Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/8d980488-329f-3b3d-8944-c85faea82b0a.roa
File:                     8d980488-329f-3b3d-8944-c85faea82b0a.roa (raw, json)
Hash identifier:          33FoG9STJXlrEHkQOB3GqVbhRiLrkd+LgxquDqcUKi0=
Subject key identifier:   51:38:58:D8:4E:FE:A4:97:BC:3C:E7:02:0D:35:7D:34:E4:33:13:25
Certificate issuer:       /CN=41b3b885-79da-40ed-ab0b-ce4a30f770db
Certificate serial:       010D0C9F4328584917DC24201AFADD5D7BEDF080
Authority key identifier: D0:86:28:4A:65:DA:2D:21:42:61:27:16:EE:AE:44:F7:29:E6:DB:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/8d980488-329f-3b3d-8944-c85faea82b0a.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     203
IP address blocks:        192.136.176.0/20 maxlen: 24
                          204.10.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:24:20:1a:fa:dd:5d:7b:ed:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41b3b885-79da-40ed-ab0b-ce4a30f770db
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=09b63026-3b69-4a59-9656-52c0743d576d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c3:ea:65:97:e8:c8:d7:7d:17:f2:11:03:a6:
                    a9:57:05:33:0c:6b:92:42:52:f8:cb:7c:81:f9:2a:
                    89:01:ad:5f:2f:2a:37:11:72:ca:e3:cb:f6:6f:1d:
                    64:76:01:05:d7:81:37:40:da:e6:54:2e:c6:6b:59:
                    78:65:e7:1a:bd:3d:ec:20:7d:3e:d2:2f:fd:8c:12:
                    6f:08:bf:07:75:57:ec:cd:64:98:ec:5d:18:59:d5:
                    fc:02:bd:00:86:37:69:45:8d:d6:f6:8e:6e:e5:cd:
                    e7:d5:0f:2c:55:18:cd:07:04:6c:bc:a7:b8:a9:e8:
                    97:3f:0b:36:cc:e8:32:3c:f5:d1:09:bf:ef:b1:c0:
                    98:e5:55:a7:09:4f:c6:bd:b0:12:3d:ef:04:eb:82:
                    c9:a7:28:8e:c1:d8:70:cf:c5:b0:06:ff:91:76:3c:
                    46:b8:1a:be:46:93:f3:d7:b0:2d:8c:e6:58:71:7b:
                    4b:ed:42:db:17:19:45:26:af:78:2b:46:d1:e8:6d:
                    07:e1:6d:5b:1a:f1:72:5b:76:b1:4d:19:cc:58:4d:
                    e5:37:a0:db:b6:b1:c5:93:51:71:02:2e:eb:36:24:
                    ff:b6:f1:5d:5c:30:07:92:52:09:19:31:7c:40:6b:
                    09:a8:6c:ed:66:4b:14:c7:30:5a:88:54:c7:a5:4e:
                    de:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:38:58:D8:4E:FE:A4:97:BC:3C:E7:02:0D:35:7D:34:E4:33:13:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/8d980488-329f-3b3d-8944-c85faea82b0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.crl

            X509v3 Authority Key Identifier:
                keyid:D0:86:28:4A:65:DA:2D:21:42:61:27:16:EE:AE:44:F7:29:E6:DB:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.136.176.0/20
                  204.10.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:59:db:e8:a1:cc:77:4f:28:b3:1d:13:3e:a3:2b:a7:96:6b:
         aa:4a:71:d6:44:ec:f6:81:e0:74:ae:f3:3e:2d:1d:7b:f5:a2:
         94:2d:02:31:d9:b1:6a:9a:e8:28:8f:89:b2:cb:b1:b1:14:83:
         80:45:53:e1:c9:3f:dc:ad:38:d0:36:e0:7b:33:71:3d:84:21:
         04:a5:82:da:12:82:b1:0c:2b:8f:05:e5:b8:9c:ac:0d:8f:29:
         bf:3f:84:3a:6d:8d:9e:d9:be:4c:8c:86:84:e0:0a:a4:bc:96:
         24:6c:9a:36:87:54:61:6f:38:ef:02:5a:d8:b4:c1:a1:de:af:
         17:36:bb:78:df:35:3f:0f:d0:c3:6e:7b:6a:45:ae:8f:ec:a4:
         95:6c:c5:0f:1a:d8:66:8a:2d:a8:23:19:cc:87:e2:e9:7c:0d:
         06:d3:93:a5:7a:13:5c:46:fd:08:74:a2:c5:af:dd:80:9f:41:
         5f:80:71:f3:65:29:2f:73:a9:4d:b2:ab:e6:d2:bd:0c:93:17:
         40:74:f3:c4:2f:c8:49:e1:01:d5:c9:bc:c0:90:7e:20:4e:e4:
         10:26:0f:8f:07:cc:d6:01:2c:be:69:7e:da:d3:27:75:05:5e:
         73:9c:a1:a6:a3:96:9c:8e:ae:ed:3a:06:55:9c:65:4d:32:47:
         bf:6b:b3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:10:37 2025 by rpki-client