Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/9a4037b2-8eee-396c-9018-b5b3bf590edb.roa
File:                     9a4037b2-8eee-396c-9018-b5b3bf590edb.roa (raw, json)
Hash identifier:          8+lHFYZo2eY6F3YfwdG2rb1Ik4LKe23LeFS3M5OcFqM=
Subject key identifier:   EE:A7:09:F5:34:16:2A:B3:33:CE:B2:8A:EC:05:0D:54:EA:3D:09:7B
Certificate issuer:       /CN=8583e379-1578-4044-8426-ddcb4a4a8192
Certificate serial:       010D0C9F432858491D7187986F156F421C180140
Authority key identifier: 89:C7:5F:3F:CE:A7:5D:0D:C3:10:F9:23:2C:65:92:27:0C:63:1D:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/9a4037b2-8eee-396c-9018-b5b3bf590edb.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     395480
IP address blocks:        192.154.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/8583e379-1578-4044-8426-ddcb4a4a8192.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/8583e379-1578-4044-8426-ddcb4a4a8192.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:87:98:6f:15:6f:42:1c:18:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8583e379-1578-4044-8426-ddcb4a4a8192
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=74c1b391-5168-424e-9366-08b990bdab05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:47:33:48:0d:78:15:80:c9:6f:50:f4:71:56:
                    f4:60:75:fb:1f:3a:46:20:6b:c7:a2:95:c5:82:f9:
                    9e:73:d4:2f:0f:e9:67:82:e0:43:4d:8d:a7:5f:49:
                    45:3b:c8:e1:0e:a0:7d:af:2a:98:0a:67:a0:1f:57:
                    67:47:31:31:82:a2:19:4c:4a:19:75:d6:38:92:d9:
                    d3:e2:18:f9:69:6d:4a:fe:f0:f2:35:11:d4:b3:0b:
                    19:04:ad:c4:bc:6c:98:43:08:9a:26:b3:37:a0:28:
                    7c:18:cb:e0:b3:3b:99:8d:50:96:26:22:46:5d:91:
                    b0:ba:47:70:37:47:db:c4:6e:a6:e8:4d:6a:68:6c:
                    6c:14:a3:04:3d:87:24:6e:8d:d6:9a:08:d8:40:53:
                    fa:5e:14:c9:af:32:f2:9a:70:45:ff:f9:a0:9d:d8:
                    f5:d4:e8:98:58:c5:83:8c:7a:6b:2e:87:9f:5c:92:
                    8e:df:55:e7:09:ea:3a:a8:c5:30:a3:77:5f:5d:ae:
                    ef:64:e3:b9:0b:e2:e3:93:83:09:ca:83:5a:3c:02:
                    d2:92:0f:5c:c6:38:85:0b:d1:06:ff:15:58:6d:15:
                    05:e5:ab:eb:a7:cb:f5:02:d2:f0:ba:4a:a8:40:33:
                    38:5a:f8:c7:6c:e9:03:51:85:fd:ec:cd:a6:e9:b7:
                    96:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A7:09:F5:34:16:2A:B3:33:CE:B2:8A:EC:05:0D:54:EA:3D:09:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/9a4037b2-8eee-396c-9018-b5b3bf590edb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/8583e379-1578-4044-8426-ddcb4a4a8192.crl

            X509v3 Authority Key Identifier:
                keyid:89:C7:5F:3F:CE:A7:5D:0D:C3:10:F9:23:2C:65:92:27:0C:63:1D:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:66:b2:f0:bf:3f:71:04:55:93:bb:44:19:48:be:49:bf:38:
         31:11:97:9c:82:f2:1d:e2:27:f0:17:ee:e8:8b:6b:c2:02:f3:
         50:f0:90:82:a1:bc:81:98:46:49:67:b2:46:bd:b2:56:06:7e:
         b8:b6:2d:d9:55:44:8d:3a:e7:3e:9a:03:08:9a:60:65:68:57:
         83:e7:47:6e:a4:60:0d:8d:6b:67:d7:14:57:c3:e4:e7:32:10:
         26:fe:16:4d:a5:84:e8:52:d8:4a:48:74:5b:b5:27:b4:e6:59:
         d7:d7:62:df:26:a9:9b:4c:75:e5:db:fe:6c:87:b2:7b:c7:0e:
         90:d4:e0:48:d0:a7:31:2e:78:3f:78:b0:15:69:97:59:ae:fb:
         6a:75:f9:b3:ae:44:26:2d:90:9f:8e:79:1d:92:df:bf:c1:04:
         1a:3b:12:31:37:4e:af:44:cc:53:1c:e2:a4:f8:64:87:a6:23:
         18:79:21:97:ff:1f:ef:a5:47:9c:f9:09:c5:ab:37:41:55:74:
         84:63:a8:de:0d:c3:e9:ad:f1:f5:e3:73:0b:e8:e3:da:f7:06:
         31:86:33:de:b0:0b:fe:ad:fa:75:9e:10:7c:9e:ce:50:2f:1b:
         d0:d7:fa:ba:3f:12:9c:e3:1c:b9:4b:70:b5:b9:17:d0:f6:80:
         36:0f:35:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:00:21 2025 by rpki-client