Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/f39188b9-36fa-3da1-b751-9158b3ac9d67.roa
File:                     f39188b9-36fa-3da1-b751-9158b3ac9d67.roa (raw, json)
Hash identifier:          hlXnpvDpTzaSAqLXa9EE5eMNYWJwO0ljOQY4hxqJ+Vo=
Subject key identifier:   66:DC:3A:62:87:4D:61:4B:DF:69:1A:15:52:AB:ED:F7:6C:1C:7E:CC
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F43285848A830B42D2A5C51922385D680
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/f39188b9-36fa-3da1-b751-9158b3ac9d67.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     16072
IP address blocks:        170.186.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:b4:2d:2a:5c:51:92:23:85:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=3bb3649b-ab9c-4109-9474-9c4c7922c774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:56:2e:82:8c:7d:19:26:40:c7:b9:ff:b8:1f:
                    34:61:af:53:fe:8c:61:47:eb:a6:20:84:f1:c4:10:
                    51:15:bf:1d:b8:6a:9f:17:2d:c8:99:90:1e:ce:56:
                    75:36:26:30:25:82:75:76:fa:c6:d3:ac:bd:55:81:
                    63:2b:f2:3a:77:79:95:60:d3:cd:1b:48:d9:cc:d0:
                    d6:fe:34:6d:ca:38:19:e9:4c:8d:48:8c:8f:8e:fe:
                    5d:68:45:12:af:45:64:80:70:3d:7b:c5:8a:33:26:
                    30:10:cf:85:93:fa:b2:65:1d:b3:56:d0:aa:75:14:
                    09:37:ca:d3:cb:ce:54:f5:3a:a7:26:b7:17:57:54:
                    de:a7:19:d5:50:57:a4:02:43:75:48:60:22:1b:a3:
                    29:e1:bc:66:58:69:0a:36:d5:65:bf:7a:46:27:c6:
                    df:25:40:89:78:9b:a7:23:91:8e:b1:74:c0:f5:2f:
                    0f:5a:50:ef:ca:e1:1f:27:63:e3:36:80:82:ab:f4:
                    d8:3c:b1:67:d8:16:1a:b5:cf:96:f4:33:75:9c:e2:
                    6a:c1:10:92:7b:3c:d9:35:66:15:f4:46:8a:1a:1e:
                    26:5d:5c:c2:d8:01:56:ae:cc:b3:ba:9a:a5:bd:c4:
                    ee:be:18:7d:17:fc:5c:12:52:34:31:82:f7:c0:8b:
                    00:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DC:3A:62:87:4D:61:4B:DF:69:1A:15:52:AB:ED:F7:6C:1C:7E:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/f39188b9-36fa-3da1-b751-9158b3ac9d67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.186.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:38:70:97:c4:47:c9:04:f5:53:6a:d3:70:76:d3:69:27:d0:
         42:89:c3:20:94:76:7f:7e:5c:96:f7:4a:60:19:8d:45:a6:c2:
         19:36:c4:18:df:dc:1c:8e:22:02:52:a1:42:fc:31:c9:01:64:
         34:32:ae:40:00:80:cb:5e:76:d1:de:ea:98:84:0d:d4:ba:c2:
         f0:1b:eb:49:8d:1a:23:a0:6b:a2:d8:8b:0f:67:82:ee:8e:9e:
         23:d2:01:6f:95:43:f1:55:bd:d3:8a:d1:e2:69:64:e7:de:7c:
         8f:a0:90:49:0a:42:ef:95:e0:3f:94:54:63:36:f9:96:30:e2:
         b8:d2:26:5f:5b:64:c2:e7:2c:9d:01:17:48:06:67:52:c7:7e:
         b0:cf:e8:f8:e2:b3:6a:c6:5f:e1:62:de:18:b5:25:65:a4:26:
         62:a4:67:4b:03:65:5f:1e:1c:fa:22:46:c3:50:82:7c:7b:ab:
         ae:b6:18:7a:6f:c8:75:10:9c:03:a5:9b:cf:ae:ed:e3:cb:b9:
         da:9e:24:a2:e1:6d:df:69:70:b2:75:44:56:75:32:09:6b:37:
         de:ed:d9:58:9c:32:8c:2b:fc:6f:a8:c1:19:dd:7a:0a:14:98:
         25:28:62:dd:40:79:36:c5:4a:c4:3d:0d:27:4e:67:cd:c7:fc:
         31:c5:52:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:06 2025 by rpki-client