Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/6c1caffb-51ac-3a7e-b148-a7d1af98379a.roa
File:                     6c1caffb-51ac-3a7e-b148-a7d1af98379a.roa (raw, json)
Hash identifier:          gDbOxNcMGTOABqz6enQ+VDo0hmDZalRY2cSW/MN96UI=
Subject key identifier:   01:65:C4:61:D8:4B:8B:A7:28:E3:7D:B8:68:75:BF:90:D8:6A:5C:8A
Certificate issuer:       /CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
Certificate serial:       010D0C9F43285848CDE11616EB62525AAE2E4C58
Authority key identifier: 18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/6c1caffb-51ac-3a7e-b148-a7d1af98379a.roa
Signing time:             Fri 07 Feb 2025 14:00:53 +0000
ROA not before:           Fri 07 Feb 2025 14:00:53 +0000
ROA not after:            Thu 08 May 2025 13:00:53 +0000
asID:                     393262
IP address blocks:        192.111.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:e1:16:16:eb:62:52:5a:ae:2e:4c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
        Validity
            Not Before: Feb  7 14:00:53 2025 GMT
            Not After : May  8 13:00:53 2025 GMT
        Subject: CN=7d17190d-27d4-470d-910c-af9c087e9608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:69:76:6b:3a:83:e2:ec:b4:5e:25:cd:ec:f4:
                    0d:01:54:f7:12:80:ed:83:47:de:64:8e:6e:90:a9:
                    7c:26:72:fe:30:af:2a:c2:63:24:93:39:a8:b1:58:
                    2b:ac:46:0d:fc:37:f3:4d:ef:3b:d9:ec:24:ee:d0:
                    31:5a:75:c4:7b:3f:66:ca:a3:ea:f9:a6:51:70:1b:
                    f5:0f:38:83:a5:43:f4:23:7c:a2:dc:f8:c9:f1:16:
                    0e:a2:6e:c9:40:fb:a6:43:50:e0:46:bb:c9:96:23:
                    25:5e:69:c9:d0:0a:f0:8d:a1:92:0a:ea:5a:10:12:
                    c0:e3:55:2c:53:f7:ed:6d:7e:5e:8c:9e:de:7f:03:
                    f7:8b:0a:b8:8c:34:1b:32:73:33:b0:9d:7e:3d:e4:
                    ea:11:4d:0d:bd:34:42:c0:bd:32:7d:7d:3e:53:a6:
                    53:33:8e:3f:02:88:73:a5:ac:3b:75:36:9f:f5:09:
                    b5:0e:55:ad:b8:8b:a3:85:03:4b:2e:45:2e:9e:03:
                    f0:97:dd:33:5c:87:0c:c8:e2:64:4a:61:61:f2:f9:
                    89:c2:50:83:49:47:7c:81:5d:e4:d3:71:a4:37:28:
                    bc:c0:2e:83:9b:26:d0:e5:c8:42:ec:02:e3:ca:04:
                    c5:7c:31:f0:75:66:fa:e6:39:02:f7:7c:4f:4d:be:
                    dc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:65:C4:61:D8:4B:8B:A7:28:E3:7D:B8:68:75:BF:90:D8:6A:5C:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/6c1caffb-51ac-3a7e-b148-a7d1af98379a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl

            X509v3 Authority Key Identifier:
                keyid:18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:43:25:74:2a:c0:27:d3:57:d0:d2:ed:b1:ed:6c:02:cf:a8:
         50:70:46:bd:73:96:02:c5:66:62:68:5d:63:42:3e:dc:c9:ab:
         d9:c2:32:10:7e:e5:c7:bd:30:c1:22:35:fb:a9:99:63:ad:7c:
         09:2a:e6:2b:d6:58:7c:96:c8:7c:c6:af:1b:00:bc:3a:bd:69:
         18:1b:c8:14:59:9e:5f:ca:c5:3e:0d:a0:37:c8:06:a1:43:50:
         d5:ec:3d:93:22:17:c4:37:07:f9:9d:94:d6:3c:d3:69:ef:40:
         92:91:e2:b9:32:01:47:83:a6:08:2c:d4:2d:fe:c7:3a:f3:11:
         d5:96:23:da:c7:4f:08:15:76:0d:3d:f4:91:83:26:78:05:37:
         df:d3:2a:1e:5f:18:4e:12:fb:af:9b:21:62:d1:0b:f6:52:7b:
         03:9e:3e:e0:15:2d:91:e8:a4:56:b0:3f:0d:dc:e3:0d:ff:a5:
         d2:e0:68:52:14:f1:5a:9d:22:4e:dd:d4:15:93:4c:b3:5f:63:
         4b:f1:39:f4:51:b1:b9:b8:46:e9:96:b7:0e:d5:d5:66:75:ab:
         0d:8f:97:63:25:fa:14:56:c9:b3:0a:cf:38:5e:00:28:2a:69:
         33:83:3e:8e:f5:ed:3c:90:51:8a:97:1a:0c:46:4c:66:67:73:
         b2:1f:b6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:00:28 2025 by rpki-client