Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/bf08937d-404b-366f-bdcd-82a7cd5e0545.roa
File:                     bf08937d-404b-366f-bdcd-82a7cd5e0545.roa (raw, json)
Hash identifier:          nLQAjIlskW8V7rlpJ6yWcq1Q+tWMakDHicvhP8KzNjM=
Subject key identifier:   63:7E:7A:86:83:2E:A0:21:7E:DB:08:1D:8D:DC:C3:F1:6F:37:52:7D
Certificate issuer:       /CN=eccad7f1-567f-47db-a323-ab03604703b0
Certificate serial:       010D0C9F4328584902EBF8D72E3B728869D454E0
Authority key identifier: B2:1B:6F:48:4F:18:26:14:B5:94:E1:CA:CF:61:89:B8:F3:89:73:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/bf08937d-404b-366f-bdcd-82a7cd5e0545.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     11281
IP address blocks:        204.9.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/eccad7f1-567f-47db-a323-ab03604703b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/eccad7f1-567f-47db-a323-ab03604703b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:eb:f8:d7:2e:3b:72:88:69:d4:54:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eccad7f1-567f-47db-a323-ab03604703b0
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=93c446f5-b39b-4c34-a055-3717e1f27d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:49:7c:2f:6d:ba:8f:32:00:cf:ff:55:35:83:
                    20:08:e7:c4:84:c6:79:6a:d5:c5:cd:d3:df:a2:14:
                    92:ba:ce:73:ad:be:01:10:bc:e7:34:ef:8a:7d:26:
                    61:b0:6f:ab:63:53:7b:7e:c5:80:97:3b:76:99:74:
                    43:d8:a0:0a:61:ac:45:a0:01:e2:de:ee:e3:27:4e:
                    aa:2f:8b:59:0a:8c:df:0b:71:08:31:25:be:4a:c1:
                    d1:ad:14:0c:22:26:96:df:e0:b8:45:f6:77:e2:a3:
                    ee:e0:42:89:1a:14:0d:43:37:11:18:89:60:01:cf:
                    5c:77:4f:b1:f3:2d:bb:85:6d:3a:99:14:9b:ba:35:
                    a5:db:65:c5:78:4d:8d:cc:1f:67:19:56:2b:d6:75:
                    68:86:42:c7:e7:86:c6:76:53:ad:13:b8:df:3c:76:
                    f6:ba:09:c7:e9:99:05:33:ba:16:87:e5:a0:b0:5f:
                    9c:d1:8a:26:00:9c:ee:12:f4:5b:93:0f:0d:b1:dd:
                    85:56:db:e8:3d:8f:9b:f6:5f:c4:06:d3:ac:8f:6e:
                    00:f6:39:78:23:ce:3b:2c:60:48:84:84:44:33:49:
                    15:a3:88:d0:8a:c1:92:76:73:4d:2a:72:f1:66:7a:
                    2d:1f:f7:23:c2:7e:4a:57:5b:ad:31:e4:94:63:64:
                    27:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:7E:7A:86:83:2E:A0:21:7E:DB:08:1D:8D:DC:C3:F1:6F:37:52:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/bf08937d-404b-366f-bdcd-82a7cd5e0545.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/eccad7f1-567f-47db-a323-ab03604703b0.crl

            X509v3 Authority Key Identifier:
                keyid:B2:1B:6F:48:4F:18:26:14:B5:94:E1:CA:CF:61:89:B8:F3:89:73:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.9.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:5f:db:b2:d5:fb:b7:61:f2:8e:27:0a:88:e0:c4:79:38:1b:
         c3:4f:b1:e1:44:73:73:6d:61:01:57:19:95:72:62:93:b4:03:
         bf:72:17:e2:b4:1f:e2:be:c1:b2:d9:1c:33:f3:21:02:3c:a4:
         39:d8:16:e1:2c:58:50:fa:39:62:31:8b:45:fe:cd:4f:74:bd:
         5c:ca:0e:10:28:51:52:41:27:99:76:88:25:c2:49:c0:0c:22:
         a2:7f:fd:bb:1c:50:d1:fa:f6:d9:18:92:0a:7f:19:70:2a:fe:
         23:a8:ac:fa:d1:7d:24:35:f8:3a:50:ac:2f:1b:09:77:c6:9d:
         1b:d9:64:dd:f7:b8:76:b4:35:a9:18:87:9a:8d:8b:e6:33:66:
         c5:ee:9a:6f:dc:78:af:40:b0:ae:b6:0c:74:91:a5:01:83:50:
         d0:c6:19:49:6c:89:2f:8a:0b:bd:d5:20:a0:7e:10:aa:76:a4:
         c8:fd:f6:d0:aa:d2:64:8e:e9:ce:6a:11:c5:7a:b6:3a:7b:9c:
         20:54:9d:f9:25:0f:86:da:99:53:eb:26:39:74:de:d7:dc:9d:
         57:d6:46:90:cc:00:70:08:18:0d:1c:fe:45:12:0a:6b:ff:0d:
         40:a0:c0:a0:de:65:a5:78:e1:dc:33:8c:19:bc:8b:6b:6c:e5:
         27:8d:89:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:09:07 2025 by rpki-client