Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/ddbc3e6a-fa39-32a1-a964-47306d0a0945.roa
File:                     ddbc3e6a-fa39-32a1-a964-47306d0a0945.roa (raw, json)
Hash identifier:          9shHa3RRQ8Il6m8U0FcYf+xL41yh/ivtEZMYcSR7MfQ=
Subject key identifier:   19:78:4D:84:7F:3E:AF:2F:B0:BE:57:7C:A7:53:48:B4:42:17:FB:8A
Certificate issuer:       /CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6
Certificate serial:       010D0C9F432858494CC93A9DCB521AA36B1CF680
Authority key identifier: 50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/ddbc3e6a-fa39-32a1-a964-47306d0a0945.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     10753
IP address blocks:        172.93.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:3a:9d:cb:52:1a:a3:6b:1c:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=21bad7af-145b-47c6-a8bf-a37b9590a187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e4:3f:4b:93:37:75:b4:9b:a9:32:66:3d:45:
                    9a:7b:be:22:87:05:56:bb:76:a9:a4:b9:91:0c:06:
                    da:00:2c:9f:7c:24:7a:32:b7:7a:69:cf:66:76:55:
                    84:ec:32:b0:7d:04:39:e1:9e:31:8f:16:35:1e:b6:
                    84:f0:71:50:7d:69:10:60:34:d8:6f:fc:43:be:49:
                    7f:df:f0:57:e3:a2:03:48:85:8d:73:91:b4:82:f5:
                    db:83:0f:f8:48:5c:ee:fd:ac:08:bb:fa:28:ba:85:
                    68:90:6a:14:5c:34:47:8e:3d:43:57:78:fa:86:f0:
                    51:cb:0f:bc:5f:2c:ad:8e:c5:3c:5b:b1:15:61:c1:
                    c6:6d:9a:76:d8:2f:74:de:56:f7:d1:af:f7:49:6e:
                    40:1b:7d:57:99:68:97:60:ca:d5:4e:b7:20:9a:00:
                    94:da:3f:d9:96:74:df:3e:de:c9:2a:95:e9:4a:52:
                    50:4b:94:30:73:64:7d:90:39:dc:cb:a3:1b:f6:17:
                    d1:76:08:22:9e:5b:f1:b4:28:d0:cc:ab:20:14:45:
                    6b:ea:1a:a9:8a:ea:ad:b8:6b:3c:1e:d5:83:c2:f6:
                    a3:77:88:86:c5:bc:51:92:dd:50:1f:09:5e:0f:2e:
                    df:a2:25:4c:ce:f4:0f:88:08:4d:2a:63:10:c7:73:
                    70:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:78:4D:84:7F:3E:AF:2F:B0:BE:57:7C:A7:53:48:B4:42:17:FB:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/ddbc3e6a-fa39-32a1-a964-47306d0a0945.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.crl

            X509v3 Authority Key Identifier:
                keyid:50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.93.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:99:d5:a8:80:e9:54:d1:78:92:63:e2:9f:7a:22:aa:e8:98:
         04:66:59:df:c3:68:da:47:de:bd:b1:0e:f0:46:4d:32:0b:e0:
         80:70:c7:6a:ca:5f:82:df:66:de:22:41:14:d9:51:32:30:db:
         e5:35:78:20:13:ee:ce:8d:3f:5f:c0:61:7f:e8:2d:30:64:b2:
         90:ca:fc:dc:fb:5d:07:92:09:57:dc:89:c4:57:b6:02:9a:6b:
         9d:0d:d8:29:7e:8b:f3:24:f1:03:86:ce:3e:51:05:f1:9f:d9:
         5f:72:88:c7:64:d8:7e:bc:25:ff:0b:72:6a:5c:14:c9:5f:4f:
         fa:54:6f:f1:d1:b1:61:27:ab:39:ab:2b:43:12:a7:34:06:b0:
         9b:bf:e0:8f:89:df:16:83:c0:7e:bf:1a:fe:16:60:b3:55:9e:
         22:d0:b7:5c:7a:09:9f:03:21:23:81:ed:91:6b:b5:eb:1d:2c:
         7c:eb:6d:98:c6:dd:a1:f8:9d:5e:ba:b5:1e:cb:42:1e:ca:ed:
         14:c9:99:a3:59:a8:70:af:3d:8a:07:82:9e:a1:f8:33:63:8b:
         80:9e:4f:b0:ac:e8:09:d9:30:03:d1:6a:ae:a1:89:33:e9:27:
         6d:b0:8b:cc:8f:6b:d5:3c:88:c0:4d:5f:93:af:e0:48:25:bd:
         b6:33:55:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:51:44 2025 by rpki-client