Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/8e679ab3-44ca-3f56-b10e-6899e67fe2fb.roa
File:                     8e679ab3-44ca-3f56-b10e-6899e67fe2fb.roa (raw, json)
Hash identifier:          JHkyJvQl8u6N27YFrRfYBiO2ud95cE/0MMhxtV/lhC0=
Subject key identifier:   42:3C:80:F6:BD:21:5F:A0:F3:C8:65:09:52:73:DF:86:4C:85:69:CA
Certificate issuer:       /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial:       010D0C9F4328584950F965E5516D3B0AD2EC8300
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/8e679ab3-44ca-3f56-b10e-6899e67fe2fb.roa
Signing time:             Wed 26 Mar 2025 13:00:53 +0000
ROA not before:           Wed 26 Mar 2025 13:00:53 +0000
ROA not after:            Tue 24 Jun 2025 13:00:53 +0000
asID:                     14691
IP address blocks:        172.93.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:50:f9:65:e5:51:6d:3b:0a:d2:ec:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
        Validity
            Not Before: Mar 26 13:00:53 2025 GMT
            Not After : Jun 24 13:00:53 2025 GMT
        Subject: CN=d8ac66fc-4113-42f4-b553-84f9a93d5e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ce:1e:b2:cc:26:63:ce:b5:97:cd:cf:a2:1b:
                    dd:71:8b:51:29:c3:d9:9b:19:61:e3:28:68:68:15:
                    bc:dd:be:61:37:d2:76:2e:eb:a6:47:96:1e:89:25:
                    f1:85:16:7d:de:eb:13:82:83:15:cc:5d:c9:f3:64:
                    c4:7a:99:47:39:70:0c:41:3e:2a:8e:2c:f9:77:d4:
                    b1:d9:34:4c:1f:68:c8:09:67:80:a6:76:bc:a9:a1:
                    71:02:98:d3:6b:09:1c:48:7f:84:85:f4:e1:fc:c0:
                    84:91:1a:78:1a:d0:f1:0e:72:28:ad:81:ca:00:63:
                    05:18:e0:ea:28:a4:c9:2b:e7:5b:a8:47:9f:f6:bb:
                    ab:aa:8b:01:64:55:b4:21:e4:3a:91:e1:ef:4e:c0:
                    a2:00:10:cc:cf:67:c0:fd:29:4f:bb:f0:63:c1:fb:
                    93:4c:db:ef:3b:ee:b6:f8:17:2d:78:7c:5c:4a:57:
                    6d:36:ed:5c:09:0a:c3:ce:5c:9c:22:1f:01:a2:1a:
                    11:5e:18:6b:1a:f2:0b:9e:c1:f7:18:b0:75:62:c8:
                    bb:57:70:28:f0:a2:1b:f8:c3:de:71:10:57:f9:88:
                    00:d7:e4:c0:b5:a6:68:68:15:d0:0c:6c:bf:59:60:
                    75:78:18:c3:b3:9f:7b:81:10:85:31:fc:1f:e4:01:
                    8d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:3C:80:F6:BD:21:5F:A0:F3:C8:65:09:52:73:DF:86:4C:85:69:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/8e679ab3-44ca-3f56-b10e-6899e67fe2fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl

            X509v3 Authority Key Identifier:
                keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.93.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:46:8b:2c:6c:98:d0:a5:af:52:5d:71:8f:9a:56:b4:41:34:
         7b:53:90:63:62:a2:97:8d:d3:24:56:88:aa:dd:e7:03:cb:f6:
         47:22:a9:f9:c5:61:a0:36:18:c7:7b:4d:67:d4:b8:73:84:33:
         99:88:9b:f3:1c:7a:c0:99:b3:ac:7a:f3:06:c2:d3:09:bb:e6:
         10:d0:ea:15:e2:b9:7b:7e:77:fc:56:5b:6f:07:38:73:82:14:
         3c:52:bc:13:48:83:49:79:6c:62:c8:fe:0a:21:da:f6:0d:b5:
         0f:e2:f1:be:ae:62:4a:26:8b:7c:16:1d:51:09:83:af:22:a1:
         a3:87:8e:f4:67:fa:4d:33:e6:ad:4a:5f:be:76:8f:70:f4:d7:
         b4:18:31:97:77:07:5d:ce:84:86:ae:26:c0:7d:b5:6e:98:35:
         c5:89:dd:c9:9c:5b:bc:5b:37:93:ef:8f:7f:fe:63:ab:bb:a2:
         97:7b:85:8d:94:c4:91:81:e8:ba:48:62:3f:68:d1:48:6a:4b:
         94:4a:6a:ae:01:0c:c5:e1:5c:75:00:0e:d1:5e:4c:37:c0:f0:
         ec:60:da:0d:91:3f:40:2d:2c:93:cb:f2:15:c0:7f:5f:6f:13:
         81:c0:49:27:be:68:a0:87:44:ee:c7:2a:fe:da:fe:bd:73:e5:
         f4:76:2f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:07:11 2025 by rpki-client