Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/192adac7-3c4c-3b04-99c8-b432e9874928.roa
File:                     192adac7-3c4c-3b04-99c8-b432e9874928.roa (raw, json)
Hash identifier:          WI7AuP8Epr/06Q7KKhC+Jy2Bvm8697q0MvfAmnaogPA=
Subject key identifier:   17:4D:23:BE:19:E2:DB:DF:3D:6D:A8:8F:71:D8:E8:21:2F:B9:57:4B
Certificate issuer:       /CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b
Certificate serial:       010D0C9F432858498769B6638C5281C32BBC9500
Authority key identifier: 90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/192adac7-3c4c-3b04-99c8-b432e9874928.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        216.205.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:b6:63:8c:52:81:c3:2b:bc:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=de13e400-41a9-423a-95cd-ca6ba2002672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7b:d2:44:5a:da:44:c4:c3:b5:2b:57:d3:0d:
                    d2:dc:40:7f:48:65:5d:bd:b7:ea:35:e1:33:3f:7a:
                    b9:63:6e:5e:8d:94:64:1d:18:dc:5a:d6:39:2a:8a:
                    21:7e:7b:64:b8:a3:3a:5f:8d:73:fd:5b:3e:6c:c7:
                    1b:5e:40:7e:35:c0:33:04:ac:5a:5b:71:b4:85:89:
                    08:c2:93:64:f0:15:fd:da:e9:38:f2:83:41:78:90:
                    ac:af:bb:3f:37:49:86:1c:1b:8d:b0:7a:aa:95:20:
                    26:61:78:0d:cf:5d:71:67:8a:75:b3:63:40:26:fd:
                    5b:e3:65:7c:5e:07:4c:b9:f7:64:1e:d1:03:33:ec:
                    25:49:15:03:18:79:ca:f2:b2:18:5f:6f:ff:fa:35:
                    0e:f1:cd:0d:86:8b:25:d0:6d:33:63:91:b8:a0:79:
                    51:f6:0c:3c:71:11:f5:92:e5:d9:fa:9f:6f:d7:30:
                    24:c8:ae:30:91:17:9d:25:3c:2d:c2:a7:61:23:e1:
                    02:d4:ea:23:51:e5:0d:8c:5b:9a:a4:d7:2b:9c:23:
                    ab:99:2c:83:00:cb:15:1f:98:a7:01:6d:01:cb:6b:
                    53:30:72:9f:8c:58:71:9e:82:0f:27:53:d6:34:25:
                    7f:08:a6:2e:b1:d4:4a:5c:51:0c:8b:74:34:8c:90:
                    f1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:4D:23:BE:19:E2:DB:DF:3D:6D:A8:8F:71:D8:E8:21:2F:B9:57:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/192adac7-3c4c-3b04-99c8-b432e9874928.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl

            X509v3 Authority Key Identifier:
                keyid:90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.205.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:a8:a3:29:87:ff:74:b5:e0:10:a0:b0:0f:86:b8:a1:a3:fa:
         f1:e8:ab:5f:57:3c:77:7d:c4:4b:cc:b9:0f:7b:67:42:2a:39:
         5a:9e:63:5b:6d:6c:2d:41:f8:be:c5:5d:a7:40:3a:99:f8:0b:
         23:bc:8d:0f:c3:b5:c8:7f:f5:03:ce:6b:d5:1b:88:31:e2:6f:
         89:f4:e1:b5:eb:84:5b:10:d8:34:77:c6:f9:6d:95:2c:c5:98:
         c3:e4:7a:05:1a:df:0a:62:e6:0e:4c:b7:db:e4:7e:62:37:6f:
         f4:f3:93:15:28:8c:4c:6c:2e:12:cf:54:e8:3c:21:df:75:77:
         6a:54:58:4c:22:3f:ed:97:0c:d6:29:ca:bd:04:af:c7:a5:6d:
         fa:72:27:eb:0f:f1:b0:3b:56:65:f1:60:17:fc:6b:5f:c0:22:
         f5:0b:84:b2:03:5b:a1:50:c1:44:b6:7b:c0:14:d5:74:1e:b0:
         8c:65:8a:f3:fb:10:a9:8a:d1:cf:06:d6:85:61:ab:1e:21:72:
         33:01:d1:8b:53:ce:90:52:bc:26:38:c5:f4:5f:5d:4c:53:ba:
         d9:08:82:f0:41:f7:09:ba:82:13:c2:b2:60:5c:a2:0f:59:0d:
         3c:41:02:6c:4e:5f:78:35:dc:fd:4b:94:ac:99:84:0b:bb:8a:
         45:9e:1d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:17:56 2025 by rpki-client