Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/ca9f455e-da4e-32b7-a8af-e94258969a46.roa
File:                     ca9f455e-da4e-32b7-a8af-e94258969a46.roa (raw, json)
Hash identifier:          w5D1nZJDe7VMoFDc1Kts+XFT6OMjxW5eFi2FSNZWJ78=
Subject key identifier:   44:67:79:A6:74:54:C1:10:8F:55:42:E0:91:D2:F6:53:0C:43:4C:02
Certificate issuer:       /CN=3ebba851-73dc-4c81-9c85-edb63b33b305
Certificate serial:       010D0C9F432858495ABEB7682801BF9CA7256A80
Authority key identifier: A3:42:73:1D:17:E0:73:0A:39:C2:4C:9E:F9:F5:EA:8E:BC:C5:71:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/ca9f455e-da4e-32b7-a8af-e94258969a46.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     54048
IP address blocks:        192.41.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:b7:68:28:01:bf:9c:a7:25:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebba851-73dc-4c81-9c85-edb63b33b305
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=06deace9-9dc0-43bb-986c-615b625648bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3b:43:c0:76:f0:70:e1:82:1a:a8:c0:5c:8a:
                    74:12:4b:ae:89:4b:63:5e:ab:e6:53:02:a5:db:1c:
                    77:b1:da:58:f3:bc:76:85:8d:f1:61:e4:4e:ee:70:
                    e4:f6:76:a0:0d:9b:0b:c2:81:45:5f:b9:f3:13:3d:
                    00:07:0d:e2:79:27:ff:37:c6:46:62:cb:a9:43:25:
                    9c:29:08:87:96:76:41:3b:f3:c3:3d:78:eb:47:41:
                    0b:6f:91:f8:39:8b:a7:d4:7d:e0:79:bc:ea:83:73:
                    4c:bd:ed:ff:d3:26:0e:46:fa:82:36:38:6b:af:dd:
                    a6:06:ad:01:a6:1f:12:5f:44:da:0a:0a:30:ae:38:
                    87:f9:ee:7b:db:49:da:8b:ae:5d:63:40:0c:52:f3:
                    13:85:24:ca:54:35:8a:eb:95:f2:e5:39:86:db:10:
                    0e:a7:72:22:3b:2c:30:66:79:f9:0d:5e:40:be:66:
                    8d:77:ad:c5:89:1b:86:7d:fe:b8:bc:46:11:4a:67:
                    2b:46:e7:c7:ae:2f:b6:c2:55:1b:4b:91:b6:b3:23:
                    e5:ce:58:e7:9f:bb:69:b4:97:65:2a:68:3d:56:a0:
                    24:08:35:dc:c0:56:09:49:ce:53:e4:bd:20:19:8e:
                    de:e9:b1:0e:e9:01:1d:a7:a8:62:8a:75:9a:d4:85:
                    2d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:67:79:A6:74:54:C1:10:8F:55:42:E0:91:D2:F6:53:0C:43:4C:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/ca9f455e-da4e-32b7-a8af-e94258969a46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.crl

            X509v3 Authority Key Identifier:
                keyid:A3:42:73:1D:17:E0:73:0A:39:C2:4C:9E:F9:F5:EA:8E:BC:C5:71:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:24:19:5a:fb:67:02:31:53:bb:c2:1a:a5:85:b1:8e:5c:fb:
         30:29:25:57:5d:9f:e1:cc:bf:6f:81:b1:0c:cc:11:6b:a8:77:
         73:84:5a:d0:9d:d5:e8:84:c0:c7:49:fa:7c:8d:2a:8c:ea:fd:
         60:00:f3:e4:8e:47:01:24:79:e3:c3:7e:13:01:80:7e:5c:65:
         9c:c1:26:c3:5c:1c:ab:7d:ad:e5:5f:30:33:27:fc:0c:39:9d:
         59:f8:3d:e6:48:5b:5f:6b:ea:ba:0e:d4:54:14:9f:fc:c2:80:
         da:20:6b:47:4d:a0:84:14:94:c3:ad:04:eb:5a:39:f5:24:60:
         15:94:91:7e:dd:c2:35:19:82:c2:aa:6a:eb:32:3d:26:1e:05:
         5c:4c:4e:4a:c4:35:ed:99:60:b7:a2:54:72:dc:3a:f6:20:22:
         37:9b:15:97:8e:b5:0c:fb:d5:cc:37:09:bb:2f:cd:39:70:4e:
         a1:57:70:4a:4f:d3:b5:b9:d7:17:0d:14:44:c4:b8:fc:15:14:
         5d:94:c3:26:a2:e6:46:c0:9d:c3:91:96:e9:5f:88:87:c1:00:
         7d:58:cf:29:8b:2c:66:61:ed:04:ce:57:e1:8e:2a:54:6f:9b:
         9a:d8:28:99:d8:7a:3a:3c:25:59:32:10:84:c6:ee:62:ad:04:
         14:0d:f2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:16:06 2025 by rpki-client