Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/4d21e3cc-251d-359f-9ce2-465d97234a8a.roa
File:                     4d21e3cc-251d-359f-9ce2-465d97234a8a.roa (raw, json)
Hash identifier:          SmMfTynC534N72YtvLeJUb8cymjJLMosIJUg3GpkaEU=
Subject key identifier:   A3:B8:6E:62:5B:55:C5:4F:E6:6A:21:AA:8B:80:50:EE:6F:6F:DA:05
Certificate issuer:       /CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b
Certificate serial:       010D0C9F43285848C2B64FE52576B8B814146C00
Authority key identifier: 0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/4d21e3cc-251d-359f-9ce2-465d97234a8a.roa
Signing time:             Mon 03 Feb 2025 14:00:52 +0000
ROA not before:           Mon 03 Feb 2025 14:00:52 +0000
ROA not after:            Sun 04 May 2025 13:00:52 +0000
asID:                     399668
IP address blocks:        204.10.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:b6:4f:e5:25:76:b8:b8:14:14:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b
        Validity
            Not Before: Feb  3 14:00:52 2025 GMT
            Not After : May  4 13:00:52 2025 GMT
        Subject: CN=90c3303c-1588-4d6e-9313-7fdbaa645fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ae:1c:a0:70:fb:3d:7d:f7:0d:92:8d:1f:50:
                    41:1f:e8:a7:60:de:9c:d2:0b:06:60:f9:f7:c8:1f:
                    b6:88:3c:98:8f:b3:6b:d2:b1:b6:34:2d:36:4a:74:
                    41:dd:09:85:8e:55:a9:04:83:3a:c7:b6:57:ea:cd:
                    f1:7f:58:fa:55:12:12:f2:31:82:ea:4f:26:4f:72:
                    a3:98:54:5f:e3:7d:05:64:90:12:65:ac:20:e1:e7:
                    52:21:7b:75:b2:68:90:30:07:89:6b:6e:64:4d:f5:
                    7a:1d:5c:4e:c6:d9:ec:cf:55:7b:fc:13:55:b5:fb:
                    2a:18:58:b6:cc:89:3f:1f:de:42:10:ba:f9:06:82:
                    b5:c8:ea:92:a4:0c:ee:87:c2:f0:b0:7c:fc:7a:44:
                    5b:6e:36:3a:5b:ae:df:b7:9a:8e:a4:85:19:5d:9f:
                    12:ac:e3:3c:a1:f2:a9:d1:c7:8f:bb:36:0d:df:8f:
                    83:a4:b4:29:fa:43:a0:4c:6b:b7:36:f6:34:7a:d4:
                    1f:e8:c9:4f:f4:79:1d:b0:6f:78:e2:97:94:8c:62:
                    83:cd:2d:4f:03:fd:0c:ed:9a:72:5f:cc:2a:30:86:
                    e7:f8:b7:65:e1:62:12:1a:5f:db:4f:e5:c0:29:69:
                    a0:31:cd:12:72:f3:8f:0a:f4:a2:2c:18:9a:d5:13:
                    3d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B8:6E:62:5B:55:C5:4F:E6:6A:21:AA:8B:80:50:EE:6F:6F:DA:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/4d21e3cc-251d-359f-9ce2-465d97234a8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl

            X509v3 Authority Key Identifier:
                keyid:0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:8f:55:48:80:30:d4:79:70:c7:ba:ed:e5:92:20:50:67:8c:
         2a:6e:d9:cb:df:3a:95:6a:1e:fd:82:22:9b:0a:d0:21:25:06:
         b7:de:b2:b4:3f:d6:b8:58:c2:ae:e0:8f:4b:d4:56:e6:46:4e:
         90:2c:4f:26:ef:e1:29:06:dc:39:a1:35:e1:5f:dc:89:f7:6f:
         ca:0a:20:17:d4:e1:51:84:6c:3f:e5:5e:27:a2:22:5c:8c:ab:
         4b:88:56:0e:86:d2:9d:1e:0b:c3:cd:a6:b5:2c:69:25:aa:f6:
         b6:75:38:fe:42:7a:55:b4:e7:cd:da:4e:79:e5:0b:c2:f0:30:
         04:f2:e9:7d:17:df:9a:6b:15:db:e9:46:b2:12:02:3f:e4:40:
         1a:f7:93:a4:f8:fb:6a:b4:e7:31:15:90:fc:a5:b0:e9:79:61:
         b5:a5:e8:df:40:d9:85:ac:2d:dd:7a:9e:f3:fe:c6:ef:bf:8a:
         57:90:6d:ed:34:7a:cb:09:f9:54:92:9e:ec:0e:0e:6c:a3:83:
         c9:4c:b6:0b:69:55:92:32:b0:93:01:4c:91:aa:92:04:a5:dc:
         97:7c:3f:a2:45:b2:06:cb:ce:67:7f:c5:88:e0:07:ee:82:14:
         7f:68:11:d7:4c:aa:1f:c3:13:be:3c:08:0b:61:fa:b5:8b:6e:
         0f:a5:ff:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:18:46 2025 by rpki-client