Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88/3667ced7-962c-3f0e-9b77-cf1ed13ee987.roa
File:                     3667ced7-962c-3f0e-9b77-cf1ed13ee987.roa (raw, json)
Hash identifier:          cDp/rkgv+HkmLzdwW2PDUqrsXJ7i7uBzZifbQ08AUN4=
Subject key identifier:   8C:D1:ED:D8:EA:B8:58:58:36:41:D9:08:71:D1:78:9F:7E:CD:6E:6E
Certificate issuer:       /CN=53482e94-c66d-458c-842b-1143e3693e88
Certificate serial:       010D0C9F43285849BF3F6156DABC189155E2F300
Authority key identifier: 88:FC:3C:8E:C5:B2:BE:24:04:8E:5C:4F:14:21:39:3C:BB:51:99:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88/3667ced7-962c-3f0e-9b77-cf1ed13ee987.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     54393
IP address blocks:        192.70.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88/53482e94-c66d-458c-842b-1143e3693e88.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88/53482e94-c66d-458c-842b-1143e3693e88.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:61:56:da:bc:18:91:55:e2:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53482e94-c66d-458c-842b-1143e3693e88
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=6378c5a3-7480-47a8-a91d-e71e968e72f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b8:02:f6:f1:1e:33:e6:40:54:1d:68:dd:d4:
                    f0:c1:0b:53:df:4b:cd:97:9e:91:0f:25:f9:3e:01:
                    0a:80:da:8f:fe:96:8e:a2:06:83:db:ce:7a:fc:4c:
                    54:94:59:49:dd:cd:eb:81:a9:ca:f9:02:84:6e:cb:
                    3d:4d:d8:b1:4d:5c:6d:0a:d5:a0:3b:59:ff:16:ec:
                    2b:2a:fe:b9:df:d6:1c:bf:f7:74:e4:8c:98:b0:dd:
                    fe:fa:dd:6d:a8:70:62:bc:58:f8:21:81:7a:ea:16:
                    ce:bb:ed:6e:a2:a0:ed:45:84:43:31:bb:1d:30:f7:
                    1a:43:00:83:97:51:69:b3:a6:0e:05:ce:1e:83:9b:
                    12:be:02:dd:98:c9:45:65:f9:ab:90:39:9a:44:81:
                    1e:f9:f8:95:04:71:c3:33:44:63:ef:69:3b:13:0b:
                    71:5b:50:25:9d:a6:fd:03:81:c9:94:f5:40:13:76:
                    43:7b:39:9c:50:38:74:c7:a8:dc:86:11:08:c8:f6:
                    a4:66:0c:58:da:f2:ac:d1:17:b3:02:67:73:05:c3:
                    95:8a:b8:5d:64:f8:8a:ef:9c:95:b8:f5:8b:fe:70:
                    3f:95:af:e5:bd:dc:d3:ff:71:07:1f:96:fd:8b:85:
                    8f:1b:34:b1:aa:07:78:3c:18:6e:1c:ae:8a:04:3b:
                    cb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D1:ED:D8:EA:B8:58:58:36:41:D9:08:71:D1:78:9F:7E:CD:6E:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88/3667ced7-962c-3f0e-9b77-cf1ed13ee987.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88/53482e94-c66d-458c-842b-1143e3693e88.crl

            X509v3 Authority Key Identifier:
                keyid:88:FC:3C:8E:C5:B2:BE:24:04:8E:5C:4F:14:21:39:3C:BB:51:99:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.70.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:9c:a5:11:9e:d1:f0:a4:2b:7b:d0:50:d8:8a:8a:01:98:af:
         bf:23:3c:77:67:a9:8a:df:10:cf:86:da:39:73:6a:e5:47:bd:
         6c:b6:ba:7c:3c:d5:60:40:fd:d1:6f:d8:77:c4:e6:e0:07:b4:
         d5:78:6a:d1:e7:fb:3b:62:49:e8:2c:e3:e9:37:7d:1b:5f:cd:
         e5:22:5e:cb:40:12:ae:d3:02:fe:3e:b7:a6:50:3d:87:75:da:
         6f:4a:b7:ea:bd:ca:2d:55:6c:7d:2d:99:c3:1e:c2:ad:9d:7d:
         ad:23:58:91:b3:0f:15:d9:5f:ea:bd:3b:e4:62:0a:06:11:dd:
         3f:ed:0e:50:71:ff:a0:fb:a1:ce:ff:41:53:68:e1:5f:ce:c8:
         f7:13:f8:e1:14:0b:72:e0:d7:c9:4e:b5:54:84:6f:19:24:d8:
         26:2b:52:b5:f5:ec:f1:7c:7c:e8:24:47:29:b4:c4:3b:c0:ac:
         a7:8d:8c:e9:94:b4:0b:d0:e4:3e:22:80:f3:cb:4d:9a:66:f9:
         57:95:98:5a:5a:4f:83:d6:86:d6:71:bf:38:7d:e4:6c:c1:e0:
         49:39:88:ee:70:52:6e:da:86:21:7e:67:d1:85:de:43:52:ba:
         39:14:88:85:de:4a:a6:13:c5:d5:74:7c:0c:ce:b4:f6:25:32:
         dc:63:9b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 06:50:08 2025 by rpki-client