Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/546804cb-dac1-3323-8653-cb746268821f.roa
File:                     546804cb-dac1-3323-8653-cb746268821f.roa (raw, json)
Hash identifier:          ehoRMiK/yzRmzy9XTL8fNMOeV4LPDQO9bdkEaZn8i/Q=
Subject key identifier:   8E:ED:F9:10:A5:D4:B3:99:C7:49:BB:3E:22:CC:1F:26:57:98:A2:CC
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848AAFB58CB4894C16AE487BC80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/546804cb-dac1-3323-8653-cb746268821f.roa
Signing time:             Sun 26 Jan 2025 02:00:38 +0000
ROA not before:           Sun 26 Jan 2025 02:00:38 +0000
ROA not after:            Sat 26 Apr 2025 01:00:38 +0000
asID:                     3356
IP address blocks:        192.85.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:aa:fb:58:cb:48:94:c1:6a:e4:87:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jan 26 02:00:38 2025 GMT
            Not After : Apr 26 01:00:38 2025 GMT
        Subject: CN=c3193983-f412-48c5-87ac-cc0aaac4b476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:53:95:29:81:cb:a3:b3:41:75:28:61:84:37:
                    0e:6b:1e:5d:ab:a3:b7:48:fc:cc:c6:a8:8f:7b:1d:
                    78:fb:c6:f2:13:69:23:c0:28:24:aa:20:00:32:42:
                    06:c8:5d:a4:10:19:41:2a:a1:2a:5c:85:03:e4:8d:
                    6e:fb:3d:6a:66:e5:13:24:79:26:a6:e5:cf:ce:c8:
                    9c:da:8a:be:60:92:fe:b8:89:e5:9e:e1:cb:4d:e4:
                    f1:28:1f:c8:ab:3a:b8:0a:90:65:78:6f:d0:e4:ac:
                    53:21:5d:b3:82:4a:5b:6c:d5:19:f9:74:c0:a6:c8:
                    ee:0a:cd:14:07:16:e2:3f:45:a6:07:2b:48:cf:9d:
                    f6:61:06:68:ce:0a:86:7f:9b:6f:42:ca:f6:9d:9f:
                    6d:35:49:4d:d3:61:4e:bd:87:79:bd:2f:97:85:ef:
                    56:3a:9e:f4:fd:bd:48:67:ca:f1:8a:93:19:bf:e9:
                    66:2d:af:a9:89:fb:72:23:72:84:46:2a:69:14:cb:
                    10:0b:22:97:47:43:e2:ce:24:4a:13:92:fc:08:82:
                    0a:d5:59:ee:86:e1:73:b2:15:a3:f5:93:e4:77:05:
                    ae:5f:a5:96:9a:1e:e2:b6:aa:e0:3e:07:f9:44:60:
                    e1:60:93:5f:17:63:06:96:d3:1a:33:d2:d3:96:26:
                    06:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:ED:F9:10:A5:D4:B3:99:C7:49:BB:3E:22:CC:1F:26:57:98:A2:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/546804cb-dac1-3323-8653-cb746268821f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:72:2e:8a:13:89:81:30:51:a6:42:70:3f:04:1f:41:62:c5:
         ff:8a:0d:c9:9b:db:2e:f9:a0:59:34:c7:b7:16:b5:2d:5b:37:
         7f:1d:9f:dd:43:56:90:ab:b4:78:00:9e:d9:40:e1:1f:bf:a8:
         df:3a:94:49:46:0f:92:bf:47:cc:f4:f1:ac:c9:96:03:a2:3f:
         24:34:7f:e9:3b:62:55:23:83:db:3e:5e:d8:ca:5e:ef:1e:b3:
         d0:a7:d7:a1:b5:25:d7:04:40:38:14:f0:e5:0d:6a:4e:32:61:
         c4:dc:0b:a2:3f:d9:a1:bb:b9:7b:ef:cf:04:bd:60:a5:09:84:
         f4:d6:09:42:73:ab:21:5d:ad:53:db:e9:d5:aa:2b:ab:e0:80:
         f7:45:e2:f9:6d:65:5d:04:41:02:10:e1:38:43:ac:16:ad:45:
         01:8c:4d:ba:36:16:1e:b8:62:59:bc:39:0f:f8:c6:90:f0:54:
         fd:8a:54:f4:c1:92:dd:be:68:32:69:96:6c:54:f7:a0:93:a7:
         75:5b:8f:26:f5:40:31:3b:96:fc:8c:ac:8f:00:4f:e2:fd:82:
         c2:06:fa:c2:86:e9:1f:83:0d:60:c5:6c:0a:fe:28:d6:1b:56:
         54:d5:9a:44:07:00:65:d9:56:65:46:1e:b6:1b:97:27:c0:a2:
         bc:4c:4d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:20 2025 by rpki-client