Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/84e603bf-8d7c-3709-a741-e124d8eda2f5.roa
File:                     84e603bf-8d7c-3709-a741-e124d8eda2f5.roa (raw, json)
Hash identifier:          XRSBGZq78/hKth+V1mJI6OoV6vX0FabcAVveghI9Wo0=
Subject key identifier:   86:8B:ED:6A:65:5B:44:93:B4:DA:13:BD:6F:EA:AC:3B:19:F4:DA:5E
Certificate issuer:       /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Certificate serial:       010D0C9F432858498E648B0BDBE0A9CF943BE400
Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/84e603bf-8d7c-3709-a741-e124d8eda2f5.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     0
IP address blocks:        192.74.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:8b:0b:db:e0:a9:cf:94:3b:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=c50822fe-6f86-49c4-9111-618d42c50f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:71:93:f4:51:47:ab:00:7e:1f:93:06:77:97:
                    d9:65:de:af:0d:20:5a:cd:e7:c2:4a:66:6a:28:31:
                    03:26:48:47:8d:dc:2d:40:88:1a:78:a4:e2:bc:85:
                    83:97:e0:29:c2:78:62:3b:be:61:5c:eb:60:de:94:
                    e8:af:e1:7b:5d:3c:ff:b6:2f:7b:30:67:2f:76:98:
                    b0:3d:5c:0d:35:3a:6e:9c:40:ad:ac:3f:5f:02:51:
                    ff:12:91:0c:43:9d:84:e3:e0:2f:0f:3f:d3:77:89:
                    f5:73:b7:b1:ed:2e:3b:8b:f7:70:ec:9e:58:01:86:
                    ca:1a:81:33:47:ba:77:bd:4d:4f:fd:3b:e9:31:13:
                    d8:74:71:7d:31:62:41:6d:7d:16:58:06:e0:68:8f:
                    9b:87:58:6c:85:fc:0f:00:c8:6a:8f:93:4e:65:9e:
                    ae:c7:89:17:87:25:9c:ca:1c:2a:3a:06:f7:1d:a9:
                    17:e4:bb:d6:3b:af:57:4a:cc:4e:e2:ae:3d:c8:26:
                    56:a2:4c:d4:6e:aa:d8:b8:7a:e3:b3:38:0e:7a:b1:
                    45:8a:af:3d:e5:84:b3:47:ef:fa:c2:bb:64:4a:fc:
                    2d:fb:c7:cf:a1:fa:1e:2c:ba:29:5f:ed:21:ba:c5:
                    35:27:e3:a2:25:09:d9:2b:68:eb:ec:d4:ef:dd:f5:
                    f9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8B:ED:6A:65:5B:44:93:B4:DA:13:BD:6F:EA:AC:3B:19:F4:DA:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/84e603bf-8d7c-3709-a741-e124d8eda2f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl

            X509v3 Authority Key Identifier:
                keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.74.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:c9:0d:9f:17:20:94:1e:cf:e9:8f:93:42:b5:5b:07:56:85:
         e3:97:22:af:8b:7c:41:3d:84:ce:9b:46:b7:a7:cb:06:53:10:
         a3:27:93:20:65:84:31:90:f9:40:f4:cc:a6:64:ae:1c:9c:c4:
         9b:8b:bc:e9:5b:96:0f:c1:93:9a:10:2a:a7:d6:a4:2c:e8:8d:
         a0:cc:26:fb:94:d1:a8:01:ed:cb:c7:90:32:70:2d:ae:22:d8:
         59:a7:e7:36:ab:1d:de:dc:f8:d3:db:e4:9b:b0:b1:a7:c7:a8:
         23:ce:d2:3a:f3:2c:bd:35:64:0a:70:e6:fa:f4:95:f9:ba:80:
         fb:34:0f:28:16:78:9b:c9:c6:e0:d5:e8:d3:5e:e8:01:f9:80:
         77:80:bf:fe:0a:92:f3:4b:e2:fa:2a:97:1e:94:f2:a6:5d:8b:
         5f:72:b4:12:e6:0c:3a:52:c3:0b:e2:8d:22:84:87:18:ad:bf:
         52:1b:16:05:a0:1d:6a:f1:18:86:7d:54:f2:f1:31:e5:0d:28:
         1b:07:bc:61:3c:a5:d9:ef:74:3c:53:34:3b:2f:2f:52:bb:8b:
         f0:e7:bd:9e:ba:32:8e:c7:2e:be:37:9e:37:0c:64:4c:0f:94:
         c6:e5:44:d0:cc:9a:27:e7:cb:36:86:32:60:67:cb:70:b7:5d:
         64:aa:3d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:55:35 2025 by rpki-client