Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/400dff94-a8d0-3db2-bbdc-0f5b2970163c.roa
File:                     400dff94-a8d0-3db2-bbdc-0f5b2970163c.roa (raw, json)
Hash identifier:          wXJCZeiYUIme2n/b2YCQJvUYhb6tR+bJMr/wJln4MwE=
Subject key identifier:   99:42:8E:39:79:D0:30:01:84:48:F2:C4:E2:D9:57:4B:9D:88:99:69
Certificate issuer:       /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Certificate serial:       010D0C9F43285848A13614CA78B87F7993F02020
Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/400dff94-a8d0-3db2-bbdc-0f5b2970163c.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     63240
IP address blocks:        192.254.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:14:ca:78:b8:7f:79:93:f0:20:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=400311d1-48bb-4980-a449-f23bbb255651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:46:ca:e4:f6:ce:cb:c8:f5:ee:aa:b6:22:c3:
                    a1:5b:da:24:e5:60:9c:74:f8:51:3b:84:8c:cb:9b:
                    0d:90:f5:97:e0:93:36:0c:29:1e:c4:d2:22:f8:13:
                    00:15:aa:63:69:69:83:50:69:4b:37:cf:e9:8b:5f:
                    c9:1f:1a:11:94:ee:10:4e:02:ed:a7:e3:64:c4:1d:
                    e5:8f:ce:48:57:21:4b:40:89:fd:00:5d:3c:b7:a8:
                    15:8a:ea:d2:d1:f4:cd:e3:37:88:2b:0b:52:93:b9:
                    cc:ef:b2:45:7f:2d:8b:48:3f:93:ab:60:db:f6:a8:
                    00:5b:89:17:a5:23:e7:0d:b3:77:e7:49:ad:d9:27:
                    8b:0c:52:6c:13:4d:4f:c0:ad:6a:24:c6:7b:34:92:
                    cb:93:b7:27:40:89:03:f5:85:05:72:fa:29:40:cd:
                    7b:87:60:f4:2b:47:78:9f:39:7f:44:fb:70:ca:69:
                    81:97:1d:13:82:c7:2a:e5:6c:64:85:cc:4d:d6:df:
                    ea:c0:6d:77:f8:9f:1f:39:28:60:ed:9f:fe:bb:e5:
                    72:35:9e:df:5d:df:06:2f:a5:73:67:a9:62:6f:9d:
                    ba:a9:6e:bf:e4:5d:69:b1:e6:dc:a8:ab:6c:4d:0c:
                    f9:a7:63:ac:85:42:aa:3e:05:9e:9e:50:19:be:59:
                    c1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:42:8E:39:79:D0:30:01:84:48:F2:C4:E2:D9:57:4B:9D:88:99:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/400dff94-a8d0-3db2-bbdc-0f5b2970163c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl

            X509v3 Authority Key Identifier:
                keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.254.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:af:b6:44:b8:76:10:90:e3:d8:3d:bc:85:a5:29:b8:34:e7:
         07:4a:d0:82:53:31:ab:ba:3a:9e:5c:44:b9:1e:ff:09:34:57:
         98:39:85:62:fc:2b:9d:5c:c1:c1:3c:d5:ac:8c:59:27:6a:4d:
         4f:ca:25:a8:9d:f8:92:35:8a:10:3e:00:2f:f0:f2:0b:a8:db:
         67:31:17:45:ea:fa:c0:59:b2:ee:cf:19:2c:47:b4:27:c5:79:
         3d:68:c9:ec:9d:24:22:a3:83:c6:d1:6b:6d:c1:36:88:1b:b4:
         54:c7:be:a1:fa:ad:71:4f:c4:cc:b2:a7:18:2f:0d:af:23:0f:
         a3:59:f9:18:01:30:de:34:e8:d0:86:3d:d2:e6:67:eb:70:41:
         a2:1e:b5:cb:c5:a4:71:76:50:1f:e1:e6:cd:c9:2f:6d:2a:15:
         22:ce:46:03:b5:06:c8:49:87:8d:29:97:48:af:f8:c8:fe:b0:
         22:ec:38:14:82:9f:49:a3:2f:3f:d2:a3:79:70:b2:df:56:7b:
         4e:34:3f:56:51:2f:5e:0f:4f:4a:f1:e1:79:de:b1:d1:85:f0:
         f6:ad:3f:61:64:ec:4a:98:b9:2e:9b:33:30:d6:c3:48:29:a3:
         8b:24:66:9b:ce:da:99:6d:bf:65:a9:cc:44:a8:fa:02:53:c3:
         83:83:65:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:40:19 2025 by rpki-client