Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/b362f402-f840-31ad-9a3b-aed78a08f528.roa
File:                     b362f402-f840-31ad-9a3b-aed78a08f528.roa (raw, json)
Hash identifier:          t40CQdC1R+HKkeEmI2quEFtA+P/n5/E8E0ypO+LVAAY=
Subject key identifier:   AA:01:2A:3B:94:83:B1:4D:23:54:8A:29:6F:44:43:6B:B3:14:44:0B
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285848AF2B82FF6235752879C56F48
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/b362f402-f840-31ad-9a3b-aed78a08f528.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     211321
IP address blocks:        192.228.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:82:ff:62:35:75:28:79:c5:6f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=2489d705-a6bf-4b3b-840f-1a2b7327c999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:52:4f:a6:b7:b1:3c:49:a3:c7:c0:86:a0:c9:
                    14:7c:e2:09:c6:68:53:42:d1:ff:55:4a:bf:2b:43:
                    7e:d5:00:e9:33:f6:ad:93:de:db:cf:f8:a7:68:94:
                    72:53:36:9c:5d:3f:82:5b:e1:1d:09:18:99:f8:69:
                    12:18:54:e4:db:bb:30:dc:ff:d9:9c:17:6e:d5:3f:
                    ff:dd:2b:f0:c6:69:63:9b:1f:42:69:1a:2b:d7:4b:
                    5f:f4:7f:9b:74:de:dd:75:16:06:d3:aa:7a:6d:73:
                    d3:3a:ae:0d:e6:ef:b3:c2:66:5d:84:b1:00:34:fe:
                    a3:4e:19:4f:58:d5:a3:71:a8:57:c6:39:98:f8:a7:
                    60:71:fe:15:3a:c4:05:df:a5:b6:9f:eb:b8:f3:cc:
                    f2:20:71:8d:fe:e8:09:b6:2c:92:ad:ee:f7:80:8d:
                    6a:7f:7f:a0:74:b8:cc:1e:39:51:fa:64:75:67:9c:
                    7a:39:61:db:ee:16:d0:56:74:b6:ce:ad:c5:b9:87:
                    21:0e:67:ef:c0:e2:9a:bf:55:63:ff:7d:20:23:68:
                    bb:ea:04:bd:34:f3:92:23:43:3d:b0:b5:56:fe:f1:
                    63:f9:a2:aa:c5:fa:c6:c9:40:4c:3f:47:8f:8a:8c:
                    fd:4b:4c:8f:dd:f6:8c:94:62:77:dd:1f:fd:2a:93:
                    50:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:01:2A:3B:94:83:B1:4D:23:54:8A:29:6F:44:43:6B:B3:14:44:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/b362f402-f840-31ad-9a3b-aed78a08f528.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:df:2c:f9:e9:bc:bc:c1:39:d1:b9:0e:3a:e5:10:71:eb:1f:
         f5:b3:a6:21:85:9a:76:3c:3f:92:5b:59:37:c3:f5:bc:2c:c1:
         6f:73:62:d6:ee:75:de:b5:4d:3d:ba:b5:58:dc:ba:ab:58:54:
         df:b8:50:fd:f2:99:24:a3:92:7c:e4:ce:06:89:6b:c4:7c:a0:
         eb:eb:bd:7b:46:cc:14:cf:1a:c1:77:53:b5:ac:ff:20:b0:2e:
         a4:89:ea:ad:f4:70:44:cf:f3:20:7d:b2:d9:12:da:d1:18:b0:
         4e:5e:77:02:a0:37:9e:9e:e3:6d:c6:d7:85:c1:aa:9d:78:07:
         4b:c3:51:50:a6:7a:7b:28:5c:85:a6:ed:61:18:12:c8:ca:c9:
         9b:8c:d1:7e:aa:5b:88:ad:6a:b6:4b:e3:85:f1:4f:0e:ab:c7:
         6e:d8:86:8f:fd:a9:4f:0e:62:97:2e:68:aa:6f:ff:42:9b:81:
         9f:7d:0d:b3:60:44:52:1a:6c:87:18:2c:e1:f2:46:82:d3:13:
         9d:1e:a9:70:da:e0:08:50:a5:ff:f1:84:97:c2:29:0a:b6:3e:
         8c:74:33:68:b5:2a:0c:b6:a5:a5:61:6d:b0:1e:c0:e4:a3:b5:
         3b:50:4c:76:d6:41:71:fd:75:27:d8:56:d7:38:4a:ee:fd:6c:
         c7:b8:61:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:24:30 2025 by rpki-client