Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/1780f5f4-ca0f-3038-9804-a6b0c68a2426.roa
File:                     1780f5f4-ca0f-3038-9804-a6b0c68a2426.roa (raw, json)
Hash identifier:          POJ8/BFOPcXk8I254lmeNDyKDubiVCmrGcOGSxy9vPY=
Subject key identifier:   CC:08:C2:F8:46:32:19:C8:B9:FA:44:8B:28:3E:4A:62:B2:03:DE:0C
Certificate issuer:       /CN=43dfd777-de1f-43d4-839f-074c5f3bd298
Certificate serial:       010D0C9F432858499A6F94F066F75CF661F4F4AC
Authority key identifier: AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/1780f5f4-ca0f-3038-9804-a6b0c68a2426.roa
Signing time:             Mon 21 Apr 2025 20:33:08 +0000
ROA not before:           Mon 21 Apr 2025 20:33:08 +0000
ROA not after:            Sun 20 Jul 2025 20:33:08 +0000
asID:                     400110
IP address blocks:        184.169.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:6f:94:f0:66:f7:5c:f6:61:f4:f4:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43dfd777-de1f-43d4-839f-074c5f3bd298
        Validity
            Not Before: Apr 21 20:33:08 2025 GMT
            Not After : Jul 20 20:33:08 2025 GMT
        Subject: CN=6638cbf7-cdcd-4fa0-b539-6058047d244b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:85:1f:e0:d9:8b:cd:af:7d:18:ac:f2:29:52:
                    7b:ef:9b:5e:1f:fc:8d:6c:64:3c:5b:48:06:41:cf:
                    95:7f:48:20:41:8e:71:79:75:7f:1f:f2:99:20:75:
                    9c:6f:d9:af:14:3d:ae:0d:e1:b9:60:ab:90:4b:54:
                    ac:69:59:1b:15:54:34:8b:e8:1d:ba:c2:ea:0f:2b:
                    25:25:ca:9d:f2:ba:df:65:e6:9f:cc:e6:44:42:3c:
                    83:87:ba:eb:b1:aa:53:0c:86:cf:53:3a:14:aa:58:
                    00:88:e3:d8:1a:d7:4a:0f:80:6c:41:79:51:ae:f0:
                    b2:63:67:9b:1a:a4:21:8c:52:57:94:d9:a0:81:d7:
                    c6:32:9d:1a:77:ce:79:7c:22:63:83:48:f7:52:32:
                    bc:96:40:75:85:c9:04:0f:2f:a8:42:44:33:78:04:
                    d0:86:b5:78:81:e9:39:89:49:26:2c:60:db:6c:2d:
                    a1:b3:f7:9c:e4:68:b3:70:86:b3:86:e7:a2:6c:bd:
                    ef:e1:fb:cf:56:ed:74:e6:48:3d:eb:89:05:1a:29:
                    dd:fa:fa:c2:58:ee:60:a3:02:a2:53:67:27:70:25:
                    75:8a:8c:b2:5c:90:b4:c1:3a:3f:ad:db:f6:f3:56:
                    b9:49:3d:2b:75:8a:81:b7:aa:41:db:16:1f:2d:01:
                    50:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:08:C2:F8:46:32:19:C8:B9:FA:44:8B:28:3E:4A:62:B2:03:DE:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/1780f5f4-ca0f-3038-9804-a6b0c68a2426.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl

            X509v3 Authority Key Identifier:
                keyid:AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:14:b1:3f:fa:3b:e2:41:c3:08:60:c9:30:01:45:3c:6b:8e:
         5a:cf:25:49:e1:46:7e:6b:e3:fd:11:2d:9c:fc:e2:51:f1:d7:
         ff:65:dc:2e:7a:04:bd:3f:18:04:a0:f2:d7:30:0d:d6:b0:2c:
         08:fa:3f:92:a2:f0:eb:08:60:52:4d:eb:e5:d7:c6:08:d6:04:
         91:2c:fd:5b:e7:ea:1d:0e:8c:a1:c9:ac:bc:0e:99:38:ed:23:
         dd:35:ac:f1:be:bf:25:e1:ca:94:63:29:d3:71:88:76:b8:f2:
         2a:e7:5e:1d:a2:1d:96:1e:c4:ff:70:17:9d:41:49:bb:4a:46:
         47:0f:76:45:a4:fb:0b:7f:3e:6a:f0:3c:3a:52:1c:a1:d4:bf:
         c0:c6:2b:2c:42:1d:f9:f5:04:ee:08:af:1c:ad:b6:c7:ff:0e:
         2d:af:e4:6d:c1:f5:88:d5:ab:62:b4:28:df:d8:0b:c0:3a:0e:
         5e:f3:e9:57:a6:c2:b2:31:21:a5:58:b6:95:9d:9c:c1:7e:49:
         c9:1b:64:b9:1f:21:7b:f0:96:6d:92:b9:0b:67:eb:cf:74:46:
         29:88:53:3e:c8:e2:22:50:26:07:ab:11:01:26:c6:e9:41:1e:
         ed:48:68:25:81:7f:a2:3b:a4:50:b0:b0:9b:b2:49:25:93:e6:
         47:3f:3d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:37:03 2025 by rpki-client