Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/84e8903d-ec5b-3551-96bd-d419dbc97d32.roa
File:                     84e8903d-ec5b-3551-96bd-d419dbc97d32.roa (raw, json)
Hash identifier:          LcilkCxMZ2cni5z5/jJLg6iN4znBn+N23p522M19Z2A=
Subject key identifier:   60:23:02:34:E3:E6:9F:ED:14:EC:52:DF:A5:FB:1F:7B:EA:B7:B9:1D
Certificate issuer:       /CN=71e68809-5436-4288-ad80-0df35fa0b945
Certificate serial:       010D0C9F432858490E16CAFAFED1154827EA2FC0
Authority key identifier: 10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/84e8903d-ec5b-3551-96bd-d419dbc97d32.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        192.28.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:ca:fa:fe:d1:15:48:27:ea:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71e68809-5436-4288-ad80-0df35fa0b945
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=55bc4b21-bd03-41be-8488-9951fbdb896b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:82:32:d0:78:04:63:e2:7f:c5:7c:6d:23:8c:
                    fe:b2:31:5b:9c:34:9a:3c:12:ea:0f:e1:12:63:ea:
                    29:e5:15:87:3c:30:bb:e1:ca:75:da:d6:cf:3a:d3:
                    ba:9d:b3:cb:87:b8:d6:f4:78:f0:76:4c:35:c6:70:
                    67:bb:81:d5:9c:2a:89:26:d2:69:fe:17:26:b7:9e:
                    6f:01:4b:de:c7:ad:78:be:b6:d3:6f:11:58:81:2e:
                    50:de:7f:cc:68:54:de:ea:de:86:5d:18:f4:28:c6:
                    22:c6:a3:01:f7:2c:23:60:f8:ea:67:ff:33:e7:79:
                    38:bb:22:d9:21:e4:fe:1d:a6:d2:b2:cf:0d:4c:a5:
                    16:d7:38:0a:30:29:f6:26:d1:5e:a1:20:d5:10:7d:
                    e0:8b:22:e7:4c:7e:d6:b4:14:f3:6a:2c:89:c0:3a:
                    32:27:07:89:57:04:03:88:3d:bf:59:a1:6a:30:5a:
                    9a:23:1b:a7:d3:87:34:78:c0:a0:01:df:c0:9b:5f:
                    bc:a5:f8:0e:a0:0a:39:6f:5f:3a:c1:26:03:8e:4c:
                    f1:cf:e0:bc:ed:4a:e2:65:e2:8e:d3:eb:e2:eb:f7:
                    26:34:5c:ab:62:97:23:51:58:f9:e9:50:87:dd:22:
                    2c:97:02:0e:a3:b6:e1:92:d0:ea:c3:67:65:b3:4e:
                    e1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:23:02:34:E3:E6:9F:ED:14:EC:52:DF:A5:FB:1F:7B:EA:B7:B9:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/84e8903d-ec5b-3551-96bd-d419dbc97d32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl

            X509v3 Authority Key Identifier:
                keyid:10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.28.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:42:f0:50:27:76:db:f7:ce:7d:d8:4b:02:0d:ca:5f:07:ed:
         a2:0f:43:e6:75:84:49:c5:38:fc:1d:be:bf:d6:90:43:be:68:
         d2:30:1c:78:fb:87:47:95:8d:ab:b4:69:fc:e4:a0:56:60:a9:
         ee:dc:15:4c:1e:ed:07:02:db:4a:10:c8:4a:d9:c1:00:25:af:
         1b:4a:db:eb:86:ea:6e:a4:0b:10:00:3b:8a:00:fc:50:db:fa:
         8c:6e:a1:12:2a:33:df:14:d5:19:0d:03:b7:75:0e:95:eb:10:
         68:55:51:29:e0:33:85:c8:a6:42:df:70:2d:cb:c7:54:58:b4:
         ea:60:08:a1:6d:39:d9:2c:58:7c:bf:8e:23:4a:fd:8b:bb:10:
         b5:3c:87:b0:f7:f7:0d:ea:f1:44:f4:4c:3d:b2:64:fe:95:75:
         65:c6:05:5a:33:1e:0e:d1:5b:01:10:f5:a8:0a:72:fd:8c:e3:
         64:d4:e5:df:e9:1d:0b:7c:1b:46:ab:e7:08:c6:6c:e9:6c:ee:
         10:ae:73:cb:df:57:13:c4:1d:1f:67:d4:6f:7f:43:75:7d:5f:
         8a:f6:97:ef:e0:03:7f:db:67:8f:4c:dd:77:76:ea:6b:ce:93:
         7e:85:85:2c:b5:85:ac:d1:2f:70:62:77:34:30:b3:78:ca:5e:
         44:64:af:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:05:13 2025 by rpki-client