Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/589bbfa9-ed5d-3100-a7f1-7d37803dd68f.roa
File:                     589bbfa9-ed5d-3100-a7f1-7d37803dd68f.roa (raw, json)
Hash identifier:          RZv69IVrhiTU1B/tJb6uQP1z67ZwuaF4YDRnOJq8AyU=
Subject key identifier:   94:39:22:BC:A0:5E:29:6A:94:F0:90:FB:90:4C:2F:DD:AD:F2:90:C1
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F43285848C5822BF3B306D2B928E85080
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/589bbfa9-ed5d-3100-a7f1-7d37803dd68f.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        192.104.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:2b:f3:b3:06:d2:b9:28:e8:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=82209172-4b1f-4f0d-9a0c-dd7d85df1444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6f:9c:6b:2e:04:51:af:95:76:3c:73:52:7c:
                    86:89:35:4f:c6:1f:9d:9e:75:9e:f0:98:dd:a2:78:
                    5b:25:94:1b:04:28:e3:9e:1c:c3:b4:07:57:d3:ec:
                    e2:78:c9:1f:fd:e4:d5:6a:ea:bd:cd:e3:09:22:2a:
                    0c:d3:e1:79:7e:82:ef:4a:f8:4c:a4:24:dd:b6:f1:
                    6a:2e:29:8e:75:17:3d:49:2e:4c:e0:61:7f:d2:12:
                    23:f7:d5:bf:be:a5:44:4a:95:9d:e3:1e:18:47:59:
                    cb:07:be:b2:80:28:0c:58:cd:6e:ce:57:47:97:9e:
                    b4:b2:31:d2:fc:10:13:b0:17:c7:14:04:39:69:d9:
                    f6:46:5c:c9:48:cc:dd:e1:82:ec:41:e7:4c:e1:cc:
                    79:9c:52:a0:13:0c:9c:c0:58:b6:f4:c5:85:eb:0c:
                    61:de:93:26:f0:8f:09:28:a5:21:9e:87:8d:97:0f:
                    cc:b2:a2:45:b4:99:01:71:61:3c:32:22:ac:57:a1:
                    cc:7b:13:43:d5:60:4a:16:0d:52:22:59:7d:10:b3:
                    80:a3:b9:f9:fc:67:88:77:3e:0f:4e:af:6f:8a:e7:
                    a5:c7:ef:ae:5e:c6:0e:14:c1:4d:df:7f:47:69:4a:
                    46:8e:1f:ec:ed:16:aa:3d:01:d4:13:46:87:cf:16:
                    fa:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:39:22:BC:A0:5E:29:6A:94:F0:90:FB:90:4C:2F:DD:AD:F2:90:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/589bbfa9-ed5d-3100-a7f1-7d37803dd68f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.104.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:93:df:bb:70:3c:c1:d7:29:c7:f5:0b:59:8d:f3:46:27:3d:
         1c:1f:c8:56:88:94:bd:2f:c8:6f:af:5f:31:e2:a6:85:bd:2c:
         a3:10:ca:21:39:58:41:45:55:ca:4c:df:4b:94:da:2b:d5:c5:
         56:09:33:de:50:cb:07:65:3f:14:17:30:1b:a3:7a:8f:80:09:
         64:8c:42:7a:06:cf:a8:45:60:f4:e2:81:24:70:50:65:ec:30:
         9d:7f:fb:79:db:2d:11:12:54:26:d3:1a:e2:b2:fd:7b:3f:4a:
         dd:75:95:d8:6f:9f:79:1a:12:ec:c6:5c:c5:79:32:c9:e3:84:
         b2:1b:e2:ae:31:e4:2d:80:25:f8:0c:4e:05:7a:4c:eb:82:d5:
         45:ed:71:46:39:b3:3a:bc:41:d4:a1:5c:e0:fd:21:48:69:74:
         d5:ee:a6:cd:8a:b0:c0:50:d7:5e:65:97:a8:20:90:c7:2a:3a:
         08:95:b2:21:6e:67:71:50:7b:30:ce:46:83:1a:be:aa:a8:43:
         9d:df:1b:f8:af:be:9b:5b:6a:1a:9b:fb:f4:63:13:ae:59:23:
         65:3c:f9:98:24:02:88:31:ab:b3:f8:9d:0d:bf:7f:9b:c7:48:
         34:2d:93:a4:52:5d:6e:02:c2:d4:cb:a4:af:68:6e:14:0d:c5:
         33:6d:f4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:40 2025 by rpki-client