Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/c446cc6c-7387-3dba-951b-1ead1b34d2ad.roa
File:                     c446cc6c-7387-3dba-951b-1ead1b34d2ad.roa (raw, json)
Hash identifier:          +BJp3Qx9VhrMUaRgegFguzl1KFxaltzUAZBQHoQC3S4=
Subject key identifier:   C2:E4:BB:9D:2B:B4:D6:2D:09:A9:D4:8F:AC:C4:81:63:B5:EA:32:01
Certificate issuer:       /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Certificate serial:       010D0C9F43285849C904DFB2CEB48C3493940D00
Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/c446cc6c-7387-3dba-951b-1ead1b34d2ad.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     2906
IP address blocks:        192.173.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:df:b2:ce:b4:8c:34:93:94:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=e86067ae-f292-423b-858a-e62939930b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a6:43:79:79:22:a1:38:a7:7c:e5:22:3d:37:
                    2a:e2:9a:06:2b:eb:01:78:9c:60:d3:f5:e3:cc:5e:
                    ee:c7:cc:e3:79:cb:f2:53:87:c6:dc:7f:ed:4c:d4:
                    fb:45:3a:90:03:44:1f:65:90:31:6a:34:ca:dc:0c:
                    c9:8a:ae:74:6d:da:6b:f4:20:e5:fb:d3:fd:db:da:
                    1e:6d:01:66:eb:8b:d1:42:d7:2d:be:0d:3e:25:54:
                    e1:4f:2d:05:ae:67:08:28:17:05:9d:96:9a:a8:7d:
                    36:67:7c:8f:1b:1e:ff:80:25:dd:d2:62:ff:bd:de:
                    70:09:59:88:c2:ba:08:fe:62:5f:75:a7:46:0a:1a:
                    ef:52:46:48:7d:ff:83:e6:05:25:42:7d:96:0e:ab:
                    35:29:aa:0a:fd:79:d1:44:00:12:86:eb:29:c2:1f:
                    85:1a:8e:6e:1d:d2:4b:49:47:38:cf:fc:c3:57:3b:
                    1a:be:7a:b8:a4:43:95:d3:d4:82:0f:e8:3e:5f:8c:
                    15:96:c0:3b:62:51:5a:51:36:e5:4f:d6:5f:94:5b:
                    47:e8:e0:7a:a0:90:81:8d:3d:d5:29:85:19:79:db:
                    e9:a9:0c:91:04:22:29:52:d3:41:10:89:7e:9b:18:
                    d5:0e:f8:7e:30:66:75:1c:97:5f:15:e5:06:dc:90:
                    91:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E4:BB:9D:2B:B4:D6:2D:09:A9:D4:8F:AC:C4:81:63:B5:EA:32:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/c446cc6c-7387-3dba-951b-1ead1b34d2ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl

            X509v3 Authority Key Identifier:
                keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.173.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:c6:92:08:48:d3:58:4f:aa:81:0a:68:85:1f:bc:71:23:10:
         ee:21:6d:45:e1:b3:bc:fc:ab:df:8f:2c:53:5c:a3:a1:4e:53:
         8c:69:35:12:c9:b1:f5:a1:1d:70:d9:18:75:61:c9:e9:63:f6:
         ae:59:4b:c0:74:18:32:c2:9b:8d:d3:eb:33:d4:b6:48:36:16:
         5b:34:72:e8:44:ee:f1:e6:07:1f:3f:03:64:c9:b0:65:ab:dd:
         6d:5e:6b:75:b7:7e:69:f9:a2:42:21:ec:e8:33:46:2c:02:0a:
         61:e2:3c:e7:bf:88:80:90:d2:0b:89:ef:89:75:8f:86:1c:1a:
         1e:80:ef:17:b4:22:e5:4e:74:68:4a:9c:f2:ce:07:99:84:e3:
         de:92:6e:8b:bb:37:a0:e9:e5:f2:25:d1:2c:b5:b6:45:d7:ab:
         c8:bd:c3:38:42:ca:e2:55:0e:80:35:87:40:d6:01:16:ff:7f:
         b6:6c:44:b1:da:33:c2:23:02:65:b1:42:a7:8c:4f:e6:0b:30:
         31:b1:ab:f4:29:f0:e2:34:c7:a8:93:36:61:66:47:15:fa:c0:
         60:59:ca:eb:c6:94:0e:8e:25:74:24:e2:49:73:6f:0d:24:b1:
         99:50:ab:06:fe:87:29:f1:f8:d6:63:bd:7d:37:dc:13:c5:91:
         01:37:98:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:01:01 2025 by rpki-client