Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ba86b3dc-d6e7-30e5-94b7-2f76cf01850b.roa
File:                     ba86b3dc-d6e7-30e5-94b7-2f76cf01850b.roa (raw, json)
Hash identifier:          WjcD5y4eWc/u/3thxpWVjL8WJaMUrZEJuKBAjuY+P7U=
Subject key identifier:   CE:CC:A1:8A:13:BF:4C:90:4B:3E:D2:1A:B7:43:E9:65:60:63:80:9C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849955F26E8FA2A989E82A90500
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ba86b3dc-d6e7-30e5-94b7-2f76cf01850b.roa
Signing time:             Sun 20 Apr 2025 01:00:47 +0000
ROA not before:           Sun 20 Apr 2025 01:00:47 +0000
ROA not after:            Sat 19 Jul 2025 01:00:47 +0000
asID:                     400759
IP address blocks:        192.177.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:95:5f:26:e8:fa:2a:98:9e:82:a9:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 20 01:00:47 2025 GMT
            Not After : Jul 19 01:00:47 2025 GMT
        Subject: CN=e7de93f1-2101-4702-886e-5c38e2782c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:31:03:b0:9b:5c:aa:63:06:f3:53:4e:75:38:
                    92:b6:73:e2:03:1f:5c:98:f5:10:d4:12:f7:b5:c1:
                    a4:9a:a5:76:19:0c:dc:f7:d4:72:b1:ce:54:19:7f:
                    c2:ac:bc:1d:6a:4e:71:3b:ff:8c:f3:18:d2:40:40:
                    82:cd:d9:71:ce:07:62:8c:5d:f2:13:fb:f5:b9:9c:
                    ae:3a:9e:b4:f6:f1:95:af:54:b3:1e:f7:ac:d8:90:
                    90:fd:d4:f4:17:1d:8b:d1:b8:0c:1b:65:4c:69:92:
                    88:33:58:59:41:bf:16:e6:d6:a0:93:45:e4:6a:2f:
                    3c:30:4d:a5:58:08:4a:ce:d7:b7:52:8a:3e:e9:e7:
                    75:fc:3e:1c:69:87:26:db:38:9b:4e:63:60:f7:51:
                    68:f6:85:e2:97:05:c6:95:a4:e2:33:de:a2:e0:ab:
                    2e:04:7b:e2:da:8e:5f:de:e9:b2:df:ef:93:fd:b8:
                    f5:0a:26:53:38:f6:bd:01:88:29:cd:5f:3a:f4:7d:
                    a5:35:44:21:fd:37:a2:c4:21:a4:f2:39:1d:d1:5b:
                    47:e8:17:86:5d:92:58:1f:b3:8e:21:fe:df:d3:1f:
                    fb:b0:af:9c:25:d3:95:53:f3:af:fa:ea:b9:0f:dc:
                    9b:e7:9a:e8:86:c1:e2:cc:12:70:6f:32:56:44:02:
                    3e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:CC:A1:8A:13:BF:4C:90:4B:3E:D2:1A:B7:43:E9:65:60:63:80:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ba86b3dc-d6e7-30e5-94b7-2f76cf01850b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.177.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:3e:a5:4b:cd:f6:ee:89:6a:95:76:ec:fd:79:3f:a7:06:fd:
         55:e9:e8:fe:58:e2:f8:a6:a2:59:a7:ae:88:f6:91:70:92:d3:
         48:40:61:f4:cf:35:91:df:6c:38:57:73:8d:13:fe:48:43:95:
         aa:62:26:f0:3c:c3:2b:c3:75:e9:fa:71:a8:ad:3b:e5:d0:e6:
         95:e2:8d:40:c2:18:3a:5e:e4:75:ca:b5:f0:a0:1f:ef:58:4f:
         fb:9f:00:12:2c:68:f6:23:b7:a3:3e:0b:ee:0f:8b:a6:c4:d4:
         cf:a7:a6:ba:0d:d9:ff:05:54:50:ff:ff:ac:30:3d:47:08:5b:
         e7:ee:95:7b:46:03:37:5a:62:63:eb:51:3a:56:d7:f4:63:32:
         6f:67:cb:9f:cc:13:72:0a:cb:ef:8f:11:d2:83:bd:fc:5a:d1:
         84:95:40:5b:19:8b:04:e7:b9:cf:9c:73:c1:97:71:e4:a1:ad:
         9f:0e:a3:9d:ef:8e:d2:70:09:ca:d7:34:b6:b8:25:78:37:bc:
         35:05:2f:4d:03:c5:24:0d:58:3f:df:cd:60:cc:22:db:0c:b2:
         fe:ce:10:fe:66:15:cf:5a:6c:d3:94:cc:b0:b1:bc:42:a1:0a:
         19:35:b0:bc:c2:94:38:9b:7a:b6:ea:f1:fe:e7:85:6f:a0:4c:
         6e:3a:49:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:01:05 2025 by rpki-client