Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/eff6b589-2ed6-355b-8e91-efec98f2f5cd.roa
File:                     eff6b589-2ed6-355b-8e91-efec98f2f5cd.roa (raw, json)
Hash identifier:          lwLHUuA5uvoomAofaa11J0Evbl3vaVE5KChF1KNMOdk=
Subject key identifier:   C6:C1:B5:21:BF:BC:A3:D4:90:2D:9F:AC:53:67:FE:4A:5B:83:07:2B
Certificate issuer:       /CN=0e43d693-397f-4f90-96eb-2da9e8465ff5
Certificate serial:       010D0C9F43285848C8B4F1B33C18FD138273E280
Authority key identifier: 37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/eff6b589-2ed6-355b-8e91-efec98f2f5cd.roa
Signing time:             Wed 05 Feb 2025 17:33:08 +0000
ROA not before:           Wed 05 Feb 2025 17:33:08 +0000
ROA not after:            Tue 06 May 2025 16:33:08 +0000
asID:                     683
IP address blocks:        192.5.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:b4:f1:b3:3c:18:fd:13:82:73:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e43d693-397f-4f90-96eb-2da9e8465ff5
        Validity
            Not Before: Feb  5 17:33:08 2025 GMT
            Not After : May  6 16:33:08 2025 GMT
        Subject: CN=058527d5-11d9-476d-81c2-88d05627e392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0d:65:c1:51:0d:4b:c2:3c:71:08:3e:ed:e2:
                    06:e5:45:fe:f8:6e:24:12:b7:2d:48:02:42:61:34:
                    71:be:e9:15:9d:8b:dd:d4:ee:26:97:f9:ca:e0:ca:
                    8f:33:ef:0e:6b:9a:90:3b:e2:52:fb:45:3b:0f:c3:
                    3c:06:97:c7:c5:b9:8f:1b:35:75:1d:ba:68:8a:82:
                    dd:9b:c6:35:ad:1f:f8:67:ad:c1:3b:67:1a:23:0e:
                    dc:ce:d8:cf:db:80:e8:d0:06:37:ed:46:80:e1:9d:
                    73:29:be:81:8c:87:74:3c:64:3a:c7:1c:68:c3:c7:
                    91:b5:02:33:f4:21:1d:6a:f0:33:62:88:71:87:3b:
                    45:01:07:ea:f8:2a:c8:f0:0a:83:a5:b6:60:06:68:
                    2c:a7:40:20:20:fb:b7:5e:fe:e0:a3:4d:2b:db:06:
                    de:59:93:a8:6d:05:bb:cc:76:6e:41:59:0e:76:2e:
                    70:2d:13:06:07:1c:ec:4e:15:88:44:5a:dd:41:39:
                    cd:c6:b5:0c:d0:c5:43:c6:fb:53:6a:4f:e7:60:38:
                    12:65:2e:8d:a3:25:16:4e:a0:89:b0:82:ff:b5:47:
                    f6:0a:63:5f:c4:f2:50:b7:f6:35:e4:62:60:8e:bd:
                    6a:6a:b3:9e:77:b8:16:24:46:0c:bf:0b:28:18:41:
                    02:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C1:B5:21:BF:BC:A3:D4:90:2D:9F:AC:53:67:FE:4A:5B:83:07:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/eff6b589-2ed6-355b-8e91-efec98f2f5cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl

            X509v3 Authority Key Identifier:
                keyid:37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:7e:b0:a0:a0:f2:8d:e1:41:8c:67:fe:49:71:69:25:2a:02:
         ac:b3:d1:de:a9:53:45:56:2c:0f:72:75:19:1d:fa:40:98:17:
         e6:f9:62:90:8c:ff:38:3d:7e:53:cd:24:8b:fc:85:0d:76:cc:
         23:f5:a4:86:c3:48:53:e2:37:c2:e1:32:5e:6b:8d:56:e9:93:
         21:06:d6:d8:00:eb:ea:7f:ce:ac:bd:e4:67:0e:df:11:3c:b9:
         03:69:85:3d:a7:81:b1:cc:4b:2f:9a:d1:54:76:7f:56:e4:e9:
         20:e3:0d:75:dc:36:9d:9b:b6:38:b4:91:3d:7d:40:ba:20:98:
         31:d8:99:8e:52:08:72:5e:4a:ec:59:32:39:d9:d1:dc:76:40:
         d6:10:32:54:fc:1c:a1:a7:53:84:3e:56:e8:ac:90:1c:14:e2:
         1a:ee:39:09:93:df:89:3d:1f:55:99:2b:c9:22:49:62:c4:d8:
         64:33:9d:5a:53:e3:31:26:c0:66:3c:de:a1:1c:e0:51:8f:a1:
         7c:7b:cc:74:24:5e:01:a8:f5:8f:d1:38:77:86:00:66:57:da:
         c5:fa:71:e4:a0:25:05:c0:c7:6e:30:60:d5:81:d4:b5:28:38:
         1a:2e:26:5a:ff:57:a4:1c:0d:85:a1:72:71:51:8a:e7:b7:28:
         5d:1a:a5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:09:14 2025 by rpki-client