Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/a6a1c456-f3c1-3ef8-a926-e55881541742.roa
File:                     a6a1c456-f3c1-3ef8-a926-e55881541742.roa (raw, json)
Hash identifier:          u2mOLgWvuLw40Vv/6JTY2ieBVEu3HRpnJAlolk2/iLU=
Subject key identifier:   A6:27:5E:EB:BB:21:0A:3A:B5:AB:49:05:26:16:C7:F6:8D:A8:FA:2D
Certificate issuer:       /CN=adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4
Certificate serial:       010D0C9F43285848BBBB7E263E8DBFB886CD6580
Authority key identifier: BF:C2:9B:C0:5B:B5:EC:2F:7F:D9:9D:2E:8E:8F:76:88:57:6C:1E:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/a6a1c456-f3c1-3ef8-a926-e55881541742.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     25830
IP address blocks:        68.234.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:7e:26:3e:8d:bf:b8:86:cd:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=27d2f6ba-e970-4a01-973c-40390b40febb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b5:db:f0:f2:73:bd:6e:ad:b2:9a:7e:2c:60:
                    97:5a:a7:ec:fb:1e:a6:bd:a1:c7:76:fd:b9:5e:76:
                    7d:9c:ad:97:d8:6a:02:76:b8:0b:12:8a:42:ef:e9:
                    d8:a0:8f:c4:0a:4e:a3:c3:3d:1b:22:b7:21:70:72:
                    08:37:39:50:67:22:da:b7:5f:a5:d7:a0:20:a2:4c:
                    47:df:5c:cc:e1:bd:e8:c7:ba:16:23:af:26:8d:f8:
                    b3:81:62:34:96:da:c2:ec:b6:3a:59:2a:54:a1:e2:
                    9d:35:d9:cf:4c:db:3c:09:00:0d:49:5f:46:8e:16:
                    33:fb:31:81:42:50:23:d0:c1:bb:9b:2f:51:b0:c0:
                    7e:81:2e:08:67:52:db:13:33:bd:bf:43:93:47:4a:
                    43:96:0c:37:10:4b:22:94:53:59:62:2f:44:21:ac:
                    bf:85:37:b9:7c:78:48:ba:52:54:29:27:37:ef:03:
                    15:09:1b:66:9d:14:ef:e8:39:8b:25:17:9d:cc:08:
                    5b:b6:65:34:a1:cf:ae:a4:cd:3f:d5:43:58:9d:f7:
                    10:02:58:29:c2:2d:fe:56:0a:16:ed:fc:37:0f:53:
                    1d:e5:8a:1b:dd:0c:6f:eb:34:85:30:79:2b:a2:bf:
                    38:40:22:db:06:44:39:1f:49:b9:8b:0e:29:ce:9f:
                    9e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:27:5E:EB:BB:21:0A:3A:B5:AB:49:05:26:16:C7:F6:8D:A8:FA:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/a6a1c456-f3c1-3ef8-a926-e55881541742.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.crl

            X509v3 Authority Key Identifier:
                keyid:BF:C2:9B:C0:5B:B5:EC:2F:7F:D9:9D:2E:8E:8F:76:88:57:6C:1E:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:e7:d0:fb:ea:3c:a7:b4:b0:36:c3:9d:0c:ba:34:d7:5a:15:
         a5:50:c7:25:83:b2:cf:5c:42:72:f9:f5:48:d5:a0:30:f8:37:
         e6:fe:6b:69:f4:be:3f:61:cd:af:54:29:54:c7:63:4b:7b:1f:
         e5:4e:99:b7:a5:e2:c5:33:7d:60:3d:d6:65:f1:0f:79:df:32:
         de:e6:a2:48:17:16:1b:7b:46:1c:48:24:b7:6d:87:6a:d7:e2:
         d5:85:22:65:d1:b4:29:cf:69:07:35:5e:72:29:81:d9:90:ce:
         d5:ea:b1:dd:ee:fd:bb:5a:91:07:16:27:fc:5d:12:ca:84:c3:
         15:37:0c:d8:39:96:cc:3b:2f:11:ce:75:18:c8:39:77:f6:b1:
         61:5f:db:fc:50:da:b2:45:16:88:37:8c:6f:29:e3:b9:a4:2b:
         78:dc:5b:54:69:23:2f:d1:1f:5b:a8:1c:6e:e5:b3:d5:98:70:
         7b:43:dc:2d:55:d2:c7:0f:bd:94:2f:25:5c:f0:25:14:fe:01:
         02:33:b9:b2:4e:65:ad:26:4b:5f:ff:ec:b9:61:07:7a:f1:67:
         1c:e4:ae:ac:f4:11:ff:07:ff:53:f5:45:9b:40:40:fd:d9:1d:
         13:c6:54:e3:13:77:10:91:e8:37:db:4d:32:36:a6:f8:8c:bb:
         f1:5e:22:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:43:37 2025 by rpki-client