Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/9ad610dc-5b29-38dc-a626-ebcfaca05974.roa
File:                     9ad610dc-5b29-38dc-a626-ebcfaca05974.roa (raw, json)
Hash identifier:          JhIYrYjo+NaEok/OUkKugsqyd+fOEoc7f4k5hS8hkT0=
Subject key identifier:   8A:CA:D8:1D:7E:D4:45:94:E9:11:AF:C4:91:39:33:8D:5D:0A:DA:7B
Certificate issuer:       /CN=61f164dd-db39-470d-8805-3aa514d5e7b0
Certificate serial:       010D0C9F43285848EC968726EBFAF10B37A0B080
Authority key identifier: 9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/9ad610dc-5b29-38dc-a626-ebcfaca05974.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     52347
IP address blocks:        192.34.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:87:26:eb:fa:f1:0b:37:a0:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f164dd-db39-470d-8805-3aa514d5e7b0
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=34786faf-f716-4e37-9969-a05c18dd11d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:be:dc:85:80:67:14:b3:9f:b1:4c:cb:52:82:
                    1f:db:88:fd:a8:15:af:72:0a:cc:2a:c0:af:89:16:
                    9b:53:51:f1:ac:59:0d:20:40:e7:4c:42:e0:9e:54:
                    3d:b1:48:58:59:1d:b2:3e:20:c4:fd:cf:26:b3:ce:
                    c8:43:f0:f8:f0:d2:66:c3:5e:48:c2:47:61:43:c3:
                    de:0a:99:d9:3a:c3:1d:86:24:3c:ce:4d:4d:52:af:
                    e7:1a:f1:e5:58:23:21:10:c3:dd:06:3c:42:85:23:
                    6f:88:59:03:dc:bc:68:95:15:b2:d1:77:57:c2:62:
                    8f:58:20:93:41:1d:f4:2a:4a:87:42:5a:e3:f9:de:
                    fe:ef:eb:77:41:03:4c:5c:cc:b6:df:58:24:b5:48:
                    cc:16:ed:00:4f:15:c2:48:f8:40:8e:69:31:66:54:
                    d9:55:cd:c7:63:e5:c4:3a:df:45:2e:15:14:4a:27:
                    81:e6:a0:bd:60:e6:1a:32:a1:8a:ce:35:21:d3:be:
                    7d:b4:ec:fb:02:98:a9:a6:73:4e:93:c0:f2:ec:24:
                    45:8c:e7:e9:0a:5d:b4:13:11:c2:bd:a2:32:af:b9:
                    ff:f5:d0:61:21:64:69:99:e5:8d:4d:c4:df:6c:d4:
                    80:00:52:23:2f:5c:ca:04:d9:f4:46:b3:0b:e6:35:
                    3d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:CA:D8:1D:7E:D4:45:94:E9:11:AF:C4:91:39:33:8D:5D:0A:DA:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/9ad610dc-5b29-38dc-a626-ebcfaca05974.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl

            X509v3 Authority Key Identifier:
                keyid:9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:4a:92:f1:d6:59:93:2f:56:78:ae:d1:aa:3c:87:3a:d4:be:
         3d:ef:18:c9:d8:2a:02:a7:54:ba:b3:ca:cd:58:81:68:35:1d:
         05:20:6d:80:3d:ff:80:31:29:1d:28:60:0d:5a:d1:97:15:08:
         81:ef:ff:37:c7:ea:a7:88:69:91:52:94:0a:8d:da:29:95:83:
         14:30:b4:bc:ea:8d:09:2b:53:26:8d:8a:d8:be:2c:08:c8:b3:
         9a:cf:19:12:c6:f2:67:8d:7e:5c:09:36:54:30:74:a5:da:3d:
         a0:5e:b8:2d:87:57:e1:e2:7b:e3:f0:96:31:d8:0d:0b:a3:ed:
         5d:61:a6:08:09:c0:1e:df:d0:87:8f:7d:07:e8:7e:43:cd:04:
         1a:ad:f9:c5:39:4e:9d:7e:ae:2e:b9:0a:7b:0b:bc:3a:55:2d:
         bf:b5:e5:ae:19:b6:28:6b:4d:f0:84:60:f0:d2:61:c6:2b:83:
         9d:cc:bf:c4:e9:d6:56:c0:74:73:2e:ad:fa:3f:37:e3:22:81:
         f7:88:ee:01:53:98:54:d8:a9:2a:9c:d1:b0:5e:d2:3f:54:92:
         06:48:67:6f:2c:05:c5:d2:94:57:fb:32:71:0e:d2:36:93:1b:
         9c:06:90:47:85:0d:b0:53:4c:00:9d:59:2f:7f:8d:f8:30:57:
         0f:23:8e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:38:15 2025 by rpki-client