Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/ddb5479c-0e14-3de5-9638-c857eac92fc1.roa
File:                     ddb5479c-0e14-3de5-9638-c857eac92fc1.roa (raw, json)
Hash identifier:          MpYfRDtnWKcuAfHAIclX/rcuVH5V5o8wOABKh0vM8CE=
Subject key identifier:   3D:07:92:DC:7D:33:11:C8:66:CD:1D:D3:AB:A6:AF:9B:A9:B3:37:E8
Certificate issuer:       /CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
Certificate serial:       010D0C9F432858498E648CFF17E60F5EA95A0E80
Authority key identifier: 89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/ddb5479c-0e14-3de5-9638-c857eac92fc1.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     20148
IP address blocks:        205.143.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:8c:ff:17:e6:0f:5e:a9:5a:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=0164c0f5-5e32-44a7-8a94-ed7de69ed04b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bb:03:f1:2c:27:ab:26:0c:e6:28:c5:52:a7:
                    e6:90:ff:76:5e:be:6a:f5:ca:21:67:1b:ea:34:7a:
                    aa:e2:c6:65:67:36:79:6d:54:8c:99:50:f7:11:32:
                    dd:2c:d0:44:9a:d3:89:5d:3c:8f:37:8c:5c:e6:6f:
                    ee:7d:17:1f:5b:46:55:15:26:d9:8b:8e:82:64:40:
                    f1:ac:32:f4:37:da:01:4e:5d:8e:8d:84:6d:0b:ab:
                    b8:13:2c:26:6b:33:7b:84:a3:23:76:04:53:d4:75:
                    76:33:92:2b:c7:3f:47:eb:56:02:80:a8:88:5b:70:
                    26:40:85:f1:32:ae:71:03:f1:4a:d2:4d:9c:18:b5:
                    fc:e5:7c:98:4e:56:f3:d1:16:98:44:67:c3:51:36:
                    a6:63:e9:58:b3:10:c5:53:55:0f:67:d4:58:33:5e:
                    82:46:bd:35:12:07:82:a9:6c:f4:bc:0c:37:c5:9c:
                    e3:4b:ae:e7:63:d2:32:7d:8f:65:49:22:27:5e:5b:
                    ef:3c:75:c5:0c:06:d9:49:6e:85:b4:74:a4:d4:f2:
                    0b:5c:03:f1:af:41:67:09:83:20:5e:d9:aa:5b:9e:
                    b3:dc:84:29:9e:bc:ff:76:5d:8e:2c:d6:38:04:47:
                    a7:eb:47:d8:e2:86:06:ec:9b:36:68:74:a9:6b:e5:
                    50:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:07:92:DC:7D:33:11:C8:66:CD:1D:D3:AB:A6:AF:9B:A9:B3:37:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/ddb5479c-0e14-3de5-9638-c857eac92fc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl

            X509v3 Authority Key Identifier:
                keyid:89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.143.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:b1:40:09:e8:e4:f0:a8:0d:04:91:5e:d9:6a:fe:3d:8c:ed:
         41:83:a2:bc:93:73:29:92:dc:fe:bf:c0:49:e5:eb:a2:6c:1d:
         a8:f8:25:ab:c2:11:54:13:e8:5b:8a:0c:d2:75:5d:99:f9:d5:
         67:d6:3c:7a:89:2a:45:0b:71:1a:95:57:d2:96:2a:0b:03:78:
         43:ed:c3:ad:79:d9:24:14:6c:19:13:f8:16:e0:29:2d:1a:fa:
         91:f6:23:21:1d:46:4c:b2:18:3d:b0:3e:f7:d6:2d:52:df:90:
         23:cd:68:5f:ec:c5:d1:85:20:16:29:d3:e1:d8:35:c7:38:4c:
         0d:79:fd:e6:20:09:df:45:db:af:f4:17:60:bd:8c:ff:da:24:
         60:38:29:e5:57:da:5a:4c:85:4f:1a:26:bc:4e:3a:d5:41:2b:
         1c:96:67:8c:51:d4:dd:c7:23:04:58:61:2a:3d:25:17:75:16:
         d6:75:fc:7a:44:05:5e:36:8d:85:fa:50:0a:3a:21:c2:b8:f2:
         42:28:a4:4d:81:c4:6f:6e:c7:8b:4e:e8:dd:8d:ef:23:13:6b:
         22:4b:c9:0b:d7:cd:b2:32:f5:de:d9:aa:60:d3:48:46:66:e6:
         8c:a6:fd:f8:a0:a4:59:1b:13:02:9b:3a:bc:e3:fa:a4:e7:9a:
         5a:4a:38:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:20:24 2025 by rpki-client