Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/1801d3d0-3756-308f-991c-268b40e2a0da.roa
File:                     1801d3d0-3756-308f-991c-268b40e2a0da.roa (raw, json)
Hash identifier:          pIIpC1Rk8mezBpbfggG5FgVWkhVbr4KJyPLEc4sgh0k=
Subject key identifier:   56:07:87:9F:A5:11:8C:35:CA:69:05:BD:33:2F:11:05:3D:66:E0:7F
Certificate issuer:       /CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
Certificate serial:       010D0C9F4328584937D93AF905074CC9C0399880
Authority key identifier: 83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/1801d3d0-3756-308f-991c-268b40e2a0da.roa
Signing time:             Mon 17 Mar 2025 13:00:52 +0000
ROA not before:           Mon 17 Mar 2025 13:00:52 +0000
ROA not after:            Sun 15 Jun 2025 13:00:52 +0000
asID:                     30045
IP address blocks:        205.210.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:37:d9:3a:f9:05:07:4c:c9:c0:39:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
        Validity
            Not Before: Mar 17 13:00:52 2025 GMT
            Not After : Jun 15 13:00:52 2025 GMT
        Subject: CN=ac0b28d5-fc2e-4416-ae13-6cb0709dd9b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6d:34:4a:de:78:d1:49:33:01:5f:97:6d:33:
                    95:7b:1b:65:34:d1:57:c3:02:a8:64:8d:b8:46:06:
                    d6:b7:7d:dc:27:b0:65:ee:95:75:ec:3c:c5:b5:c9:
                    a9:83:2d:3a:14:06:b7:aa:6a:f4:0c:ce:04:29:4e:
                    73:71:70:80:09:9a:97:41:d2:7d:08:a8:1c:ae:a0:
                    34:34:77:32:64:a0:ee:3f:5b:db:7e:c9:4e:54:42:
                    af:7e:3d:e7:f2:c2:c5:71:09:43:35:63:99:d5:3c:
                    86:c1:02:41:ec:dd:6e:35:f2:90:8c:46:68:2c:d1:
                    4e:88:41:af:8b:96:7a:92:5e:a1:16:36:8a:a7:21:
                    67:b7:95:f9:45:b7:85:dd:e3:6c:86:29:77:f3:42:
                    f3:3c:d5:c1:e2:c9:1a:41:51:b1:89:6c:8c:cb:bc:
                    2c:61:28:d1:30:80:c1:b5:8a:24:9f:a2:be:c1:0b:
                    2f:5c:93:9a:d7:c1:51:17:aa:54:b6:f4:14:9a:ea:
                    26:6a:a9:81:1b:17:8d:b3:af:21:91:a4:6b:a5:7f:
                    99:a8:fe:b5:23:61:d0:24:4d:0e:bf:99:8f:b5:16:
                    64:30:b0:c7:15:85:26:44:b8:a4:67:a0:b9:b8:38:
                    43:bd:de:af:50:99:d9:ea:cc:fe:70:47:20:a2:d4:
                    1e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:07:87:9F:A5:11:8C:35:CA:69:05:BD:33:2F:11:05:3D:66:E0:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/1801d3d0-3756-308f-991c-268b40e2a0da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl

            X509v3 Authority Key Identifier:
                keyid:83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.210.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:2d:6a:a7:d7:29:28:ee:c6:00:7b:ec:29:10:0a:23:9c:35:
         50:4f:88:89:62:c5:05:e9:77:c3:56:17:77:5c:71:68:df:3b:
         be:89:15:e0:61:b6:42:76:1b:77:a8:31:40:9a:1d:d8:fe:37:
         47:77:db:18:f0:4e:1c:46:9d:52:dd:a4:bc:01:56:65:3f:63:
         f2:77:d2:3b:db:51:eb:51:ad:ff:2a:1f:f2:e9:c4:3e:44:9d:
         54:a9:b8:4e:ee:fa:67:d9:06:23:ce:2e:c3:be:aa:56:29:85:
         4d:62:2f:c3:e5:2c:04:0c:eb:53:fe:79:c7:24:5f:ec:75:e1:
         ca:aa:bf:3f:45:85:59:f8:6e:26:06:ff:b6:64:21:c3:a6:1c:
         87:9a:e8:16:7a:11:11:80:36:a1:aa:15:4a:c7:03:89:5f:d7:
         e6:68:0a:29:b4:71:05:a4:a1:b1:ed:c6:01:12:e4:b5:2d:53:
         21:9d:74:82:e3:c5:58:bf:16:0b:30:81:7c:97:5b:3e:00:c2:
         20:94:6a:d6:56:f1:47:72:2d:99:e6:4f:e4:52:72:4a:bc:ca:
         92:1f:57:0c:fd:97:b9:08:f7:3a:dd:2f:8d:2c:9a:dc:6b:0e:
         38:33:61:92:0b:4d:f9:31:59:64:c7:15:06:44:e1:d2:88:46:
         c1:13:9a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:21 2025 by rpki-client