Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/01941e00-2d4e-3c6a-97bc-f9b8dfb7ed72.roa
File:                     01941e00-2d4e-3c6a-97bc-f9b8dfb7ed72.roa (raw, json)
Hash identifier:          TdRkoMyVDAdp7yXA1lGdw4DG8owZuqc2WFd9eB0Y1uQ=
Subject key identifier:   EA:12:D4:15:EF:5A:1A:1D:AC:A5:61:21:E7:F2:FE:80:93:4C:BD:34
Certificate issuer:       /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial:       010D0C9F43285848F9269F9FAAE2A5C063223B00
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/01941e00-2d4e-3c6a-97bc-f9b8dfb7ed72.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     1280
IP address blocks:        204.152.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:9f:9f:aa:e2:a5:c0:63:22:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=1d501c6c-91cc-4869-81d4-e659271c87bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:81:a5:23:ad:5e:a1:f6:c4:94:25:18:1b:d5:
                    64:91:26:70:2e:eb:21:9e:c1:e7:90:56:80:5c:7f:
                    95:83:a5:9a:ae:a6:32:44:1e:64:8c:a3:b7:e1:c0:
                    a1:7b:32:7e:ed:f2:77:42:83:88:34:69:f7:c4:9c:
                    bd:3d:dc:0b:5a:69:04:d7:9a:4a:7a:f2:01:28:d2:
                    b9:3d:df:20:6d:67:aa:0a:e1:23:c1:88:2d:30:45:
                    4a:c1:09:5b:b1:0e:27:cb:c6:6f:24:83:0e:0a:d0:
                    0e:d7:2c:cd:7f:c5:e4:a4:0b:c4:f9:40:e3:9c:9d:
                    82:44:ed:8e:dc:23:d0:33:2b:69:48:e6:f0:21:72:
                    64:7b:6f:bd:61:ac:99:39:3f:6d:eb:8b:19:0e:6c:
                    66:3c:92:5a:a8:ca:59:69:36:48:4b:44:a7:b6:59:
                    ba:67:4c:d4:18:42:89:8d:e6:95:a3:4f:af:c9:f9:
                    5d:ba:b7:0b:22:10:af:ed:8c:4e:9f:23:94:72:6c:
                    2c:17:35:21:11:49:da:a4:fd:31:51:30:6b:f4:3d:
                    fa:52:e7:de:46:0d:0c:a5:f6:a6:94:10:67:95:a9:
                    32:35:28:fb:04:94:5c:34:45:f3:97:64:a8:7a:77:
                    e1:59:9d:67:67:a9:5a:50:98:14:1a:91:30:47:d6:
                    16:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:12:D4:15:EF:5A:1A:1D:AC:A5:61:21:E7:F2:FE:80:93:4C:BD:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/01941e00-2d4e-3c6a-97bc-f9b8dfb7ed72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl

            X509v3 Authority Key Identifier:
                keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.152.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:48:02:cf:95:34:a5:5a:ad:0f:c3:73:74:bb:93:d0:58:06:
         a7:8a:13:93:13:37:a5:32:9b:26:5d:e8:f8:8c:71:40:ae:43:
         e2:8e:f2:df:5b:e6:c0:41:59:a5:f8:77:44:4a:ee:02:97:3b:
         55:f4:35:bb:4b:c7:7b:44:f6:52:23:f6:e8:42:da:ff:94:54:
         01:ce:af:80:96:51:07:fa:b5:be:45:6e:44:a2:f4:94:fe:4f:
         7e:c7:48:f5:3b:31:a0:7e:8b:c9:1b:a9:b0:0d:3f:e1:73:96:
         23:50:a3:08:d9:ae:2e:78:1e:0e:b7:7c:39:88:81:62:2c:54:
         15:66:e0:8a:d5:42:51:46:a5:0f:c2:c2:7c:6c:a8:94:8d:55:
         a7:dd:6a:ce:51:26:3e:cb:38:cc:91:fe:3a:0f:72:86:d2:ae:
         1d:a9:76:f8:e9:79:59:b8:16:46:58:39:04:6c:ae:48:61:80:
         81:13:45:83:65:12:3f:c6:39:4b:dd:9b:c7:5c:d6:78:6a:a5:
         e6:dc:4f:ca:a9:f4:bf:2d:ef:9d:f5:3c:5c:ca:35:49:69:72:
         0e:e2:50:b1:e9:54:b6:40:b9:26:d1:60:f9:15:7b:94:66:58:
         9b:43:dd:52:9a:55:3f:75:94:0c:6b:6d:07:ac:4f:9d:94:7b:
         d5:d0:d1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:57:14 2025 by rpki-client