Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/9d24522e-48c5-31cc-93f4-aa8d5c2a4fbf.roa
File:                     9d24522e-48c5-31cc-93f4-aa8d5c2a4fbf.roa (raw, json)
Hash identifier:          vrvJZ+TCHmOCKrdgd5zTX9mQDyev2Wiw/oQDBQydgk4=
Subject key identifier:   91:7B:22:01:95:89:EB:BE:EC:82:89:37:2F:5D:79:EB:61:E2:A9:24
Certificate issuer:       /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial:       010D0C9F43285848D0ABB3F10D91603AC5F49580
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/9d24522e-48c5-31cc-93f4-aa8d5c2a4fbf.roa
Signing time:             Sat 08 Feb 2025 14:00:52 +0000
ROA not before:           Sat 08 Feb 2025 14:00:52 +0000
ROA not after:            Fri 09 May 2025 13:00:52 +0000
asID:                     270147
IP address blocks:        192.64.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d0:ab:b3:f1:0d:91:60:3a:c5:f4:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
        Validity
            Not Before: Feb  8 14:00:52 2025 GMT
            Not After : May  9 13:00:52 2025 GMT
        Subject: CN=4b192862-cb4f-4d19-9fc5-a31a1cc4c8d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fd:fb:a1:07:a9:2a:a3:f8:82:15:d9:e0:1a:
                    7f:1b:ee:13:51:ad:b6:f1:1e:41:fd:6a:73:9f:fe:
                    38:ac:cc:ca:27:45:9c:ed:59:67:3f:1a:f3:4a:fc:
                    30:82:ee:a5:41:d5:13:95:71:2e:68:08:97:b8:ef:
                    6c:2b:f7:4f:c1:b1:68:83:29:2b:89:74:be:aa:c3:
                    94:6e:e0:fd:44:92:7d:1b:65:23:4e:8e:0e:7d:bb:
                    27:a5:82:c2:03:e3:22:24:1a:77:41:bc:09:32:02:
                    2f:f0:15:07:7c:56:01:f0:08:3f:ac:e7:89:8a:43:
                    24:37:61:6b:81:85:48:14:86:a1:0e:1b:eb:c2:08:
                    53:d3:2a:02:ba:4c:a0:b4:fc:cb:66:ce:b5:60:f2:
                    2c:f7:4b:2a:b5:21:fe:d5:04:52:62:38:db:b5:cb:
                    ac:a7:41:90:98:64:91:bd:fd:5b:a9:0c:cb:c8:5c:
                    5e:e0:9d:ed:76:68:a7:57:f4:46:12:fa:d1:b0:b4:
                    ed:09:d7:01:db:d2:a8:7b:e0:59:08:2d:78:41:42:
                    d8:10:b3:8d:03:45:35:86:27:18:fd:d7:d1:a4:c3:
                    1e:e6:6f:87:1d:36:23:1b:68:01:0c:03:92:85:68:
                    00:24:5c:46:bf:5c:2c:84:49:ec:38:24:7c:e1:a1:
                    ad:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:7B:22:01:95:89:EB:BE:EC:82:89:37:2F:5D:79:EB:61:E2:A9:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/9d24522e-48c5-31cc-93f4-aa8d5c2a4fbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl

            X509v3 Authority Key Identifier:
                keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:0b:d7:6c:47:00:67:c6:ea:ad:d3:1b:15:45:e9:59:00:64:
         bd:0d:aa:8f:90:69:62:80:b6:fa:94:73:c3:d5:58:3c:e8:76:
         aa:80:93:0d:7c:cb:ee:d4:1e:84:f8:a5:45:fb:0c:90:c8:6a:
         93:f4:cd:b0:fd:1c:98:fe:73:b7:52:3a:64:fa:2e:17:4e:fe:
         39:7f:e4:52:f9:f1:9f:76:dd:0c:6a:fe:7f:b7:c4:51:31:2d:
         02:f4:b3:52:28:84:45:ca:9e:bf:da:0c:6f:6f:62:2a:5a:10:
         d6:16:1f:03:30:7d:a1:bd:90:a2:e2:94:e5:02:17:b6:63:a3:
         f5:af:77:4c:fb:78:1e:af:9e:56:e8:e8:54:4b:5f:0e:8f:44:
         e8:be:c0:5d:b0:d8:5b:f3:4b:d6:d1:b5:ad:2e:20:60:d8:16:
         a3:f8:85:7c:5a:8d:45:ea:31:49:c0:21:e3:fe:d0:0b:33:d3:
         31:96:91:0e:83:34:6a:fc:5c:84:5f:8a:72:15:cb:e2:52:45:
         50:36:62:1a:4f:9a:90:82:08:96:c1:70:ac:c5:80:e4:11:05:
         57:5d:7c:a4:10:62:92:36:6a:45:91:f3:45:c7:a0:8a:5a:b4:
         ce:49:0b:25:07:eb:33:5f:e5:44:59:aa:e4:85:d8:0e:07:c5:
         af:2b:cd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:35 2025 by rpki-client