Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/4d0df983-efe5-30fb-9b23-cf9f866054a3.roa
File:                     4d0df983-efe5-30fb-9b23-cf9f866054a3.roa (raw, json)
Hash identifier:          YpKribeYyHvbqKcHfArHXC8kWHSzobXQ4Fgs+Kf+scU=
Subject key identifier:   22:C3:84:F8:E8:80:4E:02:87:6F:BE:97:75:C3:40:F5:5B:E6:FB:45
Certificate issuer:       /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial:       010D0C9F432858489FD09A02D0B7C17F3B837C00
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/4d0df983-efe5-30fb-9b23-cf9f866054a3.roa
Signing time:             Wed 22 Jan 2025 02:00:39 +0000
ROA not before:           Wed 22 Jan 2025 02:00:39 +0000
ROA not after:            Tue 22 Apr 2025 01:00:39 +0000
asID:                     59895
IP address blocks:        192.186.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9f:d0:9a:02:d0:b7:c1:7f:3b:83:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
        Validity
            Not Before: Jan 22 02:00:39 2025 GMT
            Not After : Apr 22 01:00:39 2025 GMT
        Subject: CN=1c004260-3887-4fb8-9d96-88efed7df44d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:14:2e:51:52:db:34:e5:e1:ad:da:26:de:fd:
                    30:97:80:e6:9c:fb:40:7d:80:d8:62:bb:4c:ae:97:
                    4e:39:05:e6:85:b6:79:6a:d4:54:4d:e2:2e:7b:7b:
                    c4:90:85:f6:79:0d:ae:47:6b:61:da:0c:e6:1a:cb:
                    65:9f:80:68:b6:97:66:a2:48:d4:c5:e3:88:44:79:
                    fe:2c:a2:bd:c1:1a:33:a6:e2:f5:a6:0c:73:69:ea:
                    0c:23:98:c0:4e:4c:8e:f1:76:a5:c3:c2:19:21:d2:
                    5d:d5:6f:96:37:57:68:01:56:10:0f:98:d9:f7:35:
                    63:95:d2:34:d1:34:ce:a5:47:a8:1e:2a:22:a0:df:
                    24:93:f0:a4:b7:03:bc:e0:c9:63:e4:0f:4d:14:8f:
                    03:74:70:f6:9f:d2:5c:03:e7:4d:9c:5d:0f:4b:20:
                    ab:6a:84:35:d7:38:39:2d:77:43:05:1e:68:40:25:
                    6d:4b:b8:96:ab:b7:de:21:00:1c:12:86:de:86:45:
                    d0:31:3c:02:19:64:f9:02:a3:5f:65:35:94:e6:18:
                    e2:36:be:fc:a8:28:d7:99:7a:53:60:03:3f:bb:a0:
                    18:ec:7f:67:3a:c3:d4:88:fd:0a:b5:db:11:77:c6:
                    cf:58:41:f5:2f:17:4d:3a:31:c0:00:a4:9a:17:62:
                    7b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C3:84:F8:E8:80:4E:02:87:6F:BE:97:75:C3:40:F5:5B:E6:FB:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/4d0df983-efe5-30fb-9b23-cf9f866054a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl

            X509v3 Authority Key Identifier:
                keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.186.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:99:1b:8e:cb:bc:a0:ae:f4:6f:df:df:52:ef:e9:a4:d1:27:
         aa:01:57:db:29:72:c4:62:3d:3e:f7:c2:e8:d5:2e:03:92:a8:
         7f:24:96:95:07:15:b3:0f:91:8e:1e:4f:92:dc:3e:3f:f2:d6:
         9a:cc:a7:30:96:48:04:0d:7b:2f:52:e3:77:86:02:2b:a6:71:
         73:63:8f:48:32:c7:2d:0f:24:87:7c:e6:1b:9c:aa:67:4c:11:
         1c:c2:e7:fb:03:89:39:2f:10:8e:e2:31:1b:ff:9c:12:5b:16:
         92:04:a8:3b:ba:e9:e4:42:e1:0c:6e:ec:ab:c2:8b:82:37:a6:
         06:a7:a5:4e:f7:3f:cf:e3:1b:68:93:34:ea:51:ef:32:56:fd:
         f3:b7:38:11:88:42:bc:6b:ea:e2:2e:44:d2:88:c9:21:b8:88:
         5b:90:72:2d:75:95:bb:05:8d:f0:af:f7:8b:05:3a:6d:d0:4e:
         93:2e:39:b1:04:1e:23:cf:ca:79:eb:ae:1a:e5:0d:19:83:aa:
         92:b4:3a:ac:85:00:35:69:b9:cb:c4:fa:ec:12:58:7d:ee:1b:
         7b:6c:ec:bd:cb:f1:9a:92:d8:a4:c9:fa:e8:39:9c:74:4f:15:
         ac:3e:e5:df:bb:17:82:1c:57:d5:32:01:4c:26:ed:14:52:1f:
         d4:46:74:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:21:35 2025 by rpki-client