Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/2be7de9d-b16c-3df3-b8c1-bd9bccddd204.roa
File:                     2be7de9d-b16c-3df3-b8c1-bd9bccddd204.roa (raw, json)
Hash identifier:          0cSEJVF5+yO1rn3hV5aOIOgLjcSa4oRWePMQeAE0GiY=
Subject key identifier:   53:89:C4:78:5D:3F:E7:71:46:8D:20:FF:C8:4F:3F:C0:9B:76:D7:EC
Certificate issuer:       /CN=ebee18c5-4e70-47ae-a5d0-702b8fb2916b
Certificate serial:       010D0C9F4328584A1B600663D3F78DD030ECF480
Authority key identifier: 08:BA:10:3B:00:83:2A:3C:49:0B:6B:D6:F6:7F:30:16:C0:CC:C2:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/2be7de9d-b16c-3df3-b8c1-bd9bccddd204.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     2698
IP address blocks:        192.245.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:60:06:63:d3:f7:8d:d0:30:ec:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebee18c5-4e70-47ae-a5d0-702b8fb2916b
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=d21cea56-914c-4f3e-966d-12fdca4e732f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d1:6e:33:72:56:b6:07:ce:1b:94:5a:22:d9:
                    79:d2:25:33:13:be:4e:73:c9:4f:5e:b3:af:a3:d5:
                    7e:26:39:d3:cc:26:ad:0a:e0:55:11:8f:a1:aa:da:
                    6e:8a:2f:5c:4e:c7:8d:87:d3:06:84:ca:90:54:e8:
                    b0:7b:f4:c5:ef:9e:44:f4:f1:5c:08:bd:03:71:6a:
                    cd:d2:c0:3e:14:e3:89:db:30:c0:62:dc:d8:35:41:
                    0b:e4:3b:93:d0:a8:53:90:3e:f8:d3:f5:5b:f6:3e:
                    2d:6e:a8:9c:f4:74:af:bb:e4:96:42:04:d6:b3:1f:
                    20:aa:43:13:e5:30:cd:36:1d:1a:51:72:c6:5f:e4:
                    86:27:98:52:b8:b7:7c:9e:c3:a8:13:a3:3b:e4:c6:
                    8c:30:f4:78:66:cc:da:9d:be:c2:3b:d9:5f:02:d1:
                    7b:e2:59:05:eb:d0:b9:df:ed:c1:b2:c5:9e:3e:3b:
                    09:a8:5d:26:79:d4:57:df:e3:c4:0c:51:e9:3b:85:
                    b7:70:0a:f8:39:e6:8c:6b:ab:1f:fc:4c:9f:2c:8c:
                    c5:af:02:30:90:68:75:db:fc:50:d3:6d:a0:45:85:
                    9d:3b:23:ca:71:1d:c7:41:b5:eb:02:31:67:31:5c:
                    c0:b9:f8:b9:16:c7:a9:9f:d1:98:5a:94:86:f6:a0:
                    d3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:89:C4:78:5D:3F:E7:71:46:8D:20:FF:C8:4F:3F:C0:9B:76:D7:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/2be7de9d-b16c-3df3-b8c1-bd9bccddd204.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.crl

            X509v3 Authority Key Identifier:
                keyid:08:BA:10:3B:00:83:2A:3C:49:0B:6B:D6:F6:7F:30:16:C0:CC:C2:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.245.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:fc:65:12:66:b0:75:b0:d0:0c:0b:08:a8:5d:b3:ea:bf:0a:
         49:b0:b5:80:07:75:ed:3f:70:35:0a:7c:6c:d8:09:c3:85:cf:
         2d:40:5b:37:b5:85:1d:fb:0c:80:1c:1d:12:28:a1:89:e2:e5:
         5b:f5:df:6d:e6:08:75:12:df:e4:2c:b5:be:ac:b0:ca:d4:a8:
         04:d8:43:0c:8f:e8:3a:32:28:3c:e6:4b:8e:c0:ff:62:20:b3:
         69:3f:dc:6c:53:e3:6b:ac:04:98:6b:a3:e3:80:6f:06:31:ab:
         4b:8c:4b:57:85:66:2b:48:4b:cf:ba:80:f9:f9:49:43:58:b9:
         64:e0:dd:dc:9c:df:f8:5d:58:a5:ad:1d:50:49:7c:0f:9c:6f:
         1c:ed:3c:64:e3:92:4f:02:c0:6e:d6:7b:1c:bc:00:44:4a:f6:
         12:63:2e:a8:6d:f1:bf:de:6d:e0:cb:63:a2:5e:85:b0:7b:c9:
         13:ff:28:74:b4:77:78:fb:b4:f9:7f:6c:4c:23:14:b8:b6:51:
         95:9c:82:5c:e5:99:ed:14:72:ed:ef:96:99:7e:bb:77:0d:ab:
         c9:49:2d:69:72:42:1d:f7:ee:50:2c:66:4a:d9:63:40:c7:a0:
         0b:d1:a1:0f:32:1c:50:47:42:f1:69:be:21:9d:1a:bb:d3:a7:
         35:de:82:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:22:39 2025 by rpki-client