Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/94d6c823-6e99-32ef-a113-b8cbe62be865.roa
File:                     94d6c823-6e99-32ef-a113-b8cbe62be865.roa (raw, json)
Hash identifier:          g8dw4PDxaKzZaF1Biq4nATT1ijVuyyJ1smpkCyqKSU4=
Subject key identifier:   5F:1C:46:D4:F5:DF:93:9E:5C:89:FF:F2:05:21:21:72:9F:8C:9E:02
Certificate issuer:       /CN=78108340-c24e-45fa-a787-5578ce17c653
Certificate serial:       010D0C9F432858499829CE240C2AA3BFA61FE680
Authority key identifier: 96:B4:2B:83:19:3D:79:88:72:B2:4D:D9:B7:6D:1B:E1:B1:56:43:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/94d6c823-6e99-32ef-a113-b8cbe62be865.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     11796
IP address blocks:        206.168.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/78108340-c24e-45fa-a787-5578ce17c653.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/78108340-c24e-45fa-a787-5578ce17c653.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:ce:24:0c:2a:a3:bf:a6:1f:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78108340-c24e-45fa-a787-5578ce17c653
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=1b258063-de91-4fd5-a530-47df11cc5af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:96:c3:19:ed:ef:dc:54:b7:c9:4f:53:83:38:
                    fa:79:35:f4:dc:50:b8:25:6c:aa:a7:6b:eb:70:95:
                    b4:23:36:06:fa:10:7a:15:51:db:31:9e:34:61:51:
                    f4:c6:53:8a:26:04:ed:b6:de:a3:46:15:2c:28:25:
                    e6:ab:d3:35:42:69:a0:cf:77:30:98:63:12:0d:c2:
                    7f:90:87:a4:3a:48:af:19:60:bd:95:cf:73:65:c1:
                    70:92:7a:5f:df:87:ae:16:4e:ba:e5:14:5f:45:2e:
                    b7:3f:03:9e:24:d0:b6:0a:0f:f3:5d:af:62:ff:76:
                    90:80:ee:db:a6:b3:9f:49:40:91:bc:25:c4:5f:31:
                    91:0c:30:36:1b:16:56:56:b6:07:c6:cf:aa:36:fe:
                    42:b4:ce:6c:27:35:67:7b:e5:8f:67:10:ee:40:b4:
                    ae:9c:33:2c:9e:45:cc:ac:fe:c3:71:a6:5d:b0:9c:
                    0a:57:9f:6d:03:c0:07:5b:12:7d:34:ea:06:84:61:
                    31:14:9c:27:45:ec:fd:b7:e5:0e:f1:bf:c5:5e:8f:
                    d2:74:cf:ed:5a:9d:64:13:a7:be:32:1f:5f:d2:89:
                    36:c6:88:ab:70:66:12:06:cd:44:54:47:37:c5:ec:
                    9d:d8:68:21:4a:9f:09:98:42:cf:5d:42:44:4c:bc:
                    06:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1C:46:D4:F5:DF:93:9E:5C:89:FF:F2:05:21:21:72:9F:8C:9E:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/94d6c823-6e99-32ef-a113-b8cbe62be865.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/78108340-c24e-45fa-a787-5578ce17c653.crl

            X509v3 Authority Key Identifier:
                keyid:96:B4:2B:83:19:3D:79:88:72:B2:4D:D9:B7:6D:1B:E1:B1:56:43:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:4b:6f:85:77:25:fa:87:72:5d:78:fc:41:17:a3:20:cb:51:
         00:41:43:c6:1d:1a:05:e4:41:8d:5e:76:b7:35:51:13:e6:35:
         f5:0f:15:f7:d3:47:f6:14:5f:aa:f7:61:21:ee:15:5e:84:a1:
         5d:e9:d4:f3:a7:0f:0d:c1:2c:f4:61:7f:e9:a1:eb:5e:5d:20:
         33:2d:a8:57:33:99:85:64:b7:a1:0c:54:7c:e9:2a:85:2f:83:
         07:e7:ae:99:1a:b5:00:8e:d4:15:e8:aa:9d:51:84:bc:11:a9:
         4a:dd:ef:e9:ac:35:2b:df:75:7e:58:0b:86:e8:05:d0:a3:bf:
         86:e8:98:1a:20:ce:cf:62:51:4c:21:53:5d:9d:f1:53:05:f8:
         cd:90:b7:d7:88:22:79:a9:f6:4a:c9:2b:60:43:99:49:71:e0:
         0b:8e:4e:e2:4a:fb:da:6f:a2:00:9c:94:8a:75:4d:64:d8:5e:
         7b:f0:78:54:25:c4:da:ab:d7:aa:3c:1c:5c:13:8f:a5:ac:c9:
         89:65:13:10:ff:3b:b8:7d:90:bf:77:a0:60:da:b1:49:63:c3:
         2e:1c:ea:a8:4c:3b:d6:e9:e9:55:7c:26:2e:75:89:88:ff:0c:
         c1:0a:ae:c4:eb:fb:1a:fc:26:2c:29:37:1f:f1:53:28:f3:1d:
         bc:5a:ce:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:39:06 2025 by rpki-client