Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/79f4bbf3-62d8-3ff8-b7b9-c88815f0ddb4.roa
File:                     79f4bbf3-62d8-3ff8-b7b9-c88815f0ddb4.roa (raw, json)
Hash identifier:          mJsYc5LIHuI3hA+vR774N/sUrtGGZJDfViupX7ab28o=
Subject key identifier:   DB:BC:CB:99:E9:35:B1:E6:07:14:39:71:D0:0C:89:27:00:36:68:BE
Certificate issuer:       /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial:       010D0C9F4328584908817C57E1E8D2A4F93D9900
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/79f4bbf3-62d8-3ff8-b7b9-c88815f0ddb4.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     18593
IP address blocks:        148.86.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:7c:57:e1:e8:d2:a4:f9:3d:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=e98e0f13-3565-4617-83c1-68c9f76202d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:43:f1:97:86:6c:87:40:2a:25:d9:8f:de:c1:
                    83:7d:75:65:6a:bc:e9:0f:ac:a0:ee:b5:3e:77:4e:
                    93:50:31:00:01:e7:5c:1b:b3:c5:a6:ae:7a:e9:be:
                    dd:7b:0d:ae:8f:31:ac:93:47:26:ff:8c:34:63:25:
                    2c:77:2f:76:76:56:69:ce:2c:3f:88:3c:43:29:51:
                    e0:42:ea:ee:81:f8:fa:9b:cf:6a:a3:78:eb:d8:66:
                    d1:43:65:76:d3:c2:8a:77:c0:56:0b:3e:02:d7:43:
                    43:c1:83:5b:c3:3a:89:9e:15:9d:2d:ca:47:3a:49:
                    98:5e:7c:ca:06:4c:5d:7c:40:bf:a2:37:74:8b:7f:
                    cb:25:8b:28:83:2d:39:9f:8b:df:71:39:6e:2f:ca:
                    37:0f:cd:84:b2:56:a8:75:6d:06:7f:c4:b4:9a:17:
                    ee:f0:21:c1:77:8b:eb:b4:a7:88:a3:4b:3f:3e:17:
                    28:62:ad:6c:09:04:6a:fd:49:2d:9b:e9:08:49:10:
                    6f:b2:24:d4:fc:4b:92:e1:d5:9b:dd:9b:ae:79:d6:
                    87:15:96:74:b4:a2:34:0b:9e:76:15:1a:99:d6:fd:
                    d2:8a:92:ed:64:bd:2d:a4:3c:44:2f:8e:d0:65:70:
                    0b:4e:75:76:dd:e6:dd:28:58:3a:5a:aa:61:3a:c3:
                    6f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:BC:CB:99:E9:35:B1:E6:07:14:39:71:D0:0C:89:27:00:36:68:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/79f4bbf3-62d8-3ff8-b7b9-c88815f0ddb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl

            X509v3 Authority Key Identifier:
                keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.86.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:e3:96:e1:1a:9b:ec:f0:df:c8:ed:67:3b:5d:c1:d4:63:6b:
         b5:2d:35:71:70:ab:42:2e:0a:aa:42:64:ce:70:1c:9e:33:27:
         ff:52:4a:65:01:65:bd:bb:25:02:36:09:f9:0c:8a:fe:61:b2:
         ab:90:c9:d5:25:e5:b0:45:dd:50:6b:e5:14:b7:d6:83:c8:71:
         58:5b:1f:01:71:d3:39:24:48:6b:78:4f:c4:86:70:5f:89:15:
         a8:3c:84:03:ee:84:b0:01:f6:5c:4a:23:ff:b2:24:d1:d3:77:
         28:7e:7c:1f:bc:47:e9:ed:c1:14:5b:b3:2a:69:6f:49:45:4e:
         81:6c:bc:f4:be:c8:cb:00:c5:d7:70:47:55:82:ad:df:ca:b0:
         f8:47:a7:93:55:c5:a7:71:81:ad:7e:df:c6:b4:53:20:bf:a8:
         7d:b2:41:6b:ae:54:7c:fc:f3:d9:03:d2:40:bc:a2:35:9f:4a:
         02:12:99:d4:a8:28:c3:9f:a9:a8:7d:4a:fa:63:b2:fc:e8:78:
         e3:bf:95:2f:dc:bb:7e:03:84:4f:47:37:44:e0:0a:33:c4:bf:
         0e:24:b7:38:5b:7e:94:b3:fe:26:e2:2f:e8:3d:56:58:f3:bc:
         0c:8a:a4:51:c6:ba:53:b7:bf:c7:65:f7:0a:96:5b:5d:e4:cc:
         0b:aa:63:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:42 2025 by rpki-client