Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/c650be8d-29c8-3d31-9c64-9172d71f8ec4.roa
File:                     c650be8d-29c8-3d31-9c64-9172d71f8ec4.roa (raw, json)
Hash identifier:          iu/EXynbNNKHJCQsrkrbzFAErA7XAszF0VTzVs5b4Bg=
Subject key identifier:   41:2B:BE:E7:E9:D7:0F:FC:BB:58:4D:82:91:F2:2B:A0:0E:D6:AE:03
Certificate issuer:       /CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
Certificate serial:       010D0C9F432858498CFF16AC8FC3F8C93EA35A80
Authority key identifier: 56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/c650be8d-29c8-3d31-9c64-9172d71f8ec4.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     10497
IP address blocks:        192.86.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:16:ac:8f:c3:f8:c9:3e:a3:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=6bab1735-5895-4bb5-820f-c094e4a36e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e6:2b:d0:51:2f:19:a6:7c:0d:1e:33:b3:43:
                    f3:16:45:0d:6f:56:3f:91:5b:3e:7c:bc:56:91:76:
                    5a:06:73:12:6b:f6:f4:8f:38:f1:fe:b5:36:fc:72:
                    46:20:44:79:9f:22:ba:73:b3:80:7f:1f:c1:9e:9a:
                    f0:a2:9e:2d:f0:f3:53:53:4b:5a:9e:1f:ae:ad:0e:
                    11:79:47:80:8a:07:d9:22:99:80:6f:e7:d4:93:2b:
                    1c:4a:6a:31:40:5c:e1:2f:83:8a:f7:e7:f8:01:66:
                    96:c7:2a:b6:de:18:d6:0c:8b:2a:42:7f:99:59:56:
                    c7:e1:2e:84:4e:40:d6:c8:01:2b:01:ef:1f:9f:8c:
                    b9:c2:af:ca:4e:1f:83:5d:8b:73:52:07:66:7e:c8:
                    f4:1b:67:6a:a4:9c:27:48:3b:25:ca:8f:7d:5d:21:
                    f9:10:34:8a:84:ad:73:e3:5e:97:cf:8d:9d:00:16:
                    fc:41:89:cf:b6:27:42:e2:3f:4e:a1:16:57:0e:7d:
                    61:d1:84:e5:c5:8e:50:fe:48:96:c1:0d:de:33:8e:
                    1a:f2:62:c3:0b:7f:db:3a:de:78:e0:ea:d6:a6:b0:
                    24:50:7e:3a:61:63:a1:b3:c9:42:d2:b0:1f:e1:94:
                    56:b3:e0:d4:8e:30:a0:86:c1:29:4e:54:8a:bc:b6:
                    2c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2B:BE:E7:E9:D7:0F:FC:BB:58:4D:82:91:F2:2B:A0:0E:D6:AE:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/c650be8d-29c8-3d31-9c64-9172d71f8ec4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl

            X509v3 Authority Key Identifier:
                keyid:56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.86.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:f4:25:4e:1c:f5:d5:fd:15:62:61:82:d8:5a:fc:72:d9:44:
         0f:18:d9:45:32:7f:0a:74:c7:f6:12:15:b0:9b:9b:b3:6f:65:
         21:d0:c6:aa:88:e3:43:78:b2:50:7f:55:16:98:2c:c4:ad:a4:
         2c:5d:d8:c8:26:62:9d:6f:bf:42:d3:a7:f8:bd:13:9a:eb:a8:
         dd:5b:70:58:00:de:4a:b9:04:eb:46:ae:19:36:00:3f:ff:06:
         73:46:d3:21:b7:52:89:e4:e6:7e:73:a4:cc:6a:c3:a2:1d:82:
         0e:91:7f:6d:9d:31:12:85:b6:58:46:38:72:74:1c:45:58:48:
         b7:49:79:c1:e7:b7:8b:58:a4:12:b6:46:00:54:48:d6:01:ed:
         2d:e7:34:fb:ae:36:df:e4:6c:5a:bb:b0:09:02:6f:44:98:30:
         b6:d8:4b:af:be:af:0e:ec:f2:cd:9d:f0:88:d8:21:2b:7f:bb:
         c6:63:29:e4:82:0b:05:4f:6c:af:23:0b:fc:a5:3e:c6:ab:9e:
         1c:a7:c9:4c:16:6d:79:dd:7a:f6:2a:85:f6:75:34:67:42:07:
         1c:3d:4f:9b:d9:4c:f8:ed:37:fd:81:ad:9e:0a:9a:52:69:79:
         c2:8d:ce:60:cb:76:d0:03:73:f8:c3:39:64:c8:96:dd:19:8a:
         36:01:ef:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:40:48 2025 by rpki-client