Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/05ac7cab-a37f-4de3-9a79-d3d873bc8c0a/e9df597e-2fe3-3783-adc7-ca2d3d72ed0e.roa
File:                     e9df597e-2fe3-3783-adc7-ca2d3d72ed0e.roa (raw, json)
Hash identifier:          P3BpUbenj8bajF25WGMHBmEqKeWZ0i78GlIsM1d5ilU=
Subject key identifier:   8B:B5:31:6F:31:81:7E:98:1A:F7:EF:43:D7:9F:54:7A:BE:A7:2D:18
Certificate issuer:       /CN=05ac7cab-a37f-4de3-9a79-d3d873bc8c0a
Certificate serial:       010D0C9F432858499829C95A60AE2EC46DFA5100
Authority key identifier: E9:6F:42:55:2B:F1:2C:21:F6:EE:82:F8:DC:7C:5E:D1:B1:51:62:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/05ac7cab-a37f-4de3-9a79-d3d873bc8c0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/05ac7cab-a37f-4de3-9a79-d3d873bc8c0a/e9df597e-2fe3-3783-adc7-ca2d3d72ed0e.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     40478
IP address blocks:        192.31.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/05ac7cab-a37f-4de3-9a79-d3d873bc8c0a/05ac7cab-a37f-4de3-9a79-d3d873bc8c0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/05ac7cab-a37f-4de3-9a79-d3d873bc8c0a/05ac7cab-a37f-4de3-9a79-d3d873bc8c0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/05ac7cab-a37f-4de3-9a79-d3d873bc8c0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:c9:5a:60:ae:2e:c4:6d:fa:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ac7cab-a37f-4de3-9a79-d3d873bc8c0a
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=0e998b91-b1ea-43e7-970f-700e14621a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fe:00:d4:41:09:44:48:76:81:11:27:43:97:
                    66:71:0f:d8:22:26:23:53:89:16:0a:50:eb:1a:f7:
                    62:25:ab:98:e0:95:45:a8:1e:52:d6:b8:98:e7:05:
                    0c:9e:49:26:7b:2a:dd:8c:ef:68:a4:8e:75:d9:3f:
                    f0:c5:a0:29:55:b3:bb:5f:3f:e0:56:c4:38:ab:3b:
                    c2:6f:63:89:f4:c7:01:c2:3c:a7:13:5a:72:83:ed:
                    b4:e1:ed:86:ac:76:a1:c7:7f:17:23:6e:39:c2:cf:
                    8f:71:15:a3:51:ce:35:1a:db:fb:8a:8f:38:2d:cc:
                    be:a2:7f:c6:e4:35:bc:ea:83:5f:bf:f8:bb:3e:c2:
                    2a:ef:e3:f6:68:1b:56:39:c4:e9:f4:71:5b:0e:1e:
                    6c:44:08:9f:06:5f:27:d4:5a:62:3e:7d:88:85:93:
                    a7:31:34:db:f4:c5:70:0b:ec:24:61:be:26:e1:c4:
                    20:c0:6a:13:e8:2e:40:09:10:32:5a:97:00:77:d1:
                    9f:97:28:c2:25:2d:83:56:5e:cc:da:d1:f5:5f:c1:
                    30:18:4a:fb:07:21:8a:c1:b8:c3:98:62:58:23:0e:
                    24:44:8f:76:b1:f0:88:02:99:5d:d4:a4:b7:00:cc:
                    59:7a:95:28:3b:d5:60:89:e9:94:78:bb:4f:52:c2:
                    95:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B5:31:6F:31:81:7E:98:1A:F7:EF:43:D7:9F:54:7A:BE:A7:2D:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/05ac7cab-a37f-4de3-9a79-d3d873bc8c0a/e9df597e-2fe3-3783-adc7-ca2d3d72ed0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/05ac7cab-a37f-4de3-9a79-d3d873bc8c0a/05ac7cab-a37f-4de3-9a79-d3d873bc8c0a.crl

            X509v3 Authority Key Identifier:
                keyid:E9:6F:42:55:2B:F1:2C:21:F6:EE:82:F8:DC:7C:5E:D1:B1:51:62:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/05ac7cab-a37f-4de3-9a79-d3d873bc8c0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:1a:b3:15:fc:1d:f3:69:a4:7d:3a:74:05:f5:7a:71:fd:f9:
         dd:f6:89:e0:7c:d9:09:81:5e:ec:03:d9:e1:b0:35:03:f7:53:
         23:f8:38:b1:19:e7:e2:0d:e6:d5:4d:12:fe:fb:97:bf:ec:87:
         da:4c:97:d5:3b:e7:c1:6a:c2:7b:61:f6:69:fc:93:0a:66:8a:
         a2:26:11:b0:2a:ab:53:98:f6:60:d0:42:71:1b:ef:e8:60:02:
         76:5f:e6:9c:6a:13:01:a1:87:a6:22:96:3d:61:75:0c:6a:b6:
         6b:b8:79:21:01:07:5b:46:a5:06:07:67:d2:81:49:1b:60:36:
         40:0f:f7:82:1a:a5:7d:e9:50:b7:dd:c0:1f:28:c7:2c:8b:bf:
         5d:d2:76:8e:15:68:ad:72:d2:4f:91:54:4b:62:f3:d7:e7:d4:
         b5:6e:ac:89:14:6e:d2:65:49:fb:3d:a3:c7:0e:59:13:af:1f:
         a1:94:43:94:2f:18:c1:f8:64:ac:48:d8:b4:b7:8d:68:57:81:
         00:98:03:63:0e:ec:97:7e:ea:d7:4a:f8:78:60:8c:de:4d:26:
         41:79:26:c0:cd:f6:4e:99:31:45:a7:43:95:8b:46:06:32:55:
         84:ed:38:1c:57:16:f8:67:cb:47:5f:c2:f4:03:04:83:c7:f6:
         76:3e:02:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:59:49 2025 by rpki-client