Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/442c63df-c0a3-3159-955b-66d48fc740bf.roa
File:                     442c63df-c0a3-3159-955b-66d48fc740bf.roa (raw, json)
Hash identifier:          ZmI9b89qjsU4SS1EDgAZWOlzUU/rz7Odn54NaQ0V6EU=
Subject key identifier:   98:A0:8C:A4:CD:EA:9C:5D:06:5A:E9:A2:DA:11:C5:CF:DC:1B:E3:CA
Certificate issuer:       /CN=cbf6809f-0b45-47d5-b7cc-7f892ddda0dc
Certificate serial:       010D0C9F43285849CE9A4A562ADB4FBF615E0C00
Authority key identifier: 9B:06:A9:E2:32:92:2E:F1:AD:4C:84:04:3E:28:D8:DF:11:75:0D:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/442c63df-c0a3-3159-955b-66d48fc740bf.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        192.58.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:4a:56:2a:db:4f:bf:61:5e:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbf6809f-0b45-47d5-b7cc-7f892ddda0dc
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=97e34ebf-5889-46de-b27b-7399fdacccb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:52:7f:18:a8:c8:89:2f:65:fe:e9:72:74:2d:
                    60:cc:6b:70:30:ea:81:f2:56:2d:ab:ce:5a:42:a2:
                    90:d5:6e:d7:5d:79:49:f9:25:d3:f9:c0:3d:72:b5:
                    99:50:a2:f4:81:ed:d7:fd:ea:08:d8:c8:f5:0d:fd:
                    6f:4f:1b:f2:5b:48:08:53:49:01:1b:1f:d0:e0:31:
                    30:92:a4:2b:c1:a9:67:fa:8b:64:6b:54:98:1e:e9:
                    89:4c:74:5a:60:1e:d0:e5:47:a1:59:48:e9:cc:9c:
                    bc:9c:e8:36:07:33:93:79:4d:32:7c:cf:37:e3:99:
                    aa:06:53:f4:7a:ef:2c:ce:5b:95:1b:90:5d:6e:89:
                    5b:4a:ab:2f:0a:a8:29:56:da:f1:d1:67:ef:3d:a3:
                    67:48:16:16:dd:fb:b2:93:ac:f2:a6:4f:8e:9c:2e:
                    79:86:c4:d5:80:38:62:a7:a5:9d:d9:8c:4d:ea:ff:
                    18:bd:23:fe:f8:19:58:71:e0:f7:e7:6f:46:56:49:
                    c2:2c:63:d6:f2:82:5a:b6:c4:75:a0:fd:ef:66:d8:
                    10:5a:0c:e0:73:96:5b:72:13:81:21:b5:96:4e:45:
                    a8:46:ce:db:1d:98:0d:a3:87:83:1c:ae:2d:67:80:
                    da:15:0e:f7:63:6b:44:58:d3:d6:d7:5f:91:02:0c:
                    1a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A0:8C:A4:CD:EA:9C:5D:06:5A:E9:A2:DA:11:C5:CF:DC:1B:E3:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/442c63df-c0a3-3159-955b-66d48fc740bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.crl

            X509v3 Authority Key Identifier:
                keyid:9B:06:A9:E2:32:92:2E:F1:AD:4C:84:04:3E:28:D8:DF:11:75:0D:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:b5:73:5c:2e:12:2d:ab:81:17:f6:b9:8a:5b:c1:c9:13:7e:
         89:8a:ce:e6:2f:e5:f6:55:78:f2:f4:78:de:6f:ac:f3:4b:ea:
         17:e7:22:bc:d6:14:c5:28:00:7b:97:16:68:ee:43:28:d5:0d:
         3b:b2:5a:be:eb:d0:80:ce:d2:8d:fe:7e:9d:2f:0d:aa:c3:f4:
         1c:fe:c0:bf:2d:51:61:a9:2f:30:76:80:94:d1:35:33:17:0c:
         4c:c3:bf:a1:69:0b:f4:ac:85:f7:2c:7e:5f:d5:30:4a:2c:cd:
         1a:13:b7:1b:c6:76:f8:c9:a9:4a:26:22:e5:40:0b:7d:81:92:
         f0:fd:7c:15:21:a8:a1:db:ca:84:65:db:27:b1:e3:37:48:49:
         af:74:fa:16:c3:18:76:42:cb:36:53:ff:00:bb:cc:a5:a2:d1:
         f8:d1:eb:00:34:cf:ee:06:77:2a:cc:41:45:1e:f1:8f:3c:ae:
         af:00:43:f5:53:55:3c:e9:81:97:67:3e:36:21:d3:b0:4c:62:
         18:5d:d3:21:5e:58:fc:5f:41:3f:74:47:52:3c:24:44:4c:45:
         e3:f5:10:72:04:9a:b1:a6:c2:93:1b:4b:bf:f0:31:30:f7:79:
         9a:f3:b1:e2:1a:51:f4:52:b7:b9:0f:b3:ab:ec:aa:c9:89:d2:
         1d:91:62:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:12:55 2025 by rpki-client