Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6f14783f-3b51-3ff5-ad9d-fc946d4df6da.roa
File:                     6f14783f-3b51-3ff5-ad9d-fc946d4df6da.roa (raw, json)
Hash identifier:          nq68aLCe4K6qO3DHTJSDSJCflteVXelqIHjqbWg6y0I=
Subject key identifier:   08:27:D5:7A:1D:F4:3F:11:C5:0F:47:32:B5:A4:67:89:C4:C1:72:D8
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1CDAA4171BB1DC5DF8E6A00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6f14783f-3b51-3ff5-ad9d-fc946d4df6da.roa
Signing time:             Thu 24 Apr 2025 11:53:22 +0000
ROA not before:           Thu 24 Apr 2025 11:53:22 +0000
ROA not after:            Wed 23 Jul 2025 11:53:22 +0000
asID:                     19905
IP address blocks:        173.20.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:cd:aa:41:71:bb:1d:c5:df:8e:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 11:53:22 2025 GMT
            Not After : Jul 23 11:53:22 2025 GMT
        Subject: CN=33b20b97-5bbf-412f-a15c-4ef8ebe92491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:08:6f:fc:84:90:07:b8:fc:e4:72:60:e8:79:
                    d6:3b:fb:90:2d:98:b0:a7:1b:41:c3:d9:33:57:59:
                    41:e6:9e:1b:90:80:2f:f1:05:10:9d:b5:3e:c7:e2:
                    78:c6:9e:53:f3:51:fa:4f:5a:bd:99:26:2f:a5:b7:
                    a1:44:09:ce:19:45:9e:6e:a2:ed:cc:f2:ac:7e:a0:
                    f0:c0:70:1d:52:8a:be:ea:2d:74:4e:d4:88:ff:4f:
                    90:cb:eb:bc:6a:94:4b:9c:36:bd:ad:ce:9d:01:a4:
                    d0:31:2f:16:06:27:ce:b0:64:a6:c2:f0:e6:ad:32:
                    42:53:6d:b9:b0:9f:8d:70:3f:30:44:25:ee:4b:00:
                    50:4e:1e:4e:55:c1:34:1e:a5:56:f1:52:dc:a8:13:
                    53:55:39:d4:c8:f1:38:7b:7f:8d:56:c2:e9:be:3c:
                    93:fd:1d:9d:ae:20:a0:19:da:7a:0d:db:2a:49:91:
                    20:05:00:8f:d3:cb:40:ac:7a:fd:da:2a:cc:2b:f4:
                    4b:e7:68:ec:30:80:c3:d8:60:5e:44:04:c2:39:1f:
                    c0:d2:dc:71:d7:c1:3a:01:5d:93:0d:78:f4:bd:ed:
                    15:ab:b4:bb:3b:66:40:41:95:48:d3:95:37:6c:6d:
                    c4:a6:d0:80:9d:cf:ab:51:27:62:0a:43:a4:09:6d:
                    2a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:27:D5:7A:1D:F4:3F:11:C5:0F:47:32:B5:A4:67:89:C4:C1:72:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6f14783f-3b51-3ff5-ad9d-fc946d4df6da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.20.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:a6:12:3d:19:1e:0f:53:1c:89:9f:1e:94:7b:a2:dc:49:ae:
         2a:75:a1:d4:ee:19:74:1b:61:d0:3c:75:29:45:e1:6d:00:2d:
         67:a3:a3:5c:c0:f4:b1:c2:78:40:fe:6b:3d:37:03:c8:27:82:
         94:e5:d5:da:63:53:86:1f:07:48:77:26:25:41:63:e3:14:6a:
         bc:71:4e:f8:ff:62:62:12:a3:92:db:86:26:81:bf:d2:86:96:
         44:5b:74:19:4a:02:4d:c5:18:e2:e7:88:33:01:0b:48:5a:69:
         20:66:b6:00:66:fd:94:3e:30:ae:c5:fe:02:c9:39:14:03:fb:
         95:5b:de:bd:75:63:70:b0:ab:38:df:85:5a:df:ec:15:27:16:
         b4:34:d6:f8:4f:6c:96:7b:24:b4:4e:99:14:ff:8f:ed:c9:78:
         49:78:d8:a9:13:6f:26:0f:1b:5c:db:df:ce:f7:3e:cb:77:5f:
         96:78:43:eb:b0:e1:c7:dc:fc:6a:10:1f:bd:67:a9:cd:48:d9:
         d6:83:f6:3f:b1:0a:03:0e:02:7a:82:94:8c:ab:0c:e7:8f:a5:
         aa:20:e4:18:a2:cd:68:06:4d:24:49:8a:6b:f9:fe:56:8f:ec:
         dc:97:d8:a2:ad:38:3a:16:97:66:82:36:23:35:59:fd:06:50:
         10:1c:92:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:45:04 2025 by rpki-client