Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/56f8880c-5d7c-3c81-99e2-2fc7c2bfe2cc.roa
File:                     56f8880c-5d7c-3c81-99e2-2fc7c2bfe2cc.roa (raw, json)
Hash identifier:          CGK5B7VQCLdKpy/alu9WlLhU/L5Z/qPqtIJ1laTGMfM=
Subject key identifier:   04:6D:03:19:D9:66:9D:FA:58:A6:FE:66:FE:69:61:2D:9A:2E:F6:A2
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F432858499DBF2700F7A5786CD2CF7CC0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/56f8880c-5d7c-3c81-99e2-2fc7c2bfe2cc.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     7018
IP address blocks:        192.46.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:27:00:f7:a5:78:6c:d2:cf:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=9c9ccb67-81a1-4deb-af45-7ae1152d228e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2d:71:57:75:ff:be:66:72:10:d2:b5:77:fa:
                    60:8a:22:04:32:61:fe:b3:2a:2f:d1:8b:76:a6:03:
                    e7:a7:28:0e:f5:d2:75:95:93:c9:27:e5:a2:da:e0:
                    b1:e5:19:bc:c9:ec:46:52:c2:eb:df:a5:4b:73:ce:
                    16:c7:32:1d:9c:b4:35:a2:02:38:ec:a2:0c:80:33:
                    a8:1c:43:66:16:20:27:43:92:83:7e:f2:b6:48:41:
                    2d:54:a3:95:ee:85:fb:b3:cd:69:67:67:62:82:fc:
                    11:ab:7b:a9:91:92:9e:16:9a:73:50:c9:f5:72:62:
                    44:07:53:9c:de:79:7a:f5:2e:0f:46:00:66:75:58:
                    d7:bc:62:6b:4a:a5:f8:1e:9e:ce:2b:3e:fd:a4:92:
                    3a:64:64:65:81:7d:6c:b5:08:f2:a3:75:61:0f:54:
                    e4:fb:9a:3b:fc:8e:d9:a2:cf:cb:80:22:f5:4a:6c:
                    fd:f3:a8:20:4e:f3:b0:a1:36:e2:ba:c8:69:4b:82:
                    22:fb:3f:49:4a:71:d5:7f:62:d2:07:21:e5:ef:89:
                    f2:1f:89:94:d2:03:ea:2d:22:f1:05:d8:57:23:4d:
                    32:8d:0d:e2:53:c2:79:f9:6d:77:d5:58:64:ba:6a:
                    a7:ca:c9:a1:15:e2:24:51:c0:e5:ea:da:e8:5b:bd:
                    aa:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:6D:03:19:D9:66:9D:FA:58:A6:FE:66:FE:69:61:2D:9A:2E:F6:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/56f8880c-5d7c-3c81-99e2-2fc7c2bfe2cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.46.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:a2:ea:f3:92:2c:5b:5c:de:63:ba:f5:1b:ec:3e:80:35:12:
         47:ed:5b:a1:9f:c1:c6:0e:57:35:b9:3b:12:5c:63:99:30:98:
         b0:2a:80:d2:c0:97:85:ff:4a:dd:a0:62:35:d8:30:cb:12:05:
         6c:e8:8a:c1:0f:07:de:1f:2c:96:50:ba:eb:cf:fa:6e:c6:88:
         bd:44:33:40:b0:23:bf:44:3c:5a:68:0d:c8:e5:9c:bf:da:bf:
         a9:a3:8d:d5:86:ba:18:47:a6:39:fb:2f:3a:f6:c6:48:a4:81:
         12:1c:4c:fd:f8:e8:9f:d0:c2:70:f3:76:80:d9:99:79:bc:85:
         9e:ee:a3:f1:87:e9:90:d0:1f:f5:9d:73:94:30:39:de:c8:a6:
         7b:a4:e1:fa:e2:d4:9e:0b:35:d2:ec:6b:f6:ac:65:9e:fe:cd:
         79:de:62:59:98:ae:6a:fa:90:f6:10:3e:bc:ca:26:23:9f:d0:
         b6:6f:02:69:a7:3f:4e:68:20:c4:da:b3:95:7e:12:5c:ed:8e:
         b9:d5:6f:7c:ac:a3:90:c9:e0:8f:b9:dd:23:46:25:b8:93:80:
         b2:60:72:57:39:78:5f:8b:e9:5c:a2:89:e3:75:e9:2d:9e:90:
         d6:1c:ef:0b:04:80:5f:58:bb:30:c8:b3:b4:fb:96:7f:ed:53:
         e9:27:76:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:05:32 2025 by rpki-client