Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3fe4ad93-8006-3e4f-9d8e-e5cc2719ea81.roa
File:                     3fe4ad93-8006-3e4f-9d8e-e5cc2719ea81.roa (raw, json)
Hash identifier:          8a0s3D7vQ5ev1rS5MJqhpV6R+RFXMsbqrrlqRXlqiRA=
Subject key identifier:   9C:E7:D2:25:A2:B7:2D:D4:81:BE:7B:B3:FB:2C:82:30:4D:85:79:0A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584905B6B763DE473875962FFEA0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3fe4ad93-8006-3e4f-9d8e-e5cc2719ea81.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     204957
IP address blocks:        192.177.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:b7:63:de:47:38:75:96:2f:fe:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=c6cf2834-aa78-4771-be24-2698d9a9ae36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:27:0c:4f:30:9d:6a:84:73:70:63:e2:b7:a2:
                    5a:9b:1e:14:9d:7a:de:76:80:6b:c5:95:7c:b6:79:
                    4e:99:79:ca:49:c2:19:a6:0c:55:31:a1:9c:52:e5:
                    1d:25:77:98:6a:af:88:79:9a:c9:e3:c6:b4:bd:dc:
                    b5:43:bf:82:17:67:7e:87:09:44:a0:58:6c:db:67:
                    a0:9b:4f:c3:e8:2e:c4:60:91:c1:33:41:60:d6:37:
                    e2:8c:ad:ff:f2:40:57:b6:be:cc:90:39:e5:18:a5:
                    0c:92:2c:31:5f:01:31:97:eb:ce:7d:ee:1f:40:1c:
                    41:c3:dd:b0:eb:da:10:bc:37:87:eb:5c:19:95:ec:
                    66:73:e6:7d:88:02:34:ce:d7:06:51:99:67:e0:42:
                    26:10:37:b1:ac:83:1c:3c:7a:a9:65:fd:a9:e3:d7:
                    94:16:0b:b5:58:94:cc:16:fc:87:78:23:f3:d4:3b:
                    4b:28:be:d9:2b:85:63:1a:9a:27:a9:06:31:e8:9e:
                    4a:3c:b2:f2:da:f7:80:73:bd:b8:95:bd:b2:66:02:
                    2d:13:b5:4f:ab:3c:76:2b:7d:63:a3:2a:73:8b:6e:
                    fa:a2:34:05:42:10:18:63:c1:07:c2:97:a9:bc:dc:
                    17:a2:4d:79:91:c4:50:55:cf:e2:3f:36:10:c3:e3:
                    30:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E7:D2:25:A2:B7:2D:D4:81:BE:7B:B3:FB:2C:82:30:4D:85:79:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3fe4ad93-8006-3e4f-9d8e-e5cc2719ea81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.177.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:7f:d5:a9:20:17:43:b9:e3:50:35:b8:a3:8f:78:2d:b7:83:
         46:2a:08:db:93:cb:65:34:66:bd:2a:51:75:cb:53:3b:66:49:
         1f:4e:85:fe:e6:af:cf:19:d0:7f:d0:dc:4d:90:26:8c:fc:28:
         50:dc:46:32:b6:d1:52:f9:4f:ee:cd:b2:e8:1e:93:f6:5e:fc:
         c4:41:45:85:9d:89:02:fb:21:9c:b5:3f:81:f0:22:2c:f7:fb:
         27:90:17:70:50:d6:84:99:0d:8f:b0:f6:64:7a:1d:d0:7a:b1:
         78:c0:3d:64:5e:d5:40:28:93:59:c1:b1:5c:92:87:53:0e:20:
         09:63:90:05:56:81:46:5e:93:c5:7a:94:6e:ca:5b:6a:ab:88:
         f3:c0:0a:0c:a6:fc:01:c6:cb:c7:82:df:1a:c1:71:0e:61:24:
         27:5f:f8:a7:a3:a8:5f:14:c0:cb:7f:4b:21:8a:44:a1:48:6f:
         f8:03:94:dc:1d:1a:09:3d:8f:fc:8b:af:35:4d:e1:f6:a8:d8:
         c2:27:5c:47:74:6f:01:49:7d:7a:4b:20:7a:80:08:bb:a2:38:
         e4:7c:b8:f9:48:fa:ca:6c:dc:01:28:6d:1b:64:9c:df:00:84:
         54:55:7e:5c:a7:4e:56:f4:dc:9c:42:2c:25:4d:95:1e:c2:3b:
         b6:35:21:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:19 2025 by rpki-client