Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/41bcc159-5d9c-3702-aee6-258369ec470c.roa
File:                     41bcc159-5d9c-3702-aee6-258369ec470c.roa (raw, json)
Hash identifier:          Kbn48kaiSu5rV5F5AbzB469jH3iJviyBeqInl5nNyrk=
Subject key identifier:   D5:D6:04:BD:64:4C:18:93:BE:4B:2E:9F:EC:C3:8C:52:B3:23:F6:C4
Certificate issuer:       /CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
Certificate serial:       010D0C9F432858492CAE818CA111419D64574D00
Authority key identifier: D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/41bcc159-5d9c-3702-aee6-258369ec470c.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        192.80.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:81:8c:a1:11:41:9d:64:57:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=a8f94214-2e9f-49fd-b40e-617149c6dcdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ec:40:1a:60:ee:9c:f5:de:7b:44:1e:4d:6c:
                    b0:bc:be:26:89:72:5e:0d:d1:f4:39:50:01:08:fd:
                    cf:0e:08:0e:6f:03:e9:ea:39:85:a6:2c:72:ee:37:
                    68:45:7a:67:ab:a3:fb:6d:51:82:5c:a4:58:b5:5d:
                    de:b9:75:d8:3c:b3:17:50:bd:0f:2b:da:6a:9e:19:
                    ea:a7:e7:65:d3:ba:5b:bc:38:53:97:97:35:f6:be:
                    a9:d8:51:dd:89:81:6b:4d:1c:15:21:fa:a0:bf:62:
                    79:54:a2:4f:c8:54:b6:f7:65:37:2c:69:41:7d:cd:
                    6e:29:fb:56:ba:be:aa:1f:a3:6d:6e:8c:e5:19:8e:
                    37:00:a0:7e:28:9f:f2:62:f0:46:3c:de:9d:4b:e2:
                    f6:85:49:c8:af:62:f4:49:77:fc:b1:c2:a1:f3:7a:
                    0c:88:98:1c:64:65:ba:c3:6e:1a:bf:db:bb:bd:ff:
                    07:f1:92:9a:52:ca:fd:17:e4:6a:76:fc:42:ca:78:
                    c6:fd:a0:1f:1e:8b:e7:0f:57:47:5e:8c:8c:fb:0a:
                    ca:e0:a2:f3:1d:87:88:68:14:33:3a:dd:77:07:3f:
                    9d:24:fa:35:68:54:78:25:db:dd:10:0e:e4:a4:76:
                    52:3c:21:b9:03:87:df:eb:f8:da:1c:3f:5b:7a:8c:
                    9b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D6:04:BD:64:4C:18:93:BE:4B:2E:9F:EC:C3:8C:52:B3:23:F6:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/41bcc159-5d9c-3702-aee6-258369ec470c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl

            X509v3 Authority Key Identifier:
                keyid:D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:cd:56:fa:05:e2:69:ea:df:1e:e6:cf:47:da:8c:02:77:a6:
         93:97:30:a8:37:32:4d:9b:34:13:f1:fb:23:d4:c5:1b:e1:eb:
         1f:25:8f:9b:7b:bc:ff:a1:25:79:11:d3:22:99:de:9e:7a:99:
         60:e3:3b:d8:42:ff:98:5e:bd:09:e8:90:50:2e:1a:51:58:55:
         37:f2:56:7d:2b:a9:5b:af:70:d6:5c:6e:26:63:8a:96:14:02:
         75:8c:04:73:aa:31:1e:0a:59:41:cd:79:78:b9:19:fd:e2:99:
         b9:87:d7:9c:6a:4c:20:21:da:2a:4f:83:58:a9:3a:40:2a:35:
         df:a8:55:16:b5:50:bc:40:a2:d4:ac:42:3d:4d:83:68:66:e9:
         67:30:4e:7b:45:eb:b9:f8:c2:73:5d:98:7f:8c:fd:f8:9f:ce:
         8f:46:17:71:06:0e:0a:bf:60:96:3a:7c:aa:bc:63:96:53:8e:
         ab:09:85:ef:ca:f4:ea:76:32:02:e3:b0:38:49:a6:b5:42:3d:
         2f:c2:f6:97:ec:f4:af:71:89:4e:99:27:9b:d0:3a:9c:de:cc:
         7d:7f:27:64:76:48:a5:9d:ee:7d:b1:50:b9:cc:1c:35:e4:04:
         cc:52:0f:0a:3f:5d:cf:46:9b:b2:8e:6a:b4:cc:6f:76:34:39:
         d1:82:ea:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:42:44 2025 by rpki-client