Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/92c56ef3-c022-3eea-bba3-f878d33c7c11.roa
File:                     92c56ef3-c022-3eea-bba3-f878d33c7c11.roa (raw, json)
Hash identifier:          eQZFuqLOS3ybtMltLzxjV8dX24waI32V/b6m71Xaopk=
Subject key identifier:   FD:A5:FE:BC:AE:76:A7:53:84:92:84:6D:16:28:52:85:8E:DF:43:33
Certificate issuer:       /CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
Certificate serial:       010D0C9F432858493243D946FFFF08AFBB5AEC00
Authority key identifier: D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/92c56ef3-c022-3eea-bba3-f878d33c7c11.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        192.80.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:d9:46:ff:ff:08:af:bb:5a:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=c0ef0995-2fc8-4454-8ba7-6887aff6508e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a7:99:d2:b3:ed:e6:5d:5a:b9:bc:26:e9:08:
                    ed:b8:da:40:ee:41:fc:12:1a:8e:48:63:40:f5:c4:
                    64:e3:ca:38:25:f5:a5:22:8a:7d:f7:f6:11:20:23:
                    c0:f8:c3:2a:80:a4:27:36:3e:6e:bb:3b:ea:c1:cd:
                    c8:88:53:34:d7:9b:5c:f5:ec:c0:57:52:df:17:a2:
                    9d:a2:6d:b6:03:92:35:06:f5:c8:9f:2b:5d:01:08:
                    09:65:65:5f:ce:f6:c5:e6:e9:8f:d7:dd:bb:c2:6b:
                    3d:e7:b3:b3:f8:55:17:27:b5:38:da:68:5f:78:85:
                    bf:76:c9:53:79:88:72:bb:5e:b5:a5:00:43:31:3e:
                    69:34:35:6a:77:59:c4:37:61:ef:2e:c9:3e:44:36:
                    b1:bd:7e:2d:29:ea:28:81:a5:63:f8:fa:b7:35:3e:
                    50:21:8a:22:61:6e:f2:f5:c3:23:16:d1:42:2e:09:
                    4b:5a:81:3b:b0:3e:45:df:c8:49:0d:d9:0a:52:04:
                    e6:b6:ae:0c:0a:19:a5:01:57:3e:11:4d:22:eb:83:
                    8d:65:d2:e1:f8:14:11:67:2f:44:19:97:46:b7:8e:
                    38:a3:dd:e9:86:9c:b0:1f:ee:bb:0c:9b:f6:08:cf:
                    11:a5:4c:83:6e:08:45:0a:8a:12:82:f1:4c:0e:d7:
                    1c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A5:FE:BC:AE:76:A7:53:84:92:84:6D:16:28:52:85:8E:DF:43:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/92c56ef3-c022-3eea-bba3-f878d33c7c11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl

            X509v3 Authority Key Identifier:
                keyid:D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:74:c7:fb:ad:ac:b7:27:cf:05:18:c7:1c:6d:1b:68:ad:66:
         ae:dd:cf:00:04:17:cb:0b:ce:68:7f:ff:42:31:5e:34:5d:2d:
         86:06:68:2f:c4:32:da:6c:98:38:ba:d6:4c:07:62:fe:c2:52:
         b9:7d:07:27:2d:e1:18:a7:91:d5:f8:de:54:d4:bb:fd:87:54:
         49:52:14:68:90:19:af:eb:97:a0:33:53:c0:ec:72:b0:89:24:
         c5:7a:c0:c2:ff:93:95:56:16:ce:d7:30:f4:50:98:90:c6:8a:
         d5:0c:35:92:75:8d:b3:5a:a4:2f:b5:fa:0d:97:c8:48:88:89:
         26:82:19:6a:de:0a:82:82:02:c8:e6:f4:89:c1:23:02:cf:bb:
         36:6c:99:4d:87:a4:c1:92:92:67:ed:4f:3b:40:0a:8f:7b:0c:
         48:7d:86:38:84:05:25:c8:20:28:47:19:ec:d9:ee:aa:93:a1:
         18:fa:33:8c:53:bf:ab:81:ef:66:ab:9f:7b:66:25:2f:89:e0:
         fd:d4:f7:ae:e2:a7:90:14:4a:e7:05:d4:b9:72:bf:e6:d5:d8:
         8f:01:31:06:56:70:5d:f7:ba:49:40:4d:5b:3c:29:09:0b:ce:
         d5:85:f1:f2:26:94:39:5d:b7:71:c2:f2:f3:36:e3:f8:15:11:
         50:9b:38:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:31:26 2025 by rpki-client