Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ef5afedf-4b06-3810-a8cd-f32cceec68bd.roa
File:                     ef5afedf-4b06-3810-a8cd-f32cceec68bd.roa (raw, json)
Hash identifier:          DRSBqKjcYN//Rw4ckVsgG31mjVGP3eKuWDNR2ZREhuc=
Subject key identifier:   7C:E9:B4:30:04:84:A2:45:A5:00:C9:D2:F8:8D:1A:55:BA:87:35:C5
Certificate issuer:       /CN=ab98592a-7218-439c-b165-34810fd16d71
Certificate serial:       010D0C9F4328584953C44EF1F999C841DB9FBA80
Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ef5afedf-4b06-3810-a8cd-f32cceec68bd.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     3300
IP address blocks:        192.237.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:4e:f1:f9:99:c8:41:db:9f:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=b8563958-fb0e-4d2a-96f7-4bbefb3a987c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d7:26:24:65:68:34:08:86:b6:22:71:f7:a1:
                    5b:43:44:8d:4e:aa:76:b2:32:45:cd:79:63:86:64:
                    b0:ce:6b:70:9e:6f:4b:d8:41:35:7a:21:38:76:02:
                    09:6d:8b:b6:46:6b:80:d3:85:1d:9b:a3:6a:78:be:
                    d6:ac:53:61:bd:be:a7:bc:60:78:3b:37:ec:e5:af:
                    3c:e5:63:7c:08:01:6a:15:f2:34:5c:49:6d:6e:31:
                    7b:35:04:27:80:19:b3:b9:dc:b9:c8:c8:61:c9:a4:
                    b5:ac:35:72:3b:5b:55:0c:07:fd:20:47:68:50:a9:
                    af:f1:df:d7:8d:14:7a:74:7a:34:a7:3e:9b:b6:05:
                    a9:74:a4:da:d8:63:58:5a:4d:2c:93:13:ff:d4:8f:
                    aa:29:f2:bd:f0:36:7e:f9:b1:e0:88:4c:82:bf:bd:
                    a3:56:47:c3:e6:97:d0:d3:40:23:38:13:c2:5c:b9:
                    ea:54:0b:72:23:e9:09:36:c5:67:82:72:03:72:cf:
                    2a:36:84:52:2d:18:dc:e7:54:1c:fd:86:bd:47:2f:
                    2d:1a:4f:c4:79:51:8a:a0:ab:a2:bf:7f:09:f8:3a:
                    58:5b:55:dc:4d:f1:eb:d5:b8:a7:80:6f:03:53:0b:
                    d0:7c:07:49:b6:f3:31:05:d8:c7:5d:60:ad:60:55:
                    74:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E9:B4:30:04:84:A2:45:A5:00:C9:D2:F8:8D:1A:55:BA:87:35:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ef5afedf-4b06-3810-a8cd-f32cceec68bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl

            X509v3 Authority Key Identifier:
                keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.237.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:f8:d2:82:13:14:fa:a9:75:40:79:dd:09:02:1e:9b:49:5a:
         35:a7:e0:30:6f:a6:fa:32:62:0d:84:38:8f:a3:e9:65:cf:ed:
         b5:4c:3c:45:6c:14:78:d3:fd:2d:6d:50:ab:87:e5:5b:60:cd:
         4a:51:0b:63:af:6a:8e:de:1e:ae:55:a1:65:a0:06:15:32:32:
         ed:93:0b:bb:ec:04:ae:5f:06:3e:00:07:24:4f:0d:b4:aa:ec:
         25:03:61:a1:d4:11:2c:da:86:85:67:75:9d:67:82:22:ce:41:
         b5:fe:e1:5b:48:0e:12:1f:c0:c1:67:fc:ca:04:83:f3:1a:99:
         cb:55:81:e6:95:16:30:4e:ef:a2:4b:d5:e6:44:be:bc:3f:44:
         2d:48:8b:ca:b8:cf:13:1e:66:bb:ff:af:05:be:f8:b1:d1:88:
         d5:99:9e:9e:dc:b3:e4:00:82:64:4a:ae:eb:9a:75:d7:07:f7:
         7f:2d:7a:43:b9:cd:22:e6:97:90:b9:dd:a1:7a:b4:1b:e1:4a:
         d6:ce:c7:4f:7f:b8:06:da:86:33:b0:1f:bc:80:50:ae:ff:0c:
         65:a4:13:f4:11:ef:e5:6c:f5:ec:4f:14:7a:c2:8f:d5:b6:87:
         82:d1:0c:f3:16:32:6d:bd:a0:13:78:bb:05:4a:56:7c:6e:ba:
         0c:fd:e9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:52:19 2025 by rpki-client