Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/589bbfa9-ed5d-3100-a7f1-7d37803dd68f.roa
File:                     589bbfa9-ed5d-3100-a7f1-7d37803dd68f.roa (raw, json)
Hash identifier:          OZd4XB8xFKVUMMsUhukAjvdAU40/PBheWi2c2Egl+N8=
Subject key identifier:   27:D6:73:30:CF:DE:9A:6C:8E:18:D6:FA:EC:3C:B3:80:11:9E:62:88
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F43285849A4BB72D1807AA08DA6C58980
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/589bbfa9-ed5d-3100-a7f1-7d37803dd68f.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        192.104.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:72:d1:80:7a:a0:8d:a6:c5:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=b6287966-cdbc-40ce-bf79-7935c402f202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7d:4b:b5:54:d0:a0:74:7c:54:7e:cb:7c:ed:
                    b7:65:40:2c:f3:8e:df:86:1c:08:72:3f:aa:b3:90:
                    27:f7:2b:d4:d3:f1:d5:bc:00:41:86:a2:66:0a:79:
                    39:99:ac:82:af:c3:84:8c:42:99:7d:bd:dd:2b:78:
                    1c:20:72:39:8c:ff:d8:ef:64:88:9b:a3:92:8a:13:
                    a5:c9:cb:70:d6:76:d8:70:52:2d:48:2b:4c:59:6c:
                    9c:2c:07:d5:1c:e2:e2:47:7f:7d:83:b1:23:05:e1:
                    22:7f:eb:f9:b9:68:c5:b0:7a:e9:f0:04:c9:d1:48:
                    21:95:4a:65:db:13:7b:9a:38:71:7c:38:63:a4:65:
                    78:3f:5d:40:78:46:16:8d:74:4c:c8:3c:ee:ab:f7:
                    18:01:7f:0e:69:02:22:41:1c:6b:3c:95:86:36:2d:
                    bc:ee:aa:a0:31:87:19:05:6f:e2:1d:c8:e4:19:3f:
                    c5:66:ed:0e:24:86:ab:cf:78:dc:14:3c:13:ba:de:
                    a2:c3:ab:e9:c4:92:9b:14:95:21:07:3a:08:20:56:
                    21:36:e7:f2:c1:04:07:dc:98:6e:d8:30:5b:40:00:
                    be:40:c8:5d:4c:50:7f:cd:9a:66:85:aa:f2:43:06:
                    56:e9:66:a6:ee:2b:02:dc:d1:51:21:51:e3:4f:56:
                    52:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D6:73:30:CF:DE:9A:6C:8E:18:D6:FA:EC:3C:B3:80:11:9E:62:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/589bbfa9-ed5d-3100-a7f1-7d37803dd68f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.104.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:d6:45:15:de:18:e7:c9:a3:03:d8:d0:61:39:2f:d2:57:ec:
         a7:d9:bc:5d:08:3b:0d:dd:30:2e:aa:01:fd:15:9c:36:9e:cc:
         59:9a:6b:34:f2:57:b6:2e:e6:75:c3:5d:98:fd:2d:37:f7:38:
         33:78:40:f1:28:e7:87:10:c2:0a:2b:e2:81:e1:d9:40:6f:f7:
         b5:76:46:d9:76:fc:f4:49:e2:53:ff:0c:9c:c5:9c:7e:0f:18:
         1a:e3:a4:17:52:e9:21:77:d3:44:6b:86:18:7e:be:d1:57:25:
         fd:41:19:3c:4b:34:87:ab:13:71:c0:c9:db:b3:d4:e2:c9:f3:
         6a:28:39:39:5c:43:dc:a2:e2:bd:88:9d:c2:d5:89:67:f8:a6:
         89:d0:84:2a:b7:6e:6b:92:72:1a:5b:5a:19:83:ba:93:c4:b2:
         41:f3:46:ac:ff:f3:81:70:77:55:83:8b:5f:21:10:a2:c7:7f:
         71:64:0a:5e:08:16:b0:85:b2:fb:a8:2f:aa:e1:78:a0:61:c8:
         2b:ef:bc:2c:17:e9:e0:09:3b:e4:09:d0:f6:97:5d:51:50:d0:
         98:b7:8a:af:97:63:b6:2e:72:20:c3:d4:fd:d1:e1:04:8b:8a:
         d2:38:7b:c0:25:ee:88:2e:4b:14:fc:95:31:90:e8:a1:a3:90:
         88:c5:5d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:07:35 2025 by rpki-client