Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/33cbec81-889f-3f90-9a5b-e098fa182512.roa
File:                     33cbec81-889f-3f90-9a5b-e098fa182512.roa (raw, json)
Hash identifier:          vk1NJERcZiwjK3tiCPLPIXdvVJA19LecALeII+SyHJA=
Subject key identifier:   B8:67:34:4D:5C:B3:F1:26:4A:58:74:33:D7:EA:B2:45:EF:48:D7:79
Certificate issuer:       /CN=eac00894-5e17-4e14-b8eb-b7fb348ad1c2
Certificate serial:       010D0C9F432858490B4C2107DB7EDCEB87DD70C8
Authority key identifier: C1:8C:CC:6E:6F:7A:24:1F:57:0A:B0:C1:A2:A8:C9:7C:FA:31:BD:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/33cbec81-889f-3f90-9a5b-e098fa182512.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     7212
IP address blocks:        192.111.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:21:07:db:7e:dc:eb:87:dd:70:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eac00894-5e17-4e14-b8eb-b7fb348ad1c2
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=59e9468f-690b-453b-becc-cc64f34be8bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:29:4a:6b:d3:a0:3c:dc:0d:c4:ed:cf:f8:8d:
                    5a:84:26:3b:a1:c6:07:8c:df:e9:84:8b:10:56:19:
                    c4:14:59:a9:7d:ac:9d:12:3e:01:f8:1c:81:1d:7a:
                    73:d4:98:60:76:d9:5a:28:87:6a:5d:06:99:ff:3b:
                    53:d0:dc:df:4a:65:d9:7d:8e:d5:db:e7:fb:fb:e1:
                    f4:92:b1:83:fe:09:a2:85:96:b6:c3:1a:64:99:da:
                    86:9c:1e:b9:7a:6e:db:d7:60:5d:bf:92:5c:7a:36:
                    9e:40:8e:e4:9e:24:8b:e1:45:ce:32:7d:64:4a:93:
                    28:ca:84:ab:fe:0f:20:52:90:e9:85:8d:f0:49:84:
                    ee:c9:13:ce:1c:e0:9c:21:88:a2:05:10:9c:a3:cf:
                    84:a2:09:6b:c0:ac:d8:df:e0:7b:d3:4c:19:c2:b4:
                    d2:c5:8c:7b:34:af:2e:a1:90:b6:14:76:11:00:c9:
                    d3:ee:4e:62:6a:66:e4:65:2d:3a:25:61:d0:32:f2:
                    0b:31:8d:b0:de:39:c2:2d:aa:06:38:e4:3b:e2:28:
                    7f:b5:70:ff:95:7a:4a:50:b5:d0:0b:df:8f:b8:ba:
                    3e:7b:95:90:15:37:29:fe:a9:61:c7:0a:ea:b9:3a:
                    95:35:28:0e:8d:3b:bc:33:e1:d8:0c:7e:58:6a:d4:
                    53:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:67:34:4D:5C:B3:F1:26:4A:58:74:33:D7:EA:B2:45:EF:48:D7:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/33cbec81-889f-3f90-9a5b-e098fa182512.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.crl

            X509v3 Authority Key Identifier:
                keyid:C1:8C:CC:6E:6F:7A:24:1F:57:0A:B0:C1:A2:A8:C9:7C:FA:31:BD:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:e7:22:ed:8d:39:45:d4:26:4d:4a:66:fe:13:91:bb:a6:4a:
         72:09:c3:03:6c:77:15:fd:e6:b0:ab:81:33:4f:7c:0b:8d:1e:
         8f:28:69:20:47:69:fe:70:82:95:21:81:05:d5:83:28:ff:70:
         41:18:d3:31:14:3d:7d:af:50:44:bd:ed:4c:fa:0c:b1:36:31:
         1f:f9:7b:99:92:9b:95:3d:1d:17:02:7a:29:6d:d8:0e:ad:c2:
         16:aa:55:ed:6b:dd:68:dc:04:67:de:9f:ca:47:b5:9f:bc:7e:
         4e:9e:22:3c:73:1a:6f:22:d3:9c:29:7a:00:80:91:38:66:24:
         4e:51:af:53:19:e2:ec:e7:25:0d:93:b8:00:aa:d6:ca:58:64:
         32:c9:d6:5a:24:b6:35:24:22:7e:60:6e:07:36:b9:31:d7:0e:
         70:5a:3d:e2:88:c6:7e:19:f0:c2:8d:ae:6e:b1:af:fb:42:0f:
         fb:ac:7c:a6:e3:bb:90:d8:bc:97:52:58:07:78:60:ec:c8:e0:
         d6:9d:8f:4b:4d:81:49:6a:8e:ed:6e:e3:dd:ff:fc:24:c0:63:
         36:85:26:4e:09:f5:c8:97:5b:70:03:f5:cf:27:31:d6:c1:7f:
         81:74:18:d2:12:df:16:a7:d0:5c:6f:b5:c2:d6:a5:bf:01:49:
         09:f0:ce:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:56:15 2025 by rpki-client