Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/4a741be9-7509-3402-adb8-d1f0d4158e10.roa
File:                     4a741be9-7509-3402-adb8-d1f0d4158e10.roa (raw, json)
Hash identifier:          jOj+B0YG8friDvyuZemThSgb3CydMbLmU6yajo+mQqA=
Subject key identifier:   64:18:1F:77:11:F2:29:B9:54:7F:B1:F9:36:F1:64:DC:8D:D5:C2:B5
Certificate issuer:       /CN=9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50
Certificate serial:       010D0C9F432858487FB5E6A2D1B6C305490B7100
Authority key identifier: 29:D8:39:BC:8F:B6:00:7C:FB:EB:42:7D:25:FD:CB:C4:A5:92:1C:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/4a741be9-7509-3402-adb8-d1f0d4158e10.roa
Signing time:             Fri 10 Jan 2025 14:00:51 +0000
ROA not before:           Fri 10 Jan 2025 14:00:51 +0000
ROA not after:            Thu 10 Apr 2025 13:00:51 +0000
asID:                     14618
IP address blocks:        192.230.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7f:b5:e6:a2:d1:b6:c3:05:49:0b:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50
        Validity
            Not Before: Jan 10 14:00:51 2025 GMT
            Not After : Apr 10 13:00:51 2025 GMT
        Subject: CN=5722d157-600f-45b1-9406-66f8bb8acfc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b8:5d:2f:a4:66:bb:ff:f1:28:c8:8d:6a:b0:
                    aa:57:77:63:3a:89:13:0a:55:b6:d1:41:07:19:28:
                    11:98:62:ee:40:c2:a3:f6:a4:9d:43:10:b4:e5:1b:
                    de:9e:26:be:73:4f:31:9d:04:86:c8:5a:bb:53:79:
                    c4:1b:98:4b:42:80:ac:64:f9:13:03:f9:85:fc:83:
                    64:aa:01:7d:dc:5d:8d:99:6c:31:82:df:a4:c9:70:
                    5e:8e:a8:2f:d2:a4:82:69:3a:5f:a2:1f:9d:07:58:
                    f5:ee:62:2e:5c:25:e8:4f:36:91:60:ee:08:07:13:
                    7a:4c:83:f9:ea:74:69:09:a0:89:f0:47:63:ba:2a:
                    41:13:7f:01:a6:1a:69:97:0d:fe:f4:1e:6f:c5:e7:
                    91:0d:4d:76:7a:11:f6:07:00:7b:a2:ee:2a:98:12:
                    79:db:df:27:ee:0e:7b:6a:c5:db:23:b7:35:18:ed:
                    82:f6:1a:d7:33:de:0d:3b:c8:8f:ff:d4:44:89:5a:
                    72:56:5d:d8:c0:da:7c:6b:86:f2:42:31:bf:53:13:
                    f6:15:dd:1d:73:75:17:de:aa:21:18:00:8f:bc:19:
                    c9:99:7e:23:d7:bd:37:67:98:c7:fd:10:c4:6b:24:
                    d7:11:f3:07:2c:49:6c:46:e7:fd:fd:fd:fc:62:81:
                    f7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:18:1F:77:11:F2:29:B9:54:7F:B1:F9:36:F1:64:DC:8D:D5:C2:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/4a741be9-7509-3402-adb8-d1f0d4158e10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.crl

            X509v3 Authority Key Identifier:
                keyid:29:D8:39:BC:8F:B6:00:7C:FB:EB:42:7D:25:FD:CB:C4:A5:92:1C:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.230.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:78:0a:cb:2f:b3:40:cd:3d:f0:c2:4f:3b:35:7b:a3:8c:34:
         76:ba:e8:5d:f9:23:bc:76:38:2a:61:df:42:59:4a:3e:d6:88:
         4d:fe:6b:6f:c6:8b:4e:96:6a:1b:67:17:90:2a:15:8c:2c:8c:
         61:fc:68:50:90:85:cf:43:44:63:03:d1:a9:bf:aa:b2:a8:e2:
         22:65:42:2b:87:88:db:d5:ca:8b:59:0d:5a:09:65:c0:7f:1c:
         aa:73:3e:df:50:b8:69:17:bc:e4:c4:50:19:a6:3b:b3:c4:72:
         1f:01:e2:97:47:a6:3f:bc:03:7c:a5:ae:75:b9:cd:60:95:4a:
         92:d8:d9:0c:a8:c5:f5:f3:fd:a9:68:73:47:12:3d:8f:f9:9d:
         90:85:52:69:e0:6b:bd:39:30:01:d4:9a:67:0d:01:66:d7:65:
         8d:64:f6:75:a7:4f:a9:ea:b4:5c:1e:ce:ba:cc:88:9b:f5:95:
         ef:c8:fd:b5:7c:58:13:b8:1e:f6:81:84:c5:fa:d9:66:1e:aa:
         83:b0:f1:96:39:3e:6a:68:1a:a8:56:f6:ef:c3:0f:55:6b:b9:
         bf:0f:09:a3:3e:cd:c3:f4:c2:8a:e4:d8:bd:92:d5:95:a2:32:
         73:91:de:88:a6:a4:1b:b9:e5:b4:a7:8e:79:df:ee:c1:0e:05:
         91:7a:ac:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:46:27 2025 by rpki-client