Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/78a437a0-6636-30a8-a0e8-b536e17a5ffd.roa
File:                     78a437a0-6636-30a8-a0e8-b536e17a5ffd.roa (raw, json)
Hash identifier:          oapM4vZs9vUutB5qUQmMcXPkaOU+B7Z7hyDtRhYW+Qg=
Subject key identifier:   31:3A:8D:10:D7:00:A3:AB:A4:9F:17:FC:23:6F:76:7E:F0:1D:EA:54
Certificate issuer:       /CN=31423667-ebcc-4a10-8150-8758941bb075
Certificate serial:       010D0C9F4328584902EC1BE15E26CEFC92EEF780
Authority key identifier: 91:01:2E:B2:A1:51:5C:89:B5:03:AC:13:75:4D:37:A4:51:26:03:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/78a437a0-6636-30a8-a0e8-b536e17a5ffd.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     19218
IP address blocks:        184.170.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/31423667-ebcc-4a10-8150-8758941bb075.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/31423667-ebcc-4a10-8150-8758941bb075.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:1b:e1:5e:26:ce:fc:92:ee:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31423667-ebcc-4a10-8150-8758941bb075
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=beea48f8-b7e0-427a-91b0-e31227f0ec9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:78:d6:06:43:ca:57:24:93:9c:1e:b2:73:45:
                    a7:7a:b1:60:e7:6a:61:71:00:76:f0:fd:f9:b0:9a:
                    f2:f0:67:33:40:c1:1e:48:bb:52:96:48:aa:cb:7d:
                    5b:5d:59:b0:68:7c:86:83:b9:ee:d3:3f:90:8b:ad:
                    1c:58:bc:b4:51:aa:92:1a:63:3d:f8:f2:d1:cd:5a:
                    68:4c:4a:14:01:87:17:2c:20:f0:ad:65:8a:0f:84:
                    d4:59:db:d7:7a:24:b5:6a:91:11:06:00:71:c1:a6:
                    b9:05:c6:55:a7:8b:21:91:65:16:83:32:8a:28:a5:
                    ce:3d:66:da:96:d0:05:e6:69:3b:96:51:1e:08:27:
                    09:95:99:c9:5d:59:ed:f1:3c:d3:95:a0:de:81:82:
                    f8:aa:d2:69:ed:77:4e:b5:14:66:2e:da:75:4f:4e:
                    2e:de:db:f4:ae:25:bf:71:b0:e6:f6:74:1a:8c:6e:
                    f3:ee:17:0d:8a:8a:df:6d:f1:b7:e3:94:24:39:6c:
                    39:2b:e6:1e:27:d1:9e:ce:a3:7a:9f:c5:46:dd:a4:
                    12:70:54:55:d5:ce:33:90:f8:24:42:40:7a:47:42:
                    75:71:b3:70:44:8f:24:bb:da:49:44:0e:9c:51:e9:
                    50:e0:5d:ed:6d:42:1d:49:94:eb:30:9b:7a:32:b0:
                    d9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3A:8D:10:D7:00:A3:AB:A4:9F:17:FC:23:6F:76:7E:F0:1D:EA:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/78a437a0-6636-30a8-a0e8-b536e17a5ffd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/31423667-ebcc-4a10-8150-8758941bb075.crl

            X509v3 Authority Key Identifier:
                keyid:91:01:2E:B2:A1:51:5C:89:B5:03:AC:13:75:4D:37:A4:51:26:03:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.170.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:23:2c:ba:c2:fa:5a:56:fc:0b:e4:4e:1c:6c:46:9d:1c:39:
         68:e4:37:b9:52:1c:15:c5:8b:b7:a0:0f:0e:18:44:bf:93:65:
         98:6f:79:34:fd:19:3c:bf:1d:be:db:3b:01:b9:4e:7d:30:c2:
         c9:56:05:83:56:8b:58:1c:6e:5b:53:8b:b5:81:e8:f1:70:82:
         ce:4a:74:c7:8d:67:0a:77:bd:06:39:ba:2f:a8:97:9a:08:f6:
         ed:60:69:46:2d:3c:59:d8:a4:95:fc:86:49:7f:b1:25:7c:7b:
         73:12:b2:ae:da:4b:71:1e:95:65:43:7a:17:da:4e:db:b4:95:
         48:98:7a:65:3d:99:db:b2:3f:36:72:75:da:b5:4a:81:ab:7b:
         d3:73:a4:76:7e:15:83:34:3d:3b:b3:27:bd:50:4d:63:40:14:
         36:92:9c:9c:42:5b:27:59:64:67:0c:5f:8c:56:ad:6b:a2:76:
         65:01:05:0e:bf:0b:10:b5:f0:8f:42:16:ef:e2:39:df:12:0f:
         4f:2a:fe:ec:3c:72:5c:11:10:0c:5f:40:dc:bc:da:00:92:01:
         40:68:c3:0b:53:0c:3e:c4:14:54:e9:58:d9:a3:ed:97:fd:5d:
         20:e5:53:08:11:29:84:a4:97:5b:96:39:b6:db:fe:98:f0:ac:
         be:d4:99:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:08:33 2025 by rpki-client