Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/04448196-f240-3d49-bb9a-bf23e58b6bb1.roa
File:                     04448196-f240-3d49-bb9a-bf23e58b6bb1.roa (raw, json)
Hash identifier:          gX1HA2ccBOeFLmlOLHV5DHECIJyD+/FbTPzt+FgiD18=
Subject key identifier:   CB:19:35:35:6B:48:02:DB:27:42:57:B4:AC:B1:E6:34:F0:83:BA:DA
Certificate issuer:       /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Certificate serial:       010D0C9F43285849806F228B4FC4C3FA486A5FC0
Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/04448196-f240-3d49-bb9a-bf23e58b6bb1.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     21559
IP address blocks:        167.94.224.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:22:8b:4f:c4:c3:fa:48:6a:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=2ffd8833-21db-4b96-8001-a2d0ddf962cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5d:3d:ff:f3:5f:4d:df:a9:63:01:2a:a2:15:
                    b2:b4:78:b0:96:2f:48:f8:b4:fb:6d:3e:d9:4e:5a:
                    41:8f:0f:e3:3b:ac:fe:33:25:5f:2f:e4:fd:b2:16:
                    0b:77:5b:b5:5d:95:f3:49:b1:53:a3:1d:64:ce:1b:
                    ea:e5:5f:b0:db:4f:62:f8:43:91:e5:f7:60:22:c1:
                    f8:9e:09:28:99:59:fc:99:1d:d4:a9:51:2a:5d:44:
                    b3:63:e7:4a:3b:77:14:45:bd:6a:f9:f5:d5:bf:db:
                    10:b1:e4:cc:bb:4e:ef:86:a7:9f:e8:34:7a:71:7c:
                    ed:58:a3:d6:6d:cc:fd:c7:80:a1:2a:fd:0c:26:2e:
                    ef:8d:89:bf:7f:13:fa:0c:2f:a9:f5:a1:22:bd:5c:
                    5b:ba:e1:a5:7f:e3:60:24:d8:0a:6f:99:26:c2:9a:
                    8d:9d:70:69:4e:07:f6:41:c7:69:87:e9:79:9a:62:
                    c2:ad:da:6f:92:14:d8:3a:c4:be:e8:4a:32:cf:9d:
                    4e:83:5f:bb:b3:73:e4:95:17:d5:ef:59:d8:56:65:
                    5c:9c:23:c5:b6:80:49:49:21:5a:eb:ba:79:4a:42:
                    45:3f:06:76:46:ec:95:c9:ab:30:84:c4:60:b2:a1:
                    5a:fe:c5:1a:51:70:43:a6:ee:7b:0f:7d:64:d4:e0:
                    e0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:19:35:35:6B:48:02:DB:27:42:57:B4:AC:B1:E6:34:F0:83:BA:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/04448196-f240-3d49-bb9a-bf23e58b6bb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl

            X509v3 Authority Key Identifier:
                keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.94.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:df:c5:88:c5:b9:ca:82:e9:74:65:9c:fe:35:1a:81:83:e3:
         5d:c3:df:d5:26:7f:a5:5f:39:0c:2e:1f:85:31:58:ae:1c:9a:
         67:1c:1b:a0:5f:a8:7f:cb:e3:b0:c8:cb:42:0f:99:2c:0b:0d:
         e8:42:00:15:83:52:8a:cb:d3:e9:85:11:a2:63:5f:e0:fd:74:
         97:29:71:8a:ac:bd:ec:95:1a:c7:73:f3:03:35:73:3f:82:e6:
         4c:f8:98:3a:6d:22:30:2f:76:33:92:f5:ea:5e:f1:70:25:11:
         91:3f:cc:8d:39:16:c1:38:cc:d9:27:83:37:f5:2c:df:6b:ea:
         8a:a0:f0:9a:50:b5:0f:81:be:82:29:cc:c8:ab:69:26:ca:03:
         95:73:cf:db:58:6b:54:d5:f4:41:12:54:09:9a:1c:fa:21:1f:
         51:f6:92:76:70:cf:b1:6e:92:2e:b0:91:9d:85:c3:39:fa:4f:
         71:54:f2:9f:b5:48:1a:3e:a1:d2:1d:ec:c3:43:8a:80:79:5a:
         94:2f:31:3c:59:78:e6:2c:95:1d:87:b0:aa:8e:a9:44:25:0d:
         7c:8d:6c:40:b8:8b:5c:40:03:21:3b:b2:20:86:56:e0:fe:e1:
         48:46:c5:54:e3:76:f1:9a:0b:70:76:3e:8a:fa:c5:07:55:8b:
         26:54:67:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:52:59 2025 by rpki-client