-f1a003b5e9bb.roa (raw, json)
Hash identifier:          eHSuwfzUjepWCKjadXCbOby6EQg7WIYkQ33wXW/hcok=
Subject key identifier:   0A:9F:34:88:18:39:8F:FE:C2:CB:61:FE:6A:65:EA:19:25:7A:3D:41
Certificate issuer:       /CN=233d8eef-51df-487b-9edb-f16ba403f442
Certificate serial:       010D0C9F43285848E16BDB45C843766FF9A688C0
Authority key identifier: 56:85:06:EA:8A:34:47:B6:12:B1:A2:1F:DE:DD:5A:7B:60:81:6F:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/a6d89966-8ce5-3e5b-83c8-f1a003b5e9bb.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     393755
IP address blocks:        192.102.255.0/24 maxlen: 24
                          2607:3380::/40 maxlen: 40
                          2607:3380:1100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:db:45:c8:43:76:6f:f9:a6:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233d8eef-51df-487b-9edb-f16ba403f442
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=b9861428-50b8-4c5b-aacb-68e9e21e3b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:39:ba:ef:a5:2f:83:a9:20:aa:f2:25:48:31:
                    f1:a6:92:a5:b1:27:8c:59:52:5b:bc:23:2e:86:0e:
                    13:fa:84:4a:49:5a:6f:3a:a6:ed:21:64:67:e5:5b:
                    15:e6:9b:75:be:96:c9:d1:8d:8e:fd:a9:91:0f:31:
                    86:31:ae:41:10:67:87:a2:a5:2d:74:a6:35:be:11:
                    6a:88:0a:02:81:7b:b2:79:eb:bf:c5:ca:19:81:e3:
                    ee:59:ea:de:e4:85:2c:ed:c8:b6:70:4f:46:36:33:
                    3e:4b:e7:f8:4c:56:89:a9:ac:ff:ff:da:42:6f:6e:
                    26:60:67:db:fc:a4:05:3b:35:0c:b5:9a:6c:6c:52:
                    ae:5b:44:89:47:38:69:be:c4:35:4c:53:8a:2f:d4:
                    bb:1a:8c:0f:54:20:91:11:bb:25:51:65:78:88:8c:
                    54:58:cf:91:63:e6:76:d2:69:81:16:5a:cc:46:45:
                    da:28:3c:3a:d0:8d:41:7c:08:45:dc:fc:51:0c:fe:
                    23:4d:ba:5d:6b:79:e4:72:eb:47:3a:2a:6d:cb:4e:
                    1b:54:9f:0b:0b:e8:a0:e7:04:fa:5e:f5:30:7a:91:
                    5b:e7:26:49:b1:17:1a:f3:a0:c0:ac:26:1e:a8:73:
                    6c:2c:13:d4:05:ff:a4:91:76:08:ef:93:1c:ae:40:
                    e4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:9F:34:88:18:39:8F:FE:C2:CB:61:FE:6A:65:EA:19:25:7A:3D:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/a6d89966-8ce5-3e5b-83c8-f1a003b5e9bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.crl

            X509v3 Authority Key Identifier:
                keyid:56:85:06:EA:8A:34:47:B6:12:B1:A2:1F:DE:DD:5A:7B:60:81:6F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.102.255.0/24
                IPv6:
                  2607:3380::/40
                  2607:3380:1100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:2f:38:2f:4a:25:c9:1c:5b:3b:8d:55:99:23:23:86:03:c8:
         1f:2d:e3:34:c7:f6:5f:fa:a0:0e:8c:05:f8:70:a4:e9:3c:27:
         7b:e7:1c:54:c2:a8:4c:9f:f2:fb:73:07:77:99:c6:72:eb:34:
         d8:84:6b:4b:59:03:e9:3a:51:e8:77:c5:af:ff:4a:15:5f:f3:
         83:5e:6c:0b:80:b8:aa:0c:f4:18:1b:47:c7:ed:7f:6a:30:c4:
         97:20:33:ef:7b:3f:a9:b9:df:c7:99:f1:ab:5c:e0:62:6b:15:
         70:18:e2:3d:a9:0c:e9:0e:59:94:8d:58:b4:55:4b:ea:ce:8b:
         12:21:63:32:89:2f:67:df:45:54:d0:d3:31:01:d5:c4:72:e8:
         c6:a4:b0:04:45:35:37:ae:86:16:fd:48:8b:ec:08:bf:f4:85:
         39:71:ff:7b:35:c8:3d:96:dd:ee:79:9b:c4:3e:cb:97:51:3e:
         21:49:9e:f6:fe:7b:83:3a:45:59:4b:3d:ce:d9:65:f0:f6:b8:
         eb:6d:a8:25:5b:53:db:02:8c:ad:83:52:41:9d:e3:7d:a1:f5:
         28:3f:76:96:86:a5:8e:95:3f:0c:f8:be:c2:63:12:9c:4b:87:
         74:d6:7a:98:e2:84:ac:43:58:6c:2f:b2:b7:1d:b6:a9:42:a5:
         55:e1:8f:04
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 12 17:00:03 2025 by rpki-client