Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/0fbbad58-17ff-3478-b4f4-425fe9d4c0c0.roa
File:                     0fbbad58-17ff-3478-b4f4-425fe9d4c0c0.roa (raw, json)
Hash identifier:          /aq8AEJFL5+B4v9nO3IKy4OQFsSLbNznqh0tmN826eQ=
Subject key identifier:   0B:3C:02:3D:BB:A9:2C:4C:09:D9:45:C0:33:F0:A4:B7:B4:D1:94:03
Certificate issuer:       /CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7
Certificate serial:       010D0C9F4328584988CF30A6F00769D415F7FCE0
Authority key identifier: 98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/0fbbad58-17ff-3478-b4f4-425fe9d4c0c0.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     26356
IP address blocks:        91.106.220.0/22 maxlen: 24
                          204.52.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:30:a6:f0:07:69:d4:15:f7:fc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=46521c0e-4a6f-45f2-9883-9da4af5f10fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c2:83:92:5c:e9:8e:8e:9c:ec:cd:1a:0c:7a:
                    11:5c:c9:42:e4:ca:91:a9:b2:56:08:cf:45:86:a3:
                    99:6d:c4:8b:dd:b7:02:43:aa:fe:75:f7:2a:19:b8:
                    c5:97:92:bd:67:76:3b:11:97:4c:ff:1d:53:5c:3e:
                    79:9a:78:6b:50:2d:b9:67:a8:be:b3:91:10:f8:0b:
                    30:b4:ce:f9:7e:26:48:54:2f:0c:b6:ac:7f:49:13:
                    44:df:a6:0f:b9:e7:de:3f:e4:2a:f9:bd:47:f0:72:
                    cc:36:50:f6:7c:18:81:77:7f:e4:a6:15:17:b3:8e:
                    7e:74:68:9a:99:7d:a6:9a:51:f6:e8:0e:f2:a4:9c:
                    c9:6d:67:5a:87:2b:f2:20:37:8e:22:d6:ad:ff:47:
                    6a:be:87:1a:a1:c8:0c:d6:3c:25:46:4f:39:67:f4:
                    62:17:9b:4f:45:58:87:6f:7d:28:13:96:d1:df:07:
                    84:5c:13:bd:be:07:8f:a7:37:f5:3f:e1:34:27:0c:
                    c0:5f:55:c9:96:16:3a:a3:b9:9a:7e:90:55:73:6a:
                    ee:28:06:5d:75:9d:a3:90:31:6e:ad:d6:48:d0:2d:
                    8d:10:82:f4:48:3d:17:5a:f8:66:32:13:2b:75:e6:
                    e4:ac:59:47:45:d2:b8:56:10:e1:ff:00:de:7a:cf:
                    3d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:3C:02:3D:BB:A9:2C:4C:09:D9:45:C0:33:F0:A4:B7:B4:D1:94:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/0fbbad58-17ff-3478-b4f4-425fe9d4c0c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.crl

            X509v3 Authority Key Identifier:
                keyid:98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.106.220.0/22
                  204.52.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:07:e2:0b:c2:ea:8a:d5:28:dc:88:e2:6f:b0:9e:f7:6e:30:
         80:c0:15:29:e2:99:60:5c:08:ea:2e:6d:98:f0:12:38:0b:e7:
         6e:42:2a:d9:8b:d6:e7:5b:b2:32:35:ef:38:c5:87:c6:56:b5:
         70:93:51:87:30:8d:24:31:ce:44:3b:e3:e4:61:28:6d:a2:ff:
         36:b4:c2:75:1f:46:39:64:6e:c0:ed:a8:f2:28:0b:92:7a:ef:
         b3:d4:71:fb:26:87:af:5c:70:0b:bf:36:4d:cb:c3:a8:65:b8:
         ca:07:af:45:9f:ad:d5:d5:0f:a6:94:66:5c:34:90:3e:84:36:
         d8:e7:39:c4:c2:b3:21:d3:fe:37:ce:c3:a9:e1:00:1d:ad:bc:
         79:24:2e:5f:5c:0b:62:2f:b5:65:aa:66:b9:2b:de:e4:72:40:
         bb:4f:88:7f:07:64:55:80:c9:50:ba:4d:0d:02:5a:f5:b3:7b:
         ba:09:f0:3f:8a:43:8a:88:3a:f5:58:f0:e0:54:7f:17:1c:40:
         bb:ee:15:c8:f4:e7:b3:e5:32:43:91:4c:0d:a0:79:6e:d8:64:
         a7:d4:8d:49:10:cf:50:db:79:d1:24:f1:23:56:5e:25:58:17:
         67:de:27:86:76:9b:32:7b:63:96:68:b6:db:f1:86:ea:37:20:
         1f:f7:63:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 10:47:34 2025 by rpki-client