Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3be427a8-ebdc-33dd-937c-12b027b07d3a.roa
File:                     3be427a8-ebdc-33dd-937c-12b027b07d3a.roa (raw, json)
Hash identifier:          CfD4EmKY3aTfhwiTYKUFhtWhPBHP8co/u93bAliIPPs=
Subject key identifier:   96:DF:09:9B:63:1C:FC:9C:E3:3C:83:D7:4E:ED:4E:D9:09:68:8F:B6
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285849AA4F6BE8A1A248906ABF6200
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3be427a8-ebdc-33dd-937c-12b027b07d3a.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     55293
IP address blocks:        192.190.94.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:6b:e8:a1:a2:48:90:6a:bf:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=260dffb5-81e2-4d08-8594-76ae8180944b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c5:53:23:2e:bc:4a:bc:e1:ba:58:c3:6a:f7:
                    38:c4:f3:96:89:5b:c1:a0:77:fe:72:11:ca:1b:67:
                    c9:2b:16:20:1f:af:7e:5a:ca:ec:97:c9:24:f6:86:
                    9c:6c:52:17:4f:f7:b7:bc:94:08:3a:92:24:14:9e:
                    e8:4d:b5:e8:94:40:f5:bc:15:c3:17:8e:a9:b7:c8:
                    39:cd:f4:f5:0d:7e:a1:82:7e:b5:16:c4:c3:b3:2b:
                    90:1f:6f:71:96:82:b3:df:03:7b:9d:6c:ec:9a:89:
                    1d:e6:e4:50:6b:0a:41:35:c9:a3:56:d9:53:9e:48:
                    db:91:c7:e3:55:63:9c:ec:d3:60:45:ea:21:b5:b7:
                    83:fe:20:d6:43:f2:ee:ab:6f:9f:23:f1:da:35:c4:
                    14:19:e6:d0:ad:39:6c:86:32:a7:ab:06:7c:7f:bd:
                    58:cf:19:de:f7:9d:6e:bd:69:ef:59:d0:0d:b9:b7:
                    68:b6:76:a4:24:c2:03:97:23:b1:8a:11:7a:cd:34:
                    09:66:33:62:2b:9c:b3:da:44:90:d0:ab:55:08:c9:
                    63:77:5a:1d:7f:c5:fd:cc:05:57:de:ea:d9:59:ac:
                    ef:c1:02:86:56:f6:7c:ec:2a:42:29:f5:5e:2e:99:
                    a1:4d:1a:e0:0c:7c:59:a2:12:ef:97:63:4a:cd:a6:
                    7a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:DF:09:9B:63:1C:FC:9C:E3:3C:83:D7:4E:ED:4E:D9:09:68:8F:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3be427a8-ebdc-33dd-937c-12b027b07d3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:df:34:47:05:72:0a:67:c0:d9:bb:18:57:40:5c:c8:95:83:
         59:9b:6a:49:18:4e:e2:6a:d9:e0:d9:0c:1f:b1:82:9f:e3:36:
         56:55:79:40:94:09:f4:0e:fd:b3:67:99:d3:d3:92:e2:06:0d:
         0b:ed:77:ac:43:41:16:44:e1:77:a7:04:9d:5d:6a:19:39:d6:
         0c:d4:f3:8a:44:f0:7f:74:89:62:67:21:f2:23:d4:b4:22:29:
         f7:91:1a:98:6b:28:f2:d8:16:55:d0:b2:6f:6b:80:ca:17:99:
         63:89:a4:01:28:8a:ee:f0:ce:1d:4b:74:5a:ef:34:91:dd:b5:
         4b:97:e5:6f:d7:bb:c3:7b:71:5e:c2:2f:51:8d:e3:07:3f:f2:
         51:ad:66:ca:00:d9:7b:55:22:da:7f:48:61:95:f7:c9:01:87:
         a8:a0:f4:41:ae:a6:36:b1:42:4b:4a:4d:ef:e9:d1:20:c1:28:
         bd:48:48:ac:11:65:b0:04:d2:d5:e2:02:38:02:cb:6f:8c:2f:
         db:11:78:8d:66:5c:45:69:e5:44:fe:5d:2e:07:ba:30:ee:69:
         db:c7:a2:0c:74:2f:98:31:18:07:a8:a2:e4:8a:a9:8a:20:16:
         48:c6:f4:a0:8c:1d:e6:22:c5:da:0e:43:cb:f3:35:8c:e9:bb:
         e6:7c:33:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:54:54 2025 by rpki-client