Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/817df46c-74b9-3aae-93ab-75637ef18bee.roa
File:                     817df46c-74b9-3aae-93ab-75637ef18bee.roa (raw, json)
Hash identifier:          13pEw6zr9KAdaP86+C5Z3aCkepxTylME5oHSScEAkyA=
Subject key identifier:   02:D2:6C:4B:9B:55:FF:49:82:68:DD:1F:FD:0C:92:24:F6:29:A8:48
Certificate issuer:       /CN=7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d
Certificate serial:       010D0C9F4328584964844711165BEEE7BAA0E180
Authority key identifier: 02:12:9E:33:36:D4:F0:86:D2:34:08:2D:A1:0D:B2:98:F9:26:A3:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/817df46c-74b9-3aae-93ab-75637ef18bee.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     11068
IP address blocks:        192.200.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:47:11:16:5b:ee:e7:ba:a0:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=997c5ea7-324b-46f2-a2e1-42f049f8bd45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:27:c7:df:b3:c0:ad:f9:a6:e3:6f:27:a8:ab:
                    07:f7:96:f6:47:27:75:a4:dd:82:d8:72:95:b2:c9:
                    30:62:1f:be:4c:70:09:ee:ce:37:e0:63:63:95:5d:
                    7a:7e:7e:82:fc:6b:7c:ae:26:76:e8:4f:78:7d:a1:
                    95:f2:06:df:a6:fc:e6:78:48:d2:ce:17:c0:1c:d1:
                    6d:4e:6e:1b:e9:44:17:53:3a:ad:d3:2b:a4:0c:26:
                    1e:05:db:a4:c3:e0:49:b4:58:6e:2a:c4:5c:0d:a7:
                    36:a1:b6:5a:bd:77:67:ba:5a:32:58:07:a5:d2:c9:
                    a3:d3:e1:68:6d:0c:dd:c5:0e:32:6c:f3:62:c7:77:
                    d4:a1:66:6a:8d:46:3a:55:6b:41:6e:84:fe:ff:f1:
                    82:83:38:18:42:a6:67:6c:7e:44:b1:5f:17:27:d4:
                    e0:c5:be:bc:9d:59:06:20:b2:8d:f1:17:06:9a:9b:
                    7a:f7:8d:f0:08:3a:d4:db:13:ca:61:ea:f0:b0:13:
                    2a:a4:c6:94:65:94:f0:26:31:e5:77:fc:cf:63:90:
                    20:0f:2e:ed:af:1f:e6:66:65:c3:e5:24:07:14:67:
                    b5:7c:e3:38:62:ed:e1:14:e9:c9:fa:cb:9b:55:d1:
                    8d:f3:73:00:c9:14:94:30:46:80:c8:5f:9a:7a:6d:
                    4a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D2:6C:4B:9B:55:FF:49:82:68:DD:1F:FD:0C:92:24:F6:29:A8:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/817df46c-74b9-3aae-93ab-75637ef18bee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.crl

            X509v3 Authority Key Identifier:
                keyid:02:12:9E:33:36:D4:F0:86:D2:34:08:2D:A1:0D:B2:98:F9:26:A3:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.200.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:ed:4d:00:e9:ef:b0:fb:92:d1:12:39:5b:7e:8e:34:b3:a7:
         f5:d5:48:22:08:ae:4a:48:d0:06:05:e0:06:0f:75:62:7a:19:
         d0:39:8a:ec:7c:da:36:20:06:78:48:54:53:61:be:58:c3:ae:
         99:6f:77:eb:e6:71:bf:84:09:75:06:55:f3:41:81:a2:8c:a8:
         56:41:a7:4d:78:63:8f:ba:a3:08:53:bf:10:ff:fb:53:69:41:
         20:05:c3:60:96:b4:3c:b0:9c:95:f9:58:0c:9a:fe:25:38:49:
         6d:2c:d1:6b:06:95:5f:82:97:34:61:86:c6:19:4d:98:e8:15:
         c0:87:a5:dc:6e:8c:55:53:71:78:40:60:ad:46:fc:14:e5:45:
         5c:5d:d6:ce:3c:84:d3:59:18:83:e4:9a:d8:b6:52:fe:99:ea:
         2b:51:81:80:b9:6e:da:99:ec:85:1e:00:cd:75:bd:db:92:f4:
         1b:dd:f0:3c:1c:1a:ec:43:4b:f4:bb:a3:8c:c6:16:65:13:4b:
         5f:3e:21:e5:60:8e:4f:c8:84:5a:6d:8e:8f:c7:27:53:9a:ca:
         f7:e2:06:6a:02:1b:bb:95:78:e8:22:17:90:a6:8f:67:27:4a:
         77:6e:5d:90:b6:f9:13:f5:68:29:39:5a:f1:48:f6:f5:00:dd:
         40:a1:57:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:19:06 2025 by rpki-client