Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ac4312c4-c891-4a96-86d7-0aca56ee26be/eccac3b5-2c7c-3879-9fc5-610d0781a706.roa
File:                     eccac3b5-2c7c-3879-9fc5-610d0781a706.roa (raw, json)
Hash identifier:          GJdrCx7aoQfY/uNRsdxmsrsp3uA793HG4ltFvGF1ZxE=
Subject key identifier:   1E:20:9C:94:92:18:14:24:6C:3E:5C:11:4C:EC:96:05:17:63:3F:36
Certificate issuer:       /CN=ac4312c4-c891-4a96-86d7-0aca56ee26be
Certificate serial:       010D0C9F432858499AF479D91AA0B66327D09440
Authority key identifier: 77:12:0F:70:34:8B:06:A5:FD:58:C4:3B:EA:5A:30:30:7A:D6:0D:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ac4312c4-c891-4a96-86d7-0aca56ee26be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ac4312c4-c891-4a96-86d7-0aca56ee26be/eccac3b5-2c7c-3879-9fc5-610d0781a706.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        192.26.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ac4312c4-c891-4a96-86d7-0aca56ee26be/ac4312c4-c891-4a96-86d7-0aca56ee26be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ac4312c4-c891-4a96-86d7-0aca56ee26be/ac4312c4-c891-4a96-86d7-0aca56ee26be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ac4312c4-c891-4a96-86d7-0aca56ee26be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:79:d9:1a:a0:b6:63:27:d0:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac4312c4-c891-4a96-86d7-0aca56ee26be
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=41c148c2-41a2-4165-aae8-55e74873be45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:95:12:a5:22:a3:89:a9:9c:66:e1:89:76:f6:
                    1f:eb:65:7f:9f:32:54:98:a5:f8:b5:f2:6b:99:eb:
                    f1:1c:f3:f3:57:05:c7:a8:85:bf:62:7a:ea:f9:14:
                    68:44:17:16:e6:75:bd:57:4b:c3:e5:3e:6b:6e:4d:
                    05:48:83:3e:62:6e:59:c9:68:6f:00:03:cb:c3:e1:
                    16:85:ab:a5:0b:89:a3:9f:d1:b6:b1:3a:76:2a:29:
                    4b:74:53:37:6b:97:d0:df:14:c6:f5:e8:4a:87:2a:
                    79:0f:c6:de:95:f3:12:3a:f6:fe:0e:33:31:a7:2b:
                    35:4d:63:c6:ca:7c:f1:6d:82:c8:13:76:a8:51:1e:
                    d3:8d:f0:9a:42:52:5a:ae:2d:56:ff:07:96:ba:8c:
                    38:3b:a1:42:10:4e:a2:70:59:15:98:a0:a3:25:59:
                    e1:57:a6:fc:94:b1:c8:f7:81:0d:45:54:5a:14:88:
                    4a:54:3d:4d:a8:38:74:9c:16:1c:34:ae:d4:eb:5f:
                    c5:3a:7c:18:1a:1d:b5:a8:33:d7:54:d2:e6:a0:c3:
                    22:cc:e0:d1:8d:ca:cb:be:ef:c9:4e:b3:65:40:b0:
                    6a:8c:68:09:83:07:95:f7:6d:7f:0e:8c:fb:0a:b1:
                    0d:f5:00:6f:6a:f8:ae:ab:81:27:19:b1:b8:76:b2:
                    30:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:20:9C:94:92:18:14:24:6C:3E:5C:11:4C:EC:96:05:17:63:3F:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ac4312c4-c891-4a96-86d7-0aca56ee26be/eccac3b5-2c7c-3879-9fc5-610d0781a706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ac4312c4-c891-4a96-86d7-0aca56ee26be/ac4312c4-c891-4a96-86d7-0aca56ee26be.crl

            X509v3 Authority Key Identifier:
                keyid:77:12:0F:70:34:8B:06:A5:FD:58:C4:3B:EA:5A:30:30:7A:D6:0D:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ac4312c4-c891-4a96-86d7-0aca56ee26be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.26.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:80:2e:fe:9f:3d:24:58:3b:23:80:3e:3b:46:b8:fa:f8:f9:
         7b:c2:99:69:58:08:11:25:be:45:e7:9e:4c:33:c9:6e:73:71:
         16:d7:a1:58:eb:dd:f3:45:30:6c:70:9e:f6:21:96:6a:e9:3e:
         d4:c1:79:c8:40:75:eb:9e:07:e7:05:3e:11:b8:99:e2:2e:e9:
         f4:33:b1:13:28:61:13:24:8f:57:1d:bb:c4:f5:95:ac:aa:f4:
         61:f0:3f:b0:0c:e1:63:a3:62:13:4e:f6:b7:1d:e1:b4:bb:1d:
         60:a4:bd:cb:56:00:0b:5d:48:e3:24:1a:50:3c:93:0d:43:02:
         d1:25:ae:69:37:e5:d1:68:0a:f0:c9:db:2e:a5:74:25:7c:80:
         82:72:09:57:df:81:aa:da:4a:07:cc:dd:9b:31:c1:69:75:a9:
         d7:94:92:9e:37:69:6c:ff:8e:20:1f:f0:98:a3:ca:bf:cc:57:
         05:ca:36:80:a8:36:85:09:ee:79:cc:5a:87:ad:e3:5c:3a:64:
         63:e6:07:ce:c5:18:f5:61:ff:34:b9:d8:94:53:8f:6e:1f:b0:
         9b:91:a7:f3:dc:f8:ae:c9:3d:2f:8c:cc:c0:4d:8f:b0:ec:23:
         94:53:1e:42:fe:f5:dc:6a:a8:f0:1e:99:94:9a:03:a1:6f:ee:
         98:31:9a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:18:00 2025 by rpki-client