Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/04495fba-c1a6-3e3e-bc17-e6afad1a62af.roa
File:                     04495fba-c1a6-3e3e-bc17-e6afad1a62af.roa (raw, json)
Hash identifier:          Iz5MHLQZr8oBR3XiwRII9st3wc2sbE0kbiDB3IPXlZI=
Subject key identifier:   C3:08:DB:B4:CB:20:DB:D2:0E:CC:4E:C5:EE:91:09:E0:C7:35:70:05
Certificate issuer:       /CN=903dbcce-bb2a-403e-ad25-67981ea1de21
Certificate serial:       010D0C9F4328584910E1814C90C8F929C195AB80
Authority key identifier: B5:D4:E3:8B:E8:61:BC:DC:B6:D7:C9:3D:5B:AB:3E:CD:66:4C:69:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/04495fba-c1a6-3e3e-bc17-e6afad1a62af.roa
Signing time:             Mon 03 Mar 2025 14:00:53 +0000
ROA not before:           Mon 03 Mar 2025 14:00:53 +0000
ROA not after:            Sun 01 Jun 2025 13:00:53 +0000
asID:                     3320
IP address blocks:        192.67.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:10:e1:81:4c:90:c8:f9:29:c1:95:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=903dbcce-bb2a-403e-ad25-67981ea1de21
        Validity
            Not Before: Mar  3 14:00:53 2025 GMT
            Not After : Jun  1 13:00:53 2025 GMT
        Subject: CN=bb9584ad-f3b7-42a8-82c5-428a26c73277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:42:90:c2:de:3e:f8:75:db:4a:c7:63:de:eb:
                    06:f0:c1:38:7c:a0:48:5f:7f:2a:31:32:9d:bf:0d:
                    b8:fb:a3:fd:ea:72:64:96:08:40:88:a5:e6:73:7b:
                    71:cb:fc:c2:4d:08:3e:b1:3d:b4:b6:09:e0:6b:82:
                    fc:16:30:97:23:6a:80:20:2b:09:3f:dd:e7:ac:28:
                    a9:37:6a:33:a5:f8:08:f6:aa:bd:bd:21:3b:2f:9e:
                    58:8b:56:8a:0a:8f:0d:be:04:0b:99:6c:f3:64:73:
                    c6:a4:99:89:81:34:79:e4:74:ea:fa:1f:e9:c5:af:
                    0b:7b:f4:31:47:cc:84:86:ec:4c:94:03:85:4a:32:
                    bc:6e:05:fa:fa:17:ac:1c:73:f1:38:fb:e2:af:1d:
                    5d:16:a9:96:4a:12:e8:46:97:b5:94:e9:b2:81:4d:
                    e0:6c:d2:d4:70:df:be:9e:34:49:4c:6e:c8:4e:2c:
                    33:73:11:2a:4b:00:26:8c:62:52:3e:83:84:83:4a:
                    b7:f2:c1:e1:5b:37:fc:e9:51:42:70:10:0a:5e:82:
                    07:f0:0e:83:be:d8:0a:03:4f:2c:29:1f:89:a5:e6:
                    78:1d:04:c3:0d:5a:a9:61:c6:1c:a2:11:af:16:3e:
                    2e:30:a1:8e:7f:a6:a3:f6:a6:7a:16:42:72:0d:25:
                    c1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:08:DB:B4:CB:20:DB:D2:0E:CC:4E:C5:EE:91:09:E0:C7:35:70:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/04495fba-c1a6-3e3e-bc17-e6afad1a62af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.crl

            X509v3 Authority Key Identifier:
                keyid:B5:D4:E3:8B:E8:61:BC:DC:B6:D7:C9:3D:5B:AB:3E:CD:66:4C:69:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:c6:a6:cd:84:6e:03:f5:6e:ce:f3:bc:f9:84:4c:54:4e:13:
         47:45:91:fc:c3:53:85:ee:c9:9f:5d:1d:d8:64:03:78:1b:d2:
         eb:04:8d:ee:65:fd:f5:29:ac:ea:2e:03:fd:ce:a2:55:09:10:
         2f:2c:4d:41:f5:3a:3d:16:d2:02:69:a6:8d:59:df:24:29:dd:
         97:cc:5f:54:d6:f5:45:5d:19:f6:d4:8e:e1:70:ae:56:2d:5e:
         9f:b1:ce:70:ae:a8:ee:77:0e:8f:0b:2b:c4:70:72:e5:3e:ed:
         5c:12:bb:6a:e0:27:0c:fe:f8:35:4e:cc:37:a4:36:f4:85:cd:
         26:00:32:6f:e8:73:57:4c:66:cf:dc:3d:b8:b1:42:8e:e6:59:
         12:15:b2:59:91:5e:75:ac:c7:36:b6:cd:aa:c8:e3:83:6d:68:
         60:70:8e:ea:66:f2:e4:84:b6:27:cb:e1:ce:b2:45:b5:e7:cb:
         f5:18:be:4b:ab:42:08:70:82:39:13:d2:66:d6:d8:de:be:c7:
         ba:b3:81:9c:e3:15:53:d9:ae:23:92:55:6a:c9:fe:f4:4d:cb:
         5a:b8:b4:25:47:d1:70:e1:f6:50:7d:2f:d6:71:1c:70:d6:69:
         4d:51:b4:f6:af:62:09:91:4c:1b:2b:c4:f4:08:67:65:7e:63:
         84:8c:0f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:45:15 2025 by rpki-client