Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/7ab47e7f-3e72-31b4-b0ec-5a89ba465e42.roa
File:                     7ab47e7f-3e72-31b4-b0ec-5a89ba465e42.roa (raw, json)
Hash identifier:          cjLQOCRjOTXEcjf7dLT3F8BNChf0QKLPiknBtqnKfSs=
Subject key identifier:   03:2B:0D:42:88:53:22:BE:EF:39:EE:D1:DB:0F:6C:2A:9A:B4:5E:71
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F4328584976A9924DD32EAC90430D1540
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/7ab47e7f-3e72-31b4-b0ec-5a89ba465e42.roa
Signing time:             Wed 09 Apr 2025 01:00:47 +0000
ROA not before:           Wed 09 Apr 2025 01:00:47 +0000
ROA not after:            Tue 08 Jul 2025 01:00:47 +0000
asID:                     3738
IP address blocks:        192.250.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:76:a9:92:4d:d3:2e:ac:90:43:0d:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: Apr  9 01:00:47 2025 GMT
            Not After : Jul  8 01:00:47 2025 GMT
        Subject: CN=132a0f76-b7de-4905-9175-cba1d4f33526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:77:74:dc:ff:82:24:52:08:31:2c:e0:b8:1b:
                    0e:88:7b:eb:25:43:02:55:40:de:89:12:7a:85:53:
                    87:dc:18:84:78:22:d1:fa:88:ba:92:f4:70:fe:3b:
                    aa:1a:7b:b5:1a:0d:8c:1b:ca:d0:39:90:36:0e:5e:
                    41:d1:a0:04:78:65:03:5b:02:4a:76:38:80:5c:a6:
                    43:53:6b:e1:b9:81:16:a7:8f:ea:97:9e:37:1d:b1:
                    55:d3:15:91:c9:3b:48:d2:4c:39:cd:3c:e0:7e:39:
                    27:98:e3:aa:8a:c2:a4:bc:fa:c3:3d:59:60:83:51:
                    a0:bb:98:f0:4a:dd:2c:57:67:78:c6:f5:b3:68:92:
                    b8:4f:58:87:c4:68:ab:bb:08:c3:31:9c:09:d9:0b:
                    19:7a:39:39:55:e1:88:7b:08:5e:b3:6f:ef:ae:0d:
                    bb:11:44:9c:0b:01:17:a9:13:8d:e8:b3:2e:f6:2f:
                    aa:be:18:6e:15:fb:5a:58:ea:6b:2e:b6:1e:b7:7e:
                    0d:c8:00:c8:52:4a:d0:57:6e:9f:b1:70:58:46:d5:
                    6b:6d:d4:31:0c:37:33:9e:5e:35:06:73:a4:4f:39:
                    20:16:dd:ad:09:32:4f:18:9b:b7:a6:77:23:75:1f:
                    07:6a:6c:66:6e:d6:36:02:fe:55:81:43:71:90:f5:
                    22:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:2B:0D:42:88:53:22:BE:EF:39:EE:D1:DB:0F:6C:2A:9A:B4:5E:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/7ab47e7f-3e72-31b4-b0ec-5a89ba465e42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:3b:c3:10:5b:97:a1:f5:89:ae:b5:de:1d:63:da:76:4f:c2:
         9b:27:54:82:67:7b:58:6d:d0:34:4e:05:f9:2b:a5:92:48:65:
         0f:e4:4d:3c:54:e0:10:74:7a:af:ae:68:1a:4e:90:c4:79:f3:
         c9:39:05:83:a5:f1:d3:dc:6c:b5:c9:82:b4:fc:92:ab:0e:8a:
         7a:6c:58:95:bf:17:b6:88:e7:91:46:8d:19:35:94:96:6c:5b:
         2e:58:d3:13:90:5f:75:bc:ff:be:3f:79:52:8d:bf:05:fa:ac:
         94:99:f4:13:35:4e:b5:6d:ac:fb:0d:85:72:57:a4:6a:e5:88:
         16:49:1b:38:9d:45:dc:a5:05:43:2a:ff:14:50:a9:02:c4:0a:
         90:e4:a5:77:2f:c3:a8:95:f6:d2:02:48:ad:df:7e:5c:20:7c:
         7f:db:de:b3:a6:0d:78:f7:16:5e:2f:76:24:26:a3:28:03:32:
         98:9e:69:99:99:86:e6:c2:fa:ce:33:e4:21:4d:63:f0:fb:aa:
         b9:8b:db:05:ff:2a:b5:2c:a8:6a:3b:09:2b:e4:a8:9c:08:05:
         81:72:02:75:6b:24:2c:fe:c6:1f:a4:a8:23:c6:77:25:71:bc:
         1b:c4:3b:82:ed:33:9c:f4:e0:db:a7:c7:34:46:df:1d:1d:57:
         bf:67:56:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:28:11 2025 by rpki-client