Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d48d798-bdf8-4082-8394-a16fca0f83af/78644dd4-2392-31eb-800f-158c88e9ce1b.roa
File:                     78644dd4-2392-31eb-800f-158c88e9ce1b.roa (raw, json)
Hash identifier:          0hYCPoGGN5fPlyhTkCBC05/BX+EO77oZG35lal5Zdng=
Subject key identifier:   C3:19:25:A3:E0:21:C1:89:85:A0:69:5A:6D:88:A8:EA:A5:B3:67:E2
Certificate issuer:       /CN=8d48d798-bdf8-4082-8394-a16fca0f83af
Certificate serial:       010D0C9F432858488DAB49426A13A78951CCA580
Authority key identifier: 7A:C8:84:6B:36:4D:A8:05:71:69:43:FD:45:25:3B:D4:5B:F0:3C:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d48d798-bdf8-4082-8394-a16fca0f83af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d48d798-bdf8-4082-8394-a16fca0f83af/78644dd4-2392-31eb-800f-158c88e9ce1b.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     16409
IP address blocks:        204.9.92.0/22 maxlen: 24
                          2604:5e40::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d48d798-bdf8-4082-8394-a16fca0f83af/8d48d798-bdf8-4082-8394-a16fca0f83af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d48d798-bdf8-4082-8394-a16fca0f83af/8d48d798-bdf8-4082-8394-a16fca0f83af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d48d798-bdf8-4082-8394-a16fca0f83af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Mar 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:49:42:6a:13:a7:89:51:cc:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d48d798-bdf8-4082-8394-a16fca0f83af
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=191c6317-b1f8-49b1-b0e0-07417df99680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e7:1f:ce:1d:8c:2c:cf:20:78:c4:a3:fb:37:
                    16:9e:7c:e2:b2:aa:b7:ae:1c:bf:08:0a:ec:9b:60:
                    2f:2e:cf:87:eb:c3:8a:10:78:ce:8d:dc:4e:61:f7:
                    3b:47:da:09:c8:f1:61:cb:9b:82:58:e0:b8:4b:fa:
                    8e:77:82:93:22:b7:d6:19:74:21:44:9b:f7:94:1c:
                    3b:c2:01:0e:b1:1f:c4:f5:6e:1f:28:52:ef:c7:1d:
                    7c:0a:35:bb:a7:46:e5:7c:bc:9c:ec:6d:d9:f2:d9:
                    02:fe:56:d3:12:22:bd:2f:35:05:04:ef:b1:b0:39:
                    06:34:c3:ac:5c:95:b3:b3:6d:b1:b2:a6:19:13:43:
                    e0:9d:cb:25:57:93:50:11:cf:5e:0f:9b:86:15:b4:
                    9c:0b:c0:e8:e6:5a:89:33:2c:6a:3c:cb:d0:29:38:
                    4e:b6:e4:40:16:57:43:35:b3:0d:f5:13:ef:40:45:
                    49:a6:f2:84:59:e0:20:e4:17:c9:92:14:f4:78:4c:
                    17:3d:ac:1d:0b:61:8d:a9:6c:ee:3f:d8:11:8d:d5:
                    d4:3a:27:d9:4d:f1:6c:f9:a1:d4:04:1e:aa:65:e1:
                    26:b5:84:8a:7f:5a:8b:ea:b0:54:9f:9e:4f:58:0d:
                    84:b8:56:55:a4:28:8b:5f:b1:53:e9:78:f8:e3:63:
                    42:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:19:25:A3:E0:21:C1:89:85:A0:69:5A:6D:88:A8:EA:A5:B3:67:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d48d798-bdf8-4082-8394-a16fca0f83af/78644dd4-2392-31eb-800f-158c88e9ce1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d48d798-bdf8-4082-8394-a16fca0f83af/8d48d798-bdf8-4082-8394-a16fca0f83af.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C8:84:6B:36:4D:A8:05:71:69:43:FD:45:25:3B:D4:5B:F0:3C:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d48d798-bdf8-4082-8394-a16fca0f83af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.9.92.0/22
                IPv6:
                  2604:5e40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:10:61:51:04:ec:05:0d:c9:60:10:58:45:d3:ef:3a:19:36:
         f9:a2:4e:83:d2:ee:54:70:65:8e:e9:dd:70:6f:5b:37:6f:0b:
         d2:6c:2f:53:43:e9:0c:65:6e:be:f6:0b:44:51:c4:24:18:bc:
         3c:9b:b5:ec:37:44:de:57:29:cd:8c:e8:f5:16:db:95:ee:53:
         d5:57:7f:89:f5:7a:04:5f:80:1f:c8:a7:3e:bd:7e:d9:b5:25:
         8f:24:35:13:98:c2:2e:b2:0c:96:07:63:ad:66:47:94:3f:3e:
         b1:15:26:0b:ca:05:cb:ff:28:7e:3b:03:13:62:58:7e:13:39:
         9d:0f:5b:43:20:50:c1:02:48:40:0e:f3:fe:8f:ab:26:10:49:
         d0:5d:09:05:53:93:3f:cb:e4:02:44:81:67:22:b5:99:40:a7:
         e9:04:61:bd:c3:24:b9:9f:05:14:c4:ed:cb:f8:4e:67:99:db:
         04:24:40:e8:3a:66:66:d0:ef:19:eb:80:59:65:47:92:11:d4:
         c5:3b:e9:fb:7f:93:06:c4:a9:e7:9d:ab:be:8a:ae:d9:60:a7:
         f0:5f:66:ad:0c:f9:13:42:62:e7:3c:0e:18:63:34:53:39:65:
         26:4b:9a:df:a2:d2:24:55:ea:32:7d:8a:6d:a4:2c:be:35:1f:
         42:8f:29:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 18 20:40:49 2025 by rpki-client