Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/d0117176-eb5b-314e-8ad6-2a8244e84fc1.roa
File:                     d0117176-eb5b-314e-8ad6-2a8244e84fc1.roa (raw, json)
Hash identifier:          /NPoBPyW5X+mmY4jPW2Wlfsj7RqIaadrDMl7vsQyvT0=
Subject key identifier:   04:C0:C1:B8:7B:DA:44:51:E6:33:AF:E2:C2:E7:CC:2C:0B:8E:38:44
Certificate issuer:       /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Certificate serial:       010D0C9F43285848AF2B85625D8A7A3B46196D00
Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/d0117176-eb5b-314e-8ad6-2a8244e84fc1.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     3425
IP address blocks:        192.74.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:85:62:5d:8a:7a:3b:46:19:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=d600c512-2621-4f30-970e-0ca3d5fdf69d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d7:62:4d:75:7c:64:30:ed:80:60:7b:dd:70:
                    20:99:9c:b4:34:09:3c:e9:57:32:8a:eb:2b:8b:dd:
                    aa:b8:24:3a:7e:c8:2d:09:77:03:ea:ed:4e:9a:a9:
                    4a:a0:ee:a6:45:16:d4:6b:a2:3b:7a:8b:58:5d:a4:
                    a1:bf:94:55:b9:7a:14:62:eb:04:a8:96:f2:4b:15:
                    00:1c:51:a5:d8:62:40:3b:96:5d:0b:e5:cb:3d:ef:
                    cf:52:57:07:eb:26:1c:ef:d7:42:f2:3f:30:0e:db:
                    70:3a:d0:14:5a:ff:dd:b5:1e:84:de:d6:84:8a:8f:
                    66:da:ae:03:ab:12:c0:ec:72:7b:35:3d:62:e8:28:
                    aa:38:61:48:22:36:7a:2d:b7:aa:8a:bc:61:5c:a0:
                    4a:00:26:ab:b0:5e:ee:1c:9c:45:7e:a1:b2:74:15:
                    c3:59:9b:d9:3f:5c:66:d5:a6:27:a6:70:e3:d7:43:
                    dc:01:e4:76:59:7a:b2:60:dc:f6:67:0b:4f:24:13:
                    9a:b4:6f:4a:6d:71:14:65:1a:a4:81:df:e2:b0:45:
                    c1:f2:ed:77:3d:65:6e:a5:bd:77:d7:c5:a0:7c:1b:
                    c9:5b:bb:b5:cf:bb:23:28:36:d8:9b:e8:fb:6d:5d:
                    0d:bc:e0:6b:0f:c9:d2:35:be:62:97:94:54:0a:5b:
                    25:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C0:C1:B8:7B:DA:44:51:E6:33:AF:E2:C2:E7:CC:2C:0B:8E:38:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/d0117176-eb5b-314e-8ad6-2a8244e84fc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl

            X509v3 Authority Key Identifier:
                keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.74.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:f4:b7:e6:f0:67:17:d7:15:1a:33:08:d9:82:44:be:e7:ec:
         83:44:54:3d:8a:bd:bb:47:0a:9d:f8:19:0c:12:5d:1f:9a:5d:
         d1:95:9d:19:9d:ac:ea:33:9a:ab:30:46:e1:2e:a0:a4:ec:a0:
         5e:bb:ca:da:c0:4a:2f:6e:dd:e4:82:18:33:2b:98:4e:82:5f:
         e0:dd:2b:62:9d:4f:01:19:6f:e4:0a:85:19:f8:91:cd:ea:24:
         32:78:f4:eb:b1:0d:66:ad:50:27:03:2e:4f:b8:5d:2f:7f:a4:
         31:18:87:cd:ed:6b:e8:72:9a:94:28:ed:e8:76:2e:73:01:bc:
         b6:c2:48:50:8a:2f:62:55:ae:dd:32:8d:b8:99:47:02:69:5f:
         44:48:5e:2c:b8:30:16:2c:36:a0:df:89:d4:6a:1c:d7:22:08:
         b2:67:5f:4c:41:69:32:c4:1b:75:72:01:a4:8d:2d:7c:e5:20:
         40:96:f6:ae:68:80:f1:86:3a:fe:e1:93:76:72:56:2c:05:4b:
         5b:af:9f:e0:b0:0d:40:10:2c:26:64:b0:f2:dd:68:85:20:c5:
         66:d6:39:e8:bd:24:2e:dd:50:fc:88:6d:a9:08:05:b9:e2:3c:
         a5:38:73:ec:a5:24:df:a5:eb:c0:2b:37:74:fc:1a:33:3e:30:
         ee:3a:63:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:19:52 2025 by rpki-client