Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f/320d186b-899d-3775-8237-f1a31d5d736d.roa
File:                     320d186b-899d-3775-8237-f1a31d5d736d.roa (raw, json)
Hash identifier:          Op7UGsx3y98U1ffI24plv8rhxFfE/ouaUxW/mIzb51E=
Subject key identifier:   45:53:BD:A2:41:48:DC:60:8F:CC:7D:34:9C:BF:60:F6:B4:4A:06:3A
Certificate issuer:       /CN=1a6caf55-a53e-446e-9958-ee41f172c88f
Certificate serial:       010D0C9F432858489A3B42A0439778AD1C91F600
Authority key identifier: 10:DF:30:B3:02:46:F3:B0:F2:8A:50:08:46:67:1D:3E:5A:E8:44:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f/320d186b-899d-3775-8237-f1a31d5d736d.roa
Signing time:             Mon 20 Jan 2025 02:00:40 +0000
ROA not before:           Mon 20 Jan 2025 02:00:40 +0000
ROA not after:            Sun 20 Apr 2025 01:00:40 +0000
asID:                     14618
IP address blocks:        192.112.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f/1a6caf55-a53e-446e-9958-ee41f172c88f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f/1a6caf55-a53e-446e-9958-ee41f172c88f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9a:3b:42:a0:43:97:78:ad:1c:91:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a6caf55-a53e-446e-9958-ee41f172c88f
        Validity
            Not Before: Jan 20 02:00:40 2025 GMT
            Not After : Apr 20 01:00:40 2025 GMT
        Subject: CN=858447dc-abb5-4de4-97fa-eed365ef4ad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a6:fa:26:bf:29:48:67:f0:e8:4b:d2:c4:ab:
                    ec:13:cb:d8:87:eb:e6:73:97:ed:fa:e8:2c:a3:bc:
                    d9:01:29:b2:d8:e8:35:f2:5c:da:e7:fd:bb:e4:79:
                    f4:ee:86:c0:85:a8:03:b8:c5:c5:c4:ff:91:7b:1b:
                    80:9c:23:5f:e6:1d:70:48:2b:99:b1:b8:c6:01:49:
                    9f:96:ca:ae:a9:bb:cc:a8:31:1a:0a:fe:ea:d4:8e:
                    87:cd:cf:a9:ee:a9:24:c6:e9:e8:46:ea:16:22:25:
                    87:c1:12:a6:06:5b:fc:71:7f:2d:2d:93:01:08:6f:
                    07:5a:40:99:61:85:bb:b7:5e:b8:c6:46:1f:5d:04:
                    77:59:30:2f:98:26:55:94:57:b3:e7:58:0b:8f:d5:
                    7f:ff:3f:e4:a4:dd:10:8c:f8:90:9b:fb:3e:65:fc:
                    3c:46:45:f3:c6:64:f4:80:f7:72:c1:cb:74:d4:de:
                    37:e3:31:74:3d:e4:54:31:81:ac:26:a5:cc:19:8b:
                    94:15:6a:c8:ef:6c:d5:95:5a:02:7c:cb:23:e3:86:
                    03:01:d4:26:da:b6:15:f7:7e:90:12:fb:f5:dd:49:
                    8e:73:cd:67:55:2f:5f:99:ea:3b:7e:7d:c9:12:5f:
                    ef:c7:ae:1c:ba:04:dc:5a:12:eb:32:d2:37:30:e3:
                    9d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:53:BD:A2:41:48:DC:60:8F:CC:7D:34:9C:BF:60:F6:B4:4A:06:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f/320d186b-899d-3775-8237-f1a31d5d736d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f/1a6caf55-a53e-446e-9958-ee41f172c88f.crl

            X509v3 Authority Key Identifier:
                keyid:10:DF:30:B3:02:46:F3:B0:F2:8A:50:08:46:67:1D:3E:5A:E8:44:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.112.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:ff:7a:a7:d1:82:4e:a0:a3:e6:30:b7:a5:77:ad:a2:54:8f:
         57:82:84:62:94:ce:63:b2:30:ba:a4:71:e9:fc:e1:fd:e7:3d:
         2e:1f:06:52:10:8f:ad:c0:bd:1a:d7:71:43:57:87:8a:f1:5b:
         a2:1a:4b:d1:fe:fd:2c:54:f8:36:27:9e:79:d2:92:f3:7d:ce:
         ef:35:80:d0:2a:e6:bd:cc:de:d3:99:c1:83:6f:55:39:06:fe:
         f8:e9:97:4d:bf:31:44:be:de:a0:ee:37:13:da:1b:c5:35:89:
         2b:2c:2b:08:3b:39:5d:3e:25:0e:5a:ee:33:9f:6f:63:2c:e7:
         79:44:eb:78:6f:6c:13:d6:53:ed:86:8b:9d:5a:3a:2a:ec:54:
         08:38:28:07:76:3c:2f:91:72:a2:29:ff:6d:c5:ed:ff:42:0e:
         f9:81:63:22:21:ed:46:7b:4f:75:e9:fa:14:65:4a:22:89:92:
         22:10:e4:36:9a:67:35:7b:d3:fc:fa:0e:bb:46:7f:52:99:6e:
         65:5d:b5:88:98:33:2d:cb:b6:20:0b:ab:f0:9e:f3:e8:1b:2c:
         c4:23:c5:07:14:10:ea:c2:ae:e0:90:5c:9c:04:5f:01:76:38:
         24:43:2a:5b:05:5a:b3:7a:eb:e8:91:16:16:c6:2a:4d:86:fd:
         94:84:2c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:41:01 2025 by rpki-client