Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/aaa18235-f4db-3113-8f20-a355b15fd54f.roa
File:                     aaa18235-f4db-3113-8f20-a355b15fd54f.roa (raw, json)
Hash identifier:          qgWFWHzPCsOwwqP+JcuKNA9X1eZiKP3lAnnAcFfIGMs=
Subject key identifier:   3B:88:1A:D2:DE:3E:12:0A:72:13:44:24:37:D6:22:9A:2B:F7:ED:0E
Certificate issuer:       /CN=a6b33052-e5a8-4f63-b264-b55c1ae1ed5b
Certificate serial:       010D0C9F43285848E9CBF071DBDFD0240656CDC0
Authority key identifier: 98:D1:67:33:F8:B7:06:E1:FB:F7:F7:C0:07:44:45:81:80:71:DC:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/aaa18235-f4db-3113-8f20-a355b15fd54f.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     46969
IP address blocks:        205.178.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:f0:71:db:df:d0:24:06:56:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b33052-e5a8-4f63-b264-b55c1ae1ed5b
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=3c0cc1e5-4b4c-4cc8-95cf-b2c03d66bae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c3:60:ad:f3:71:dc:c7:2f:7c:2c:14:f8:bd:
                    fc:07:fe:f4:f4:43:2f:93:46:ce:a1:a2:af:76:31:
                    d7:96:39:bc:2a:6d:e4:a3:71:38:37:d7:e6:7f:fe:
                    ce:d4:26:87:e6:db:fc:fe:8e:15:98:3f:cf:40:c2:
                    04:61:9e:19:14:b9:d6:74:7d:83:5a:be:28:96:cc:
                    ce:e3:fc:49:6f:52:dd:17:60:9c:11:ab:14:bc:4c:
                    e5:30:f4:17:8d:0c:8e:b2:d7:58:b7:6b:ae:da:13:
                    b0:fe:35:9b:b3:57:bd:8b:9d:95:fc:a5:13:e6:d8:
                    bc:ae:81:2b:5b:0f:03:d2:3a:d9:98:27:f0:8b:86:
                    19:3c:8b:8e:76:ee:cb:7b:f3:d1:79:0a:04:22:65:
                    c5:1f:89:d9:af:ff:e0:82:26:37:0b:92:9c:bc:7e:
                    d9:93:bb:58:b6:ea:0e:dd:dc:81:16:ab:e2:85:f9:
                    c3:36:b0:30:4b:b0:b5:0a:24:2c:3b:f9:53:d9:5e:
                    06:cc:f9:4b:ca:32:41:16:90:9e:3a:ce:27:c1:0f:
                    62:53:d1:55:9f:09:dc:df:67:d9:47:c9:fd:cd:28:
                    c8:9d:67:44:42:a9:68:31:50:9c:e7:ff:86:47:74:
                    90:d2:66:90:5b:7b:e5:89:9f:bb:16:4a:d4:de:8c:
                    f0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:88:1A:D2:DE:3E:12:0A:72:13:44:24:37:D6:22:9A:2B:F7:ED:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/aaa18235-f4db-3113-8f20-a355b15fd54f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.crl

            X509v3 Authority Key Identifier:
                keyid:98:D1:67:33:F8:B7:06:E1:FB:F7:F7:C0:07:44:45:81:80:71:DC:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.178.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:e8:15:09:3e:48:10:f0:be:64:2f:03:59:a7:18:ae:a1:51:
         97:50:b3:b3:81:fe:fe:62:71:a9:f8:c3:48:ba:e9:4e:65:10:
         14:9d:82:16:5e:cd:fb:36:5e:32:42:0d:1b:7f:8e:ab:03:0d:
         cc:3e:ed:02:ba:2f:1e:e7:6a:16:7d:df:58:25:13:5c:ee:97:
         cb:8f:f7:de:d0:e6:1d:05:db:35:1f:63:99:67:39:4f:81:82:
         ce:3c:b9:b3:2f:9c:50:e1:9d:2b:69:d7:8f:94:1f:e8:52:ac:
         01:ee:4b:ae:08:67:75:6b:fb:78:06:8f:0b:00:da:5d:15:c4:
         fd:be:4c:22:2e:d0:41:87:e9:11:e6:2d:21:f1:8c:db:01:51:
         44:22:36:80:5f:c6:5f:19:b9:16:3e:5e:58:d5:57:7d:f7:3d:
         c1:72:0e:2f:62:b9:42:eb:d5:06:55:0c:45:e8:aa:ac:76:c6:
         49:e3:be:b8:c7:7e:bf:e2:1e:a9:06:20:d5:cd:55:b6:50:1a:
         c2:7e:80:57:6e:cb:7c:0d:b6:fd:e0:7e:e5:a8:99:8b:57:ee:
         46:f3:eb:ed:47:a3:e6:3c:19:de:c2:10:90:de:e2:3f:ca:4d:
         90:68:17:7f:4b:a6:7a:3b:63:cc:f5:95:24:d5:e3:68:c2:a0:
         6d:0d:26:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:03:18 2025 by rpki-client