Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/025d9364-6721-4daa-8be7-c5db4f654594/19454ef6-d7b8-3b9d-b301-ac9aac59738d.roa
File:                     19454ef6-d7b8-3b9d-b301-ac9aac59738d.roa (raw, json)
Hash identifier:          4KAC4ozL49xUD6bp2Bfbn4jZoaY6dkL4TD0+S806LO0=
Subject key identifier:   1F:37:6A:2C:5E:DB:AC:18:E1:F0:8F:E9:DF:E7:49:24:2F:C9:2E:B9
Certificate issuer:       /CN=025d9364-6721-4daa-8be7-c5db4f654594
Certificate serial:       010D0C9F432858485E35B04224209ED7C0043F00
Authority key identifier: 64:68:76:1E:24:7E:98:5F:BF:33:6F:8A:89:E9:3E:D2:C8:A3:F9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/025d9364-6721-4daa-8be7-c5db4f654594.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/025d9364-6721-4daa-8be7-c5db4f654594/19454ef6-d7b8-3b9d-b301-ac9aac59738d.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     19905
IP address blocks:        192.52.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/025d9364-6721-4daa-8be7-c5db4f654594/025d9364-6721-4daa-8be7-c5db4f654594.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/025d9364-6721-4daa-8be7-c5db4f654594/025d9364-6721-4daa-8be7-c5db4f654594.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/025d9364-6721-4daa-8be7-c5db4f654594.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:b0:42:24:20:9e:d7:c0:04:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=025d9364-6721-4daa-8be7-c5db4f654594
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=17e83dd3-0ce5-432d-b6b2-033d1677377f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ff:a5:3f:e4:3b:55:de:c0:c7:25:83:ce:e3:
                    77:34:53:4a:0f:f0:14:cc:57:fb:8b:d1:8c:db:8d:
                    fc:ed:b2:67:33:5a:86:03:c9:cf:9b:6f:22:21:83:
                    35:ff:f0:32:6e:0c:99:d7:23:f1:6f:76:f6:ce:c0:
                    85:81:2f:bc:3e:65:0b:f8:93:df:53:b6:a0:b7:9f:
                    be:ef:46:03:7c:e8:2c:ef:16:7b:de:4e:00:19:26:
                    05:20:3a:00:54:94:df:f3:60:6a:51:93:fd:70:0e:
                    e4:0a:f3:9c:89:82:b7:de:87:35:1d:0e:46:c5:39:
                    61:0f:9d:6d:87:2a:70:8c:b8:15:a0:b4:26:bf:50:
                    42:e6:2d:1e:13:61:a6:7f:3b:65:aa:ca:1a:e9:7e:
                    a1:a3:a2:46:ad:b7:fa:ab:a4:d8:9a:96:49:be:8b:
                    07:f2:76:dd:67:be:65:3a:f2:50:10:42:96:c5:dd:
                    d9:7c:d0:08:63:71:cc:47:e0:80:72:b7:6d:b9:83:
                    60:6f:83:1d:ad:21:60:80:a5:df:28:3b:60:5b:fa:
                    da:1f:05:d0:76:30:fc:82:91:d8:d5:f7:67:19:95:
                    29:aa:c2:02:0c:c8:d9:38:f9:93:5a:4a:25:8b:31:
                    05:5e:49:66:6a:c5:73:77:79:97:4f:50:90:98:77:
                    c7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:37:6A:2C:5E:DB:AC:18:E1:F0:8F:E9:DF:E7:49:24:2F:C9:2E:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/025d9364-6721-4daa-8be7-c5db4f654594/19454ef6-d7b8-3b9d-b301-ac9aac59738d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/025d9364-6721-4daa-8be7-c5db4f654594/025d9364-6721-4daa-8be7-c5db4f654594.crl

            X509v3 Authority Key Identifier:
                keyid:64:68:76:1E:24:7E:98:5F:BF:33:6F:8A:89:E9:3E:D2:C8:A3:F9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/025d9364-6721-4daa-8be7-c5db4f654594.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.52.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:2e:09:77:59:e3:d5:85:fd:61:ab:2b:d6:02:77:a9:3f:5f:
         d5:5f:ba:ca:41:74:66:21:85:71:38:5a:0e:5d:ba:dc:50:86:
         60:be:3d:a9:74:c5:9c:00:cc:d2:7a:7d:1e:f3:85:8a:bb:f1:
         05:c5:11:80:49:9f:b2:c6:47:24:20:ea:e7:84:9e:52:be:20:
         26:1b:2e:27:50:f3:61:9e:e1:4c:4a:b4:44:dd:9f:31:25:fd:
         5b:20:ee:3e:e3:70:bc:79:59:1d:17:80:37:76:33:f1:7b:e9:
         2e:e5:15:24:e5:9d:86:08:6e:82:a8:05:4f:b4:27:24:92:c5:
         9e:30:66:91:cb:a0:4b:ca:d8:35:a1:c5:13:46:2f:50:38:fc:
         37:50:19:d6:1e:61:86:79:8e:30:64:54:dc:42:54:c8:7c:ae:
         c5:ca:45:11:0c:c9:84:24:ab:90:c5:66:d8:4f:18:33:9c:83:
         66:35:f3:fa:b6:f6:41:89:36:d9:07:60:6f:4b:df:52:03:30:
         0b:f3:c9:18:d9:31:0c:e8:8e:89:dd:dc:45:df:f2:2d:35:1a:
         80:94:fe:fb:10:31:94:57:83:13:78:96:ed:50:74:f7:7d:fc:
         37:8a:e3:a9:fe:42:95:54:39:b4:2f:38:d4:b1:74:f5:a5:9f:
         6a:2a:e6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:16:27 2025 by rpki-client