Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d5a4e555-7797-3f28-8c7a-e903f5c5991b.roa
File:                     d5a4e555-7797-3f28-8c7a-e903f5c5991b.roa (raw, json)
Hash identifier:          Yt5DePDxY6Vvp/xzTFJ9F6Tjk318Kj9hGRYClr7WrF0=
Subject key identifier:   A6:56:63:78:DD:3F:A3:B3:2E:ED:4D:7D:59:E9:EC:91:7E:40:DE:34
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F43285849806F0EEBB17D483F2BDB9880
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d5a4e555-7797-3f28-8c7a-e903f5c5991b.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     19165
IP address blocks:        136.31.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:0e:eb:b1:7d:48:3f:2b:db:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=ada9bb60-a044-4481-9f9e-bdef03516050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a8:18:50:86:c9:f3:01:c0:f5:21:2d:84:4e:
                    69:86:01:f2:d2:69:32:0a:c4:50:23:80:8e:8b:97:
                    df:fc:53:a8:3f:fd:90:95:c4:9c:b2:52:18:5d:17:
                    34:cf:2a:24:b1:db:fb:cf:a2:5c:61:e4:4c:a9:e2:
                    47:30:0b:fb:a6:d0:fc:aa:a1:9b:9f:ca:9d:05:aa:
                    9f:30:b3:0e:a6:cb:4e:24:ee:8b:52:6d:eb:9a:5e:
                    8d:53:58:c0:11:8c:f9:0a:ac:a7:0c:fe:70:c7:80:
                    89:af:5d:c0:f7:f0:13:60:d6:53:a4:fa:2e:c8:db:
                    e7:3d:dd:51:15:5b:9e:40:3a:b8:29:35:3e:74:3e:
                    17:51:ed:7c:0c:87:7a:e1:cb:12:5d:95:82:8a:49:
                    12:b4:2b:73:52:d1:54:2a:84:3b:13:d6:e8:ff:42:
                    e0:5a:6b:37:74:34:43:ca:94:4e:73:60:85:85:03:
                    60:a4:1b:35:00:25:69:42:bd:ed:d8:c0:37:3a:1b:
                    74:77:c1:7b:80:e4:ea:42:4d:b9:12:2a:11:f1:a8:
                    98:7b:a5:a9:b8:41:ac:ed:fe:59:93:eb:c4:e9:86:
                    0a:6f:b4:ee:3c:d0:d5:5f:2d:b0:9d:14:28:65:a8:
                    70:3c:84:14:1e:7d:5c:34:77:ae:42:c4:d1:d0:32:
                    8f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:56:63:78:DD:3F:A3:B3:2E:ED:4D:7D:59:E9:EC:91:7E:40:DE:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d5a4e555-7797-3f28-8c7a-e903f5c5991b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.31.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:84:66:79:54:ab:88:90:5c:45:fc:ed:d6:ae:a5:32:90:61:
         a2:a9:fe:ce:3e:8c:5f:7a:b3:d1:5c:bb:9f:7c:d5:5e:5f:10:
         d1:0f:3f:64:78:43:19:df:35:23:f6:1a:11:2a:84:ec:25:2d:
         18:36:29:fb:83:55:63:41:fd:b2:57:9c:cd:f4:99:4f:dd:82:
         cf:1f:ba:2e:92:26:37:1f:a7:e6:38:6c:15:28:a2:47:28:70:
         b2:49:eb:1c:24:91:58:4c:04:fa:d4:3c:2d:1a:72:de:9c:6f:
         dc:3f:3e:86:82:fc:b3:b5:8f:bd:27:2d:1f:01:46:8d:5f:ba:
         29:c8:4d:a8:23:e5:a3:a8:5b:0a:6e:f8:37:4b:3d:c1:c0:83:
         24:20:17:73:e3:c1:e8:70:19:6c:e2:96:c8:6c:9c:96:2e:64:
         fb:50:62:c2:0f:1f:92:0e:73:2e:e9:f8:a0:44:74:4b:2d:d7:
         c6:f7:bd:9e:ab:36:6a:d4:4c:56:e1:6e:1f:35:ec:01:32:7b:
         c3:b0:94:29:ed:4e:72:60:f8:03:13:5f:19:5f:60:b2:89:45:
         2d:7d:03:23:6a:ce:91:ec:99:06:80:92:82:20:1f:3b:29:1e:
         78:6f:86:22:71:2c:98:46:bb:de:11:65:5a:95:5b:74:e7:cb:
         70:9a:86:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:13:44 2025 by rpki-client