Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e6a005bc-3dfa-42c0-9245-4fcaaaddb155/e62ced49-978b-31ba-8318-4ef0d423b626.roa
File:                     e62ced49-978b-31ba-8318-4ef0d423b626.roa (raw, json)
Hash identifier:          Hqu5dfQC4RH3Bl2zxKZzuelwvHnRLsTNeYt3d8b+Pi0=
Subject key identifier:   AF:3B:F7:F0:F7:C4:E0:41:89:3D:67:94:F4:E8:D4:82:7C:37:C9:DD
Certificate issuer:       /CN=e6a005bc-3dfa-42c0-9245-4fcaaaddb155
Certificate serial:       010D0C9F4328584996C4B1423283ED79D87B4940
Authority key identifier: F9:5E:32:46:C2:2E:98:7B:4B:CC:FD:95:F0:EB:D6:E3:40:C7:6C:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e6a005bc-3dfa-42c0-9245-4fcaaaddb155.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e6a005bc-3dfa-42c0-9245-4fcaaaddb155/e62ced49-978b-31ba-8318-4ef0d423b626.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     393523
IP address blocks:        192.31.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e6a005bc-3dfa-42c0-9245-4fcaaaddb155/e6a005bc-3dfa-42c0-9245-4fcaaaddb155.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e6a005bc-3dfa-42c0-9245-4fcaaaddb155/e6a005bc-3dfa-42c0-9245-4fcaaaddb155.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e6a005bc-3dfa-42c0-9245-4fcaaaddb155.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:b1:42:32:83:ed:79:d8:7b:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6a005bc-3dfa-42c0-9245-4fcaaaddb155
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=597975f0-cf5c-4be5-9f55-b9036d3b6efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1e:3f:ae:5c:e7:3c:d0:a6:2c:38:6f:3d:f3:
                    58:27:6b:14:7b:7a:e8:0a:fd:87:99:fd:80:19:23:
                    24:5f:43:a6:e0:d2:32:6a:3b:d3:82:7f:65:4a:1e:
                    33:a5:f3:b4:72:47:7b:b3:e8:89:5d:4d:91:f9:9d:
                    b3:fd:af:ce:a4:8e:e2:63:5b:bb:a0:a9:dd:dc:aa:
                    1a:a9:fb:0a:ef:eb:50:21:07:cc:08:7c:b0:11:ad:
                    d9:18:ef:2b:1d:f1:83:ad:b8:41:29:2b:04:a6:12:
                    97:94:b9:f0:5e:80:8c:5a:10:53:fb:ac:f0:4c:c7:
                    78:16:66:fc:4d:86:87:4f:8d:af:ea:72:27:84:72:
                    ac:de:7d:2e:a0:5f:b8:6d:d3:18:c2:53:77:4c:82:
                    5f:9a:54:fb:61:3d:a8:05:41:f8:69:bb:26:11:e7:
                    8f:23:eb:13:12:9b:dd:fc:5f:7e:7e:c3:29:32:89:
                    25:03:a7:26:eb:ec:3e:81:7e:86:c4:1d:e3:bc:a5:
                    91:f9:21:91:23:71:5b:5b:98:40:50:08:bb:58:e2:
                    af:ae:1a:6a:a1:45:9d:aa:27:c9:97:0a:23:ae:f6:
                    c9:26:82:5b:54:dc:68:11:57:77:0c:3b:be:20:2a:
                    b5:95:54:4f:54:1e:7e:f5:a2:36:0c:8b:31:12:d5:
                    db:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:3B:F7:F0:F7:C4:E0:41:89:3D:67:94:F4:E8:D4:82:7C:37:C9:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e6a005bc-3dfa-42c0-9245-4fcaaaddb155/e62ced49-978b-31ba-8318-4ef0d423b626.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e6a005bc-3dfa-42c0-9245-4fcaaaddb155/e6a005bc-3dfa-42c0-9245-4fcaaaddb155.crl

            X509v3 Authority Key Identifier:
                keyid:F9:5E:32:46:C2:2E:98:7B:4B:CC:FD:95:F0:EB:D6:E3:40:C7:6C:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e6a005bc-3dfa-42c0-9245-4fcaaaddb155.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:68:57:12:c6:c4:8b:a2:94:15:59:04:40:4b:9b:05:c1:9d:
         c5:29:66:fa:4b:41:c2:38:75:d8:02:03:6f:3d:70:ec:64:f2:
         f3:a4:39:f5:51:de:81:de:77:bf:23:f8:cc:70:d2:b4:51:1a:
         f1:6e:75:7d:7b:33:48:c6:39:a6:27:f4:26:61:99:05:3d:76:
         c5:f9:14:0c:9b:55:a0:88:34:4b:c6:4e:c5:f7:99:d6:46:59:
         70:5d:1f:ec:7b:8a:5c:ca:7a:d0:72:40:31:b4:e6:45:db:2f:
         a1:0c:fa:cd:e0:93:7d:a8:dd:d2:fe:94:3a:c7:f3:4d:9a:36:
         35:94:90:3f:15:2b:fe:20:76:2c:aa:90:23:88:a0:5d:27:fa:
         7f:25:10:10:5c:1f:8c:b8:1e:ca:0c:d5:6b:72:53:a8:73:bd:
         a6:02:17:87:d9:13:09:e4:26:8a:c0:68:ed:c4:1f:f5:62:2f:
         f5:8b:ed:19:14:b9:a4:c3:87:b9:04:81:c8:a3:64:1c:10:93:
         bc:fd:38:9f:4f:3d:14:08:c0:37:19:f2:5f:cb:e3:5b:98:c4:
         c0:bf:00:4e:f1:f2:d5:de:47:6f:3a:ae:7d:11:26:d5:e0:d9:
         8b:69:5e:bf:ec:3c:72:bc:b4:0f:21:2a:4e:ee:f3:78:b6:0b:
         b5:69:92:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:41 2025 by rpki-client