Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f5092bd3-603d-3264-b3fd-7e0f9cd87068.roa
File:                     f5092bd3-603d-3264-b3fd-7e0f9cd87068.roa (raw, json)
Hash identifier:          zk+AtuQ2LJAaLY1XVGSek+wM8HwFZAKtliuKLV6O/BI=
Subject key identifier:   E3:66:92:CE:CB:C4:FA:C9:59:09:5C:99:43:92:A7:E2:49:48:0E:38
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F432858491246CC039999EC5A1AA9045C
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f5092bd3-603d-3264-b3fd-7e0f9cd87068.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     203
IP address blocks:        192.53.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:cc:03:99:99:ec:5a:1a:a9:04:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=2e5e2447-ad6a-4455-aae2-87aafd82059d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f9:2d:11:f6:d6:7c:40:e5:d1:1b:e0:e0:9b:
                    b0:75:39:db:3c:6f:89:89:7e:00:46:2d:5a:9c:b6:
                    e9:8d:0d:b6:60:cb:c8:5f:b8:50:ac:c6:4d:cd:fe:
                    90:08:27:d9:9d:fc:3d:53:1a:4b:25:01:27:b2:81:
                    1c:69:0c:9c:10:86:89:1e:51:37:64:7e:b1:e2:c3:
                    34:1a:b0:ce:7f:42:29:76:fc:36:02:12:4a:e8:49:
                    fa:cd:a2:70:9c:1a:24:5e:f7:75:77:9b:d4:a7:66:
                    fa:4a:5b:55:62:35:85:e9:da:ad:07:8b:2a:59:ff:
                    58:bf:b8:df:16:35:8a:a4:f8:09:60:82:bb:bc:ef:
                    d8:25:f5:bc:52:dc:b5:f0:d6:9f:a7:9f:b0:0f:70:
                    93:22:24:fc:73:1f:39:8f:2d:eb:c3:81:75:95:ea:
                    c0:7c:0d:db:31:7c:08:13:c4:3f:92:45:24:ee:6f:
                    38:4e:db:3c:fd:b0:a4:02:ec:87:41:9c:f6:be:e5:
                    70:0a:b9:e2:5f:1e:dc:36:a5:ea:24:1f:f2:99:6f:
                    d8:49:da:66:01:90:d5:e7:92:02:62:69:f8:74:e5:
                    83:44:cc:0a:33:6c:88:12:32:af:e6:8d:6b:51:0c:
                    bf:b2:61:40:74:9c:6e:1a:df:53:12:07:b5:29:ff:
                    c1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:66:92:CE:CB:C4:FA:C9:59:09:5C:99:43:92:A7:E2:49:48:0E:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f5092bd3-603d-3264-b3fd-7e0f9cd87068.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.53.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:3d:d4:67:d7:e1:28:40:00:a6:70:ba:e8:21:53:ee:db:ea:
         4b:70:16:41:70:df:36:0c:e2:85:0e:b5:9f:01:e2:b9:41:5b:
         6b:b0:9c:c5:f3:6a:76:94:ad:ab:06:22:a5:9f:72:c6:d9:b2:
         52:43:04:59:06:44:5f:f2:11:61:5c:25:fb:ec:db:03:c2:8a:
         0e:05:a4:97:40:c7:3b:96:33:1b:82:45:38:f6:9a:19:65:52:
         cb:42:34:89:6b:6a:e8:59:99:ba:9d:ab:66:1b:9c:1d:27:14:
         84:5f:1c:7f:c8:dd:25:00:9e:41:bc:0f:96:45:6b:77:98:85:
         14:bc:38:df:d6:18:a2:9f:82:92:e3:6c:c5:e0:16:b3:c0:06:
         42:b0:d6:99:cb:8d:76:51:f3:09:5a:24:63:bd:70:96:91:f8:
         df:21:20:7f:29:25:35:99:c6:67:49:9b:35:26:24:6a:77:c6:
         ce:af:4b:cb:49:b5:90:d5:df:68:af:8c:69:ea:51:33:78:4c:
         7f:d8:6e:a3:ce:40:ec:30:2c:5f:19:ff:3c:1e:2e:3a:7e:f8:
         56:cb:ea:3d:76:e2:70:e4:14:2c:68:3a:2a:e1:4f:6b:00:78:
         00:3e:a9:67:44:bb:ce:9d:69:7a:24:e3:f7:3e:10:6e:05:87:
         05:05:c3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:30:08 2025 by rpki-client