Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/db36983e-c4e6-3087-b2f5-4952185b9bb4.roa
File:                     db36983e-c4e6-3087-b2f5-4952185b9bb4.roa (raw, json)
Hash identifier:          87uvdiQz+SqZ53Wxpzi3krjwrZhFZFHQ4XxUyJhuiKs=
Subject key identifier:   33:C3:64:46:60:FE:CC:5F:B2:E0:07:B7:C5:58:1A:A1:12:ED:1A:50
Certificate issuer:       /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
Certificate serial:       010D0C9F43285848E59BCEECE5403B0194CA9880
Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/db36983e-c4e6-3087-b2f5-4952185b9bb4.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     55178
IP address blocks:        192.230.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:ce:ec:e5:40:3b:01:94:ca:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=41494b3a-b577-4936-b413-d1be56c43766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b5:61:3f:b9:13:53:23:45:9f:28:21:c2:0b:
                    61:6a:a7:79:a2:75:e9:6e:d2:25:61:85:23:a4:a1:
                    b5:03:b9:b9:17:20:5d:8e:05:74:1b:b3:44:6c:94:
                    ae:2d:77:3e:88:a4:83:1a:fe:7e:62:e6:f0:30:f0:
                    47:ee:3d:a0:7d:ea:bb:58:58:7d:fa:8b:5e:d3:29:
                    02:42:08:11:21:a0:55:20:d0:fb:65:dc:1f:4d:bd:
                    a0:ed:8a:00:6c:94:ab:aa:23:72:94:ed:f8:e7:50:
                    41:8e:cb:e8:b0:05:2f:97:30:a5:9e:09:01:69:f8:
                    a8:d9:f7:71:68:09:1a:c0:28:8c:3d:2c:d6:67:b4:
                    12:76:98:68:1c:05:99:fb:2c:a7:a4:15:4e:59:56:
                    a9:81:2e:74:c9:ba:55:6c:2e:41:ae:fd:16:f9:35:
                    77:1b:b2:07:39:b5:7a:db:91:89:4b:9f:9d:d4:6d:
                    fd:c4:69:19:dd:73:4f:c5:be:65:62:09:10:81:79:
                    92:75:f3:f9:cc:93:d3:b4:4a:0e:83:64:71:bf:81:
                    c2:22:63:c4:31:60:ed:90:85:8c:e8:36:77:94:db:
                    26:71:5a:eb:bd:3f:55:78:4a:e2:96:f0:56:05:8e:
                    f1:23:3f:6f:bb:cd:96:aa:b0:96:1e:b4:75:f8:a3:
                    68:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C3:64:46:60:FE:CC:5F:B2:E0:07:B7:C5:58:1A:A1:12:ED:1A:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/db36983e-c4e6-3087-b2f5-4952185b9bb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl

            X509v3 Authority Key Identifier:
                keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.230.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:43:16:04:cd:e6:79:6b:c0:6e:27:88:80:c4:7f:d3:63:ee:
         6f:7c:28:dd:ad:56:11:a7:85:5f:9f:c6:be:8f:9a:d0:12:23:
         40:0d:63:34:76:df:f9:c9:fd:df:72:6b:11:1e:da:84:a7:ee:
         62:91:9d:f3:cb:69:14:95:45:a2:fe:8b:54:86:a5:93:46:88:
         f2:11:5c:04:3d:53:ce:bf:1f:18:ae:46:bc:43:c2:6f:33:17:
         2e:b3:c1:f0:cc:08:a9:db:ad:84:1d:67:e2:65:3f:4b:08:50:
         f7:f1:7b:c1:39:70:a8:b7:21:7d:aa:9a:56:5e:25:95:a9:24:
         7a:22:48:43:41:62:2d:45:28:8f:ac:04:a9:fd:1f:d5:c2:33:
         5f:dd:4a:18:d3:ba:25:92:ce:21:18:ff:bc:f5:53:87:28:10:
         07:0a:b3:e9:b3:da:6c:60:71:5e:be:b1:4b:f6:fa:7e:e8:24:
         2c:59:9e:08:e6:7a:ff:99:60:4f:de:fd:4f:52:d9:a7:20:88:
         a7:8b:ab:77:1f:15:79:34:f2:a7:d2:a4:ea:4a:79:48:7a:67:
         ee:e2:69:25:72:bc:95:48:32:a9:f3:f9:e9:07:79:7b:60:49:
         97:89:cc:3e:b1:0c:55:49:ba:81:ec:94:b8:5a:c7:76:15:6f:
         81:7e:2f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:04:45 2025 by rpki-client