Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8/f4637f85-f045-3611-b433-908584a54b6e.roa
File:                     f4637f85-f045-3611-b433-908584a54b6e.roa (raw, json)
Hash identifier:          JkJpaAQAWlYUkDUu6zMtx5763bosGFCgNFN9aSVobuI=
Subject key identifier:   DF:83:80:5D:B6:AE:A2:DC:3D:0B:9C:29:35:EA:0F:39:1C:55:68:27
Certificate issuer:       /CN=cbd9e34f-e30d-4184-956a-7e3e22cee6c8
Certificate serial:       010D0C9F43285848AF2B8837AB44B43BBA7C6BE0
Authority key identifier: 49:1F:DD:76:03:A8:16:E0:CB:8A:CD:84:54:17:72:60:4D:85:56:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8/f4637f85-f045-3611-b433-908584a54b6e.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     40194
IP address blocks:        192.152.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8/cbd9e34f-e30d-4184-956a-7e3e22cee6c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8/cbd9e34f-e30d-4184-956a-7e3e22cee6c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:88:37:ab:44:b4:3b:ba:7c:6b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbd9e34f-e30d-4184-956a-7e3e22cee6c8
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=f90220e3-a087-4829-94f1-5dc99cb097ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ba:e9:24:5e:d9:c1:d3:33:af:e1:f8:75:2a:
                    1d:a2:e6:40:70:7c:e8:15:a8:dd:a3:6e:87:13:e0:
                    da:70:78:4f:4b:05:40:49:1b:3e:70:8f:71:5f:12:
                    ec:cd:3d:d4:21:51:06:0a:6a:21:f3:5e:a4:6d:52:
                    df:12:c8:90:d1:49:bc:d7:84:1b:7e:8e:d6:9f:29:
                    80:68:ac:3b:3b:3d:8e:92:7a:89:90:2a:84:2f:72:
                    b9:be:2f:21:b1:0b:87:20:3e:19:4d:f1:f1:c7:b7:
                    54:39:f1:7b:97:cd:97:bd:42:f6:15:6a:2b:81:bc:
                    25:ca:e1:e6:e0:2f:cc:6b:2a:5c:ba:70:35:9e:09:
                    75:14:6e:1d:97:4a:cc:fc:db:b3:68:f9:46:ac:cd:
                    96:62:d2:41:99:7c:ab:9b:a1:0d:f4:b5:79:54:48:
                    7f:39:b7:64:c1:92:20:9a:0f:68:c6:44:25:f0:84:
                    a3:eb:08:ed:a4:6f:b2:c1:b1:28:67:26:96:76:0f:
                    45:ce:00:e1:66:a9:fe:77:5d:d6:46:db:f6:ea:e0:
                    23:71:d2:d7:a5:df:d2:e1:49:69:9e:b6:08:b4:33:
                    ec:aa:fe:93:f8:0b:a6:b1:90:d5:3c:0f:f4:7a:91:
                    f2:fc:33:c1:a7:ca:07:0b:33:1a:0c:08:c9:9b:46:
                    f7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:83:80:5D:B6:AE:A2:DC:3D:0B:9C:29:35:EA:0F:39:1C:55:68:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8/f4637f85-f045-3611-b433-908584a54b6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8/cbd9e34f-e30d-4184-956a-7e3e22cee6c8.crl

            X509v3 Authority Key Identifier:
                keyid:49:1F:DD:76:03:A8:16:E0:CB:8A:CD:84:54:17:72:60:4D:85:56:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.152.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:69:d6:d6:26:04:ac:23:4b:ca:e6:cf:77:bd:06:f1:7e:0a:
         10:e7:d1:ab:54:d2:a7:70:1f:2c:14:5f:f8:94:56:d4:e0:c3:
         23:b5:1d:d6:c1:7f:48:d4:e4:98:9e:05:e3:08:28:9b:99:d8:
         47:a9:ab:f7:a1:6b:99:46:9a:69:21:43:7a:53:f7:54:a0:24:
         51:8e:cc:08:be:f4:d1:2b:1d:87:f1:e7:33:ce:51:4c:14:d1:
         de:67:cf:5a:4a:29:d2:4f:78:8e:dc:9a:8f:9d:b9:da:1d:ed:
         cb:cb:e7:17:09:52:99:d0:d7:4a:6d:89:f1:d8:ec:52:a6:6e:
         4b:77:68:3d:3c:f9:23:2f:aa:86:65:f1:b9:16:60:f5:cc:ac:
         ad:41:cc:e9:f2:87:8e:18:14:17:a9:75:03:25:10:09:b6:64:
         fd:9c:94:42:43:ca:55:8f:d0:24:26:7d:6b:69:5b:54:72:ce:
         16:e9:86:bf:0a:00:3e:8f:82:4a:91:e7:b5:f7:21:e2:76:3d:
         c0:a5:08:b6:31:df:f8:82:ae:17:5e:c9:b1:79:83:32:c8:9b:
         3d:ff:c7:b6:c4:3c:4e:0b:cc:d0:5f:98:90:73:45:05:55:db:
         82:b6:56:71:ea:e0:90:69:20:26:17:5e:1e:0b:86:4d:25:2a:
         f2:48:d7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:42 2025 by rpki-client