Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1d121ab2-6aed-327d-a8c6-c22ef7a373d0.roa
File:                     1d121ab2-6aed-327d-a8c6-c22ef7a373d0.roa (raw, json)
Hash identifier:          162p9y/5c5EHW5Jg1Vphdi3jSfvN6+RAZxznGUABmxs=
Subject key identifier:   32:60:CB:13:50:E6:EE:02:DA:B7:01:04:5B:FB:00:67:16:D5:4A:E9
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285849912F29D2D8DD67343BAC3080
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1d121ab2-6aed-327d-a8c6-c22ef7a373d0.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     7861
IP address blocks:        204.191.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:29:d2:d8:dd:67:34:3b:ac:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=addeae5a-c9a7-4c2e-a2f9-c94bca885be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0a:cb:cd:b8:bd:22:44:72:2f:fa:bd:f6:b7:
                    28:c8:75:2b:ff:5e:4b:44:b3:42:1f:65:b1:7f:32:
                    0f:c1:3a:70:64:67:67:ce:e6:1e:89:4c:2d:6a:dd:
                    d4:9f:73:29:a3:3a:4b:7e:87:8b:20:4e:0d:95:34:
                    a2:aa:3b:f7:fe:34:6f:74:05:a7:af:01:d1:fe:9c:
                    d5:bf:c1:e5:10:27:fe:a9:2b:df:cf:5d:fc:3a:be:
                    aa:eb:52:23:96:9e:75:4e:be:31:17:18:bc:08:e2:
                    53:5e:63:df:ba:c3:67:3f:60:ae:a5:6b:b9:6b:35:
                    46:0b:fb:5e:9e:cb:78:b0:f6:3b:80:cb:9f:34:b5:
                    6d:5f:1c:82:e5:77:27:5f:be:77:1e:82:a1:14:8c:
                    00:01:62:bb:c5:06:80:4f:8d:91:69:4c:3f:cc:ba:
                    42:46:6a:f5:49:f6:f7:39:1e:51:9d:3d:76:6b:8d:
                    c2:85:a0:cc:ce:56:77:90:a5:ba:14:ae:c7:f8:20:
                    30:2d:94:82:04:70:fb:d4:ec:58:74:a5:41:42:0c:
                    6e:8d:ab:39:8b:cb:07:9a:fe:f7:5e:23:ca:14:2c:
                    97:1b:da:3a:72:de:13:35:10:88:0c:2d:a2:da:2a:
                    42:03:c8:b1:02:24:a1:5d:84:37:d8:9a:56:93:de:
                    bb:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:60:CB:13:50:E6:EE:02:DA:B7:01:04:5B:FB:00:67:16:D5:4A:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1d121ab2-6aed-327d-a8c6-c22ef7a373d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.191.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:f4:0c:33:9c:9b:e2:f2:1f:4c:33:46:ee:01:58:cd:9d:36:
         de:49:70:34:cf:58:67:af:10:91:10:c6:67:c2:10:48:a7:96:
         2b:69:6c:3a:af:a8:17:7c:47:96:ff:65:d8:d7:8c:12:30:a0:
         55:e9:63:7c:13:8b:08:46:d6:e6:52:05:7e:27:97:8a:ef:59:
         a1:6b:1a:ea:5c:fd:3f:dd:67:65:5b:45:22:26:3e:12:a9:c7:
         6f:77:66:f5:d0:57:25:25:cf:dc:da:8e:ec:80:b0:17:88:5d:
         33:9f:a4:83:43:ee:d4:3b:7c:f3:cc:12:36:fd:7a:27:7b:a6:
         16:ae:0f:82:f9:9e:31:25:35:71:4a:0b:ef:50:68:aa:ac:a5:
         f9:72:c5:56:a3:90:06:38:34:31:a8:e4:da:f5:35:66:bf:a5:
         65:9c:fa:a3:33:52:a9:8f:74:1b:c3:42:09:25:61:6f:b8:12:
         18:d5:56:5f:ff:2c:17:b8:ad:d5:fb:c4:9c:1d:11:b3:f2:1b:
         1c:a8:ef:ad:a4:f7:33:d8:24:b0:61:02:aa:83:ba:19:a4:26:
         73:ca:2c:5b:eb:ca:02:b3:b9:51:80:ed:57:1c:dc:b8:7b:db:
         d2:f7:a4:08:03:77:1e:57:09:83:55:5f:bd:fc:75:ea:0d:66:
         81:fb:bb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:56:24 2025 by rpki-client