Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/499089bd-aa5f-3a83-bcb5-9bb09bd1fff5.roa
File:                     499089bd-aa5f-3a83-bcb5-9bb09bd1fff5.roa (raw, json)
Hash identifier:          PK7+YxH1sIzBmXJRIiIgqKxlEgIVP+qWdZjmC/HXs74=
Subject key identifier:   E6:D3:31:49:03:14:58:6D:BD:A1:E6:AE:0B:0E:56:30:97:00:B5:A0
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584911A009B5DD130B43AE4B6A80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/499089bd-aa5f-3a83-bcb5-9bb09bd1fff5.roa
Signing time:             Mon 03 Mar 2025 20:25:01 +0000
ROA not before:           Mon 03 Mar 2025 20:25:01 +0000
ROA not after:            Sun 01 Jun 2025 19:25:01 +0000
asID:                     401152
IP address blocks:        168.93.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:11:a0:09:b5:dd:13:0b:43:ae:4b:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar  3 20:25:01 2025 GMT
            Not After : Jun  1 19:25:01 2025 GMT
        Subject: CN=1078726f-d0a9-49f9-88dc-c878d27bb1f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:24:be:35:73:94:44:05:cc:65:f4:07:ee:43:
                    e0:20:66:d6:e5:e7:ca:77:d4:93:72:e4:4a:85:38:
                    a8:25:46:9e:1c:1d:46:cc:a1:77:a6:d7:1d:ed:67:
                    b7:03:53:aa:63:67:8b:4a:52:dc:a8:3c:5a:5a:f2:
                    ef:bf:a3:e4:dd:a3:5f:2d:36:e1:a6:f7:ed:25:b3:
                    80:7c:90:49:d1:2d:00:2f:84:b5:02:3e:80:2f:07:
                    95:bf:61:ef:e9:ef:3e:15:e4:38:a3:02:ce:0b:1e:
                    22:d1:ca:25:46:7e:30:ce:47:ea:8c:be:6d:42:aa:
                    b8:68:88:24:ac:44:fc:f3:fa:2e:fd:33:fa:06:2d:
                    e6:8d:6a:6c:4b:8b:2a:3d:71:82:ce:68:6e:27:a3:
                    06:b3:9a:53:78:51:85:8c:d4:a7:52:a8:61:f1:ec:
                    6d:67:6d:e9:01:4e:4a:8e:b7:65:a1:ad:18:5c:4f:
                    a3:22:67:b1:7d:b1:ba:52:4a:af:2c:0e:88:03:8c:
                    94:00:7a:96:a8:02:f1:97:31:e5:80:06:93:32:1d:
                    69:31:d9:4d:e8:46:fc:34:8a:97:20:8c:bf:55:1b:
                    7c:d7:6b:39:7d:06:6f:ef:50:a7:6e:a5:41:8e:f0:
                    52:15:3e:5f:8a:02:4b:6e:a0:3e:ff:59:1a:a5:2f:
                    80:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D3:31:49:03:14:58:6D:BD:A1:E6:AE:0B:0E:56:30:97:00:B5:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/499089bd-aa5f-3a83-bcb5-9bb09bd1fff5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:31:4e:1b:01:77:d8:b4:c0:a8:16:f6:e0:c5:eb:80:76:e7:
         d7:74:14:58:60:51:05:29:7c:73:ca:be:37:6c:81:75:d1:79:
         78:c9:a1:9f:3c:18:31:d4:ff:b5:bd:50:b3:9c:02:d7:b0:7b:
         e6:5f:60:6d:e0:31:e7:3c:13:d4:1d:67:52:4a:8d:80:97:b3:
         f0:05:5d:59:0e:98:78:df:24:d4:f6:87:c5:f5:e0:32:54:87:
         31:31:59:da:e1:d7:a7:19:5c:1e:2d:a7:7a:f6:db:49:ed:a8:
         09:3e:cf:de:86:e1:fe:05:4c:9c:c6:8a:58:9f:99:81:13:ef:
         f0:25:67:c8:7f:c3:d1:e6:d6:a4:7c:3f:dd:c5:e1:f9:93:06:
         a3:72:f6:e3:18:a7:c4:2f:71:5a:23:70:3a:29:50:f4:c9:8c:
         9b:e1:7a:b1:71:83:bb:d1:95:8a:a5:35:ba:c9:ce:71:dd:e3:
         a0:53:e1:63:2a:23:e4:67:1b:3d:5e:a7:63:5b:8b:b4:d1:eb:
         34:80:f8:3c:82:fb:a0:c6:3e:a9:14:da:89:1b:14:99:29:74:
         2b:6d:73:d5:16:d0:44:43:56:4e:71:c3:58:4f:cd:c6:e3:5e:
         d0:75:a7:e2:28:6a:14:90:6b:e0:d8:23:32:90:b9:96:34:87:
         43:02:64:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:17 2025 by rpki-client