Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/d1c8e9a3-24cf-3529-a567-e444eb557798.roa
File:                     d1c8e9a3-24cf-3529-a567-e444eb557798.roa (raw, json)
Hash identifier:          0kWgpTUT5H+iqOxS5C75zg0LS1stHOZV/tHn2Vsv1+0=
Subject key identifier:   B7:38:4E:B8:AE:18:B8:7B:41:A9:23:EF:2A:BB:5A:31:14:9B:3E:70
Certificate issuer:       /CN=e8950c3d-3b43-45b8-93cb-fbf99568c311
Certificate serial:       010D0C9F43285848F7C14271748D9CBDF6A58DC0
Authority key identifier: 70:85:48:33:B6:A6:96:F5:DD:B7:E0:F2:54:CA:8A:29:80:FF:49:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/d1c8e9a3-24cf-3529-a567-e444eb557798.roa
Signing time:             Sat 22 Feb 2025 14:00:52 +0000
ROA not before:           Sat 22 Feb 2025 14:00:52 +0000
ROA not after:            Fri 23 May 2025 13:00:52 +0000
asID:                     394868
IP address blocks:        115.84.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/e8950c3d-3b43-45b8-93cb-fbf99568c311.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/e8950c3d-3b43-45b8-93cb-fbf99568c311.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Mar 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f7:c1:42:71:74:8d:9c:bd:f6:a5:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8950c3d-3b43-45b8-93cb-fbf99568c311
        Validity
            Not Before: Feb 22 14:00:52 2025 GMT
            Not After : May 23 13:00:52 2025 GMT
        Subject: CN=024636f5-658e-4a45-9450-8acb5052fd57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:39:3f:d2:17:38:3a:71:9e:f6:41:4c:2f:2f:
                    a3:56:0e:6b:6c:3f:4e:8d:18:36:52:eb:a8:c5:5e:
                    a1:4d:12:b0:e1:4b:3c:a5:34:76:52:cb:a9:db:61:
                    c4:32:ac:a4:7e:3f:9c:af:25:c5:5b:84:21:8d:af:
                    14:73:4a:f9:02:e9:75:00:fb:16:bd:5d:f6:9f:50:
                    d2:b7:1f:c2:03:68:b2:bc:7a:58:bd:35:2a:6b:bd:
                    37:65:6a:b0:15:d9:0d:a4:39:44:61:de:6d:57:8a:
                    0e:ba:95:07:ae:51:a4:f1:41:91:54:a2:a1:76:5d:
                    e1:9d:c0:dc:95:f6:e8:ce:87:78:24:58:9b:6c:25:
                    de:08:b4:08:90:1b:0a:3a:6c:40:3a:ae:91:54:e4:
                    0b:03:66:2d:34:35:49:fb:9d:96:6f:b3:ef:ac:5c:
                    8c:0c:27:ee:02:de:f1:f1:0e:41:f4:08:42:b0:d9:
                    85:79:27:9c:ab:a0:47:fe:73:48:db:55:0b:92:f1:
                    c9:ec:e2:43:c8:96:0e:86:63:41:c3:91:60:14:53:
                    72:26:94:7a:8c:3a:c8:06:34:5c:b0:7c:9a:bf:db:
                    c4:7b:96:f4:50:8c:4a:94:d8:90:71:37:8c:56:95:
                    72:40:88:80:34:2e:80:d5:e7:de:4d:1b:68:26:35:
                    93:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:38:4E:B8:AE:18:B8:7B:41:A9:23:EF:2A:BB:5A:31:14:9B:3E:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/d1c8e9a3-24cf-3529-a567-e444eb557798.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/e8950c3d-3b43-45b8-93cb-fbf99568c311.crl

            X509v3 Authority Key Identifier:
                keyid:70:85:48:33:B6:A6:96:F5:DD:B7:E0:F2:54:CA:8A:29:80:FF:49:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.84.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:9f:10:1d:a0:1f:f1:ed:39:9a:2d:fd:f4:21:cf:88:f5:bb:
         41:77:e2:54:36:3b:fb:09:f2:7d:a4:0f:30:56:91:04:f8:60:
         c0:fe:6b:a0:7d:7b:85:27:1d:bc:2f:e1:22:e1:8d:71:47:27:
         71:73:21:e1:46:66:68:58:ce:5b:66:14:76:44:00:6a:a1:72:
         86:78:e7:14:a9:bd:a4:b8:50:5d:9f:a5:d5:b5:90:ea:2f:a9:
         d0:1c:b4:a2:37:43:f9:10:75:0a:22:60:35:54:20:ec:11:98:
         bd:f4:00:41:b4:e6:e3:cb:13:24:f7:13:32:c3:e0:74:98:c9:
         76:8b:42:f0:97:3c:1c:08:6e:7a:8d:c3:40:96:e6:ac:59:ae:
         b0:aa:61:00:93:16:32:ef:56:99:05:82:0a:a4:5e:b4:fa:4f:
         94:3f:74:67:6a:fb:a6:2e:02:d1:f4:60:73:df:d7:ca:77:d5:
         05:31:a7:1e:15:fa:62:8c:16:78:87:bf:46:ff:a2:57:0b:b3:
         7e:ee:7d:66:63:c7:a2:f4:6f:ed:f5:7b:05:d5:b7:16:9d:9d:
         00:2f:78:5a:0d:db:e0:bd:dc:37:c6:31:fe:82:a1:5f:d0:54:
         fd:8e:24:03:db:d5:88:a4:0c:e0:ad:34:a5:2c:30:b0:ef:85:
         2b:21:69:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 20:00:43 2025 by rpki-client