Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/93067aad-8845-303d-90d2-e4d1ec1c2327.roa
File:                     93067aad-8845-303d-90d2-e4d1ec1c2327.roa (raw, json)
Hash identifier:          9qARdoOBTvqJoD/yn1mxDUJkEc7zaQc2Cc0tOM49QSk=
Subject key identifier:   D6:8E:BE:CF:BB:6D:D2:73:D1:D3:F0:AE:B6:22:E4:26:AC:07:B2:4E
Certificate issuer:       /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Certificate serial:       010D0C9F43285848BE8630B8C162CCAC18D38B78
Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/93067aad-8845-303d-90d2-e4d1ec1c2327.roa
Signing time:             Sun 02 Feb 2025 02:00:39 +0000
ROA not before:           Sun 02 Feb 2025 02:00:39 +0000
ROA not after:            Sat 03 May 2025 01:00:39 +0000
asID:                     0
IP address blocks:        192.188.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:86:30:b8:c1:62:cc:ac:18:d3:8b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
        Validity
            Not Before: Feb  2 02:00:39 2025 GMT
            Not After : May  3 01:00:39 2025 GMT
        Subject: CN=f93a28a8-c6e9-4bbd-b922-1d323921cabd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:23:9c:9e:1d:7a:16:12:b8:de:a3:aa:ec:76:
                    6a:c5:99:50:d4:5e:6c:12:cf:f1:b0:65:af:4e:05:
                    0f:4b:be:d8:7a:f0:5c:4b:55:ed:38:71:33:48:64:
                    00:36:37:33:87:80:11:21:3b:4d:13:4a:de:8f:46:
                    8d:8a:41:52:10:b9:6a:fc:ce:4a:54:84:d0:3b:00:
                    42:aa:61:23:5e:81:7b:a1:9f:41:27:54:f2:b6:7a:
                    6c:c4:ad:60:76:34:76:28:7c:1a:98:78:22:91:07:
                    a6:d8:4c:5c:dd:fd:b8:80:f6:07:48:23:84:a2:f2:
                    54:b0:23:d5:5f:a0:c5:0b:f9:87:4f:f8:40:39:1b:
                    2d:aa:f8:41:30:aa:3c:c2:ab:50:7e:09:18:fb:49:
                    a5:e5:6a:e1:56:e6:a9:7e:01:ed:59:5b:2b:db:f6:
                    12:da:4c:a9:f3:f1:5d:7e:24:0d:91:47:62:0a:67:
                    30:b3:cc:0a:5c:90:d3:0f:7d:3b:22:75:de:c5:c6:
                    d6:d1:3b:ca:b5:a3:8d:99:12:d5:16:4f:08:c5:99:
                    54:d2:00:57:3f:91:11:f2:29:4e:f6:c9:bc:f3:70:
                    f5:ce:0c:fe:5f:04:2c:86:56:84:76:2d:2e:eb:08:
                    7d:2f:df:41:49:3a:f6:36:b0:ef:ff:a2:8c:68:33:
                    9f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:8E:BE:CF:BB:6D:D2:73:D1:D3:F0:AE:B6:22:E4:26:AC:07:B2:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/93067aad-8845-303d-90d2-e4d1ec1c2327.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl

            X509v3 Authority Key Identifier:
                keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:65:1e:51:58:fd:84:08:b7:8c:d7:e1:8c:0f:bb:bc:78:a0:
         6c:8f:53:db:01:6c:6f:bd:46:a2:c5:5d:cb:83:48:25:92:1f:
         1b:cb:0d:86:c0:5a:0c:47:00:0f:6f:4e:1b:c4:dd:35:ed:5a:
         5f:3d:d2:1b:d9:27:90:39:58:2e:44:9b:18:0a:38:61:2d:13:
         3a:37:40:ce:07:cf:d8:21:c2:3b:aa:b2:60:19:30:a8:b4:c0:
         ee:04:de:75:2c:6f:96:3f:6d:32:86:ee:7e:20:36:9f:26:c2:
         c4:3d:82:48:42:06:25:e3:f5:75:8f:fe:9d:42:0e:57:c1:a7:
         aa:eb:82:55:6b:07:3d:7f:ab:2e:7a:cd:90:b8:34:21:89:04:
         d3:0b:aa:e8:d5:0c:92:b1:d0:ee:98:3f:0a:ec:3e:d1:08:c6:
         b8:78:f2:c0:b1:f5:e7:07:be:c5:95:fc:2d:22:19:ab:d4:39:
         35:fc:3a:cd:cb:d1:15:1d:ae:ac:cf:f6:b6:72:69:df:20:97:
         b9:b8:a3:a4:31:d3:4f:33:a2:54:e2:2b:7f:04:95:b4:17:a6:
         35:65:b0:f0:0f:92:e6:e3:dc:60:04:fc:99:59:1b:da:3c:db:
         66:ec:55:48:6c:cd:48:12:6b:47:3e:b6:6a:34:bb:b4:65:c1:
         06:1e:a8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:59:14 2025 by rpki-client