Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/fc734abe-84cb-31fb-9091-572995e67bbc.roa
File:                     fc734abe-84cb-31fb-9091-572995e67bbc.roa (raw, json)
Hash identifier:          XiXNLO6toWbF7CfrI9+DRyXxZdxKCEZMLrWU9kFoZTE=
Subject key identifier:   6D:E0:59:25:13:74:EA:4B:70:A6:89:0B:AC:F4:FC:13:9B:CA:A2:D2
Certificate issuer:       /CN=08a6d347-5170-4470-abb6-1b99491a1406
Certificate serial:       010D0C9F4328584992949A8251C09CDB4C6AE1C0
Authority key identifier: 34:E9:93:A8:56:86:39:15:85:BA:37:93:95:1E:90:CA:D0:9C:13:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/fc734abe-84cb-31fb-9091-572995e67bbc.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     199959
IP address blocks:        192.189.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/08a6d347-5170-4470-abb6-1b99491a1406.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/08a6d347-5170-4470-abb6-1b99491a1406.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:9a:82:51:c0:9c:db:4c:6a:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08a6d347-5170-4470-abb6-1b99491a1406
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=4505eb40-0ac3-4eb0-98ff-fcc85634c8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:01:cd:3d:16:7e:cb:f9:f6:f5:55:ef:d8:f5:
                    de:b7:4f:90:b7:ec:18:2b:05:00:95:c1:4c:bd:e3:
                    05:6f:4a:16:5c:54:9f:aa:f6:51:53:20:51:b6:a0:
                    b3:4f:94:68:f3:aa:33:71:04:19:46:a6:a6:e9:02:
                    1a:c3:18:67:8b:79:4e:67:e7:47:c5:c8:58:e5:c1:
                    25:50:91:ce:1b:e5:28:4e:e5:e8:66:15:8d:41:03:
                    f3:13:63:ad:b8:24:dc:5a:88:64:91:7e:f0:b5:cb:
                    5a:b3:6b:1c:9f:d2:41:c1:67:ab:0d:59:db:7b:b4:
                    9d:ba:0e:a4:69:45:6c:ef:1b:f8:4c:bf:92:24:db:
                    5a:69:d3:03:fa:a1:58:8c:23:7d:e2:c4:e2:96:d5:
                    9f:d3:1a:50:a6:de:58:4b:92:f2:25:ee:9c:13:05:
                    e9:3c:1c:70:fd:80:50:a8:fb:23:ae:6c:5e:60:a8:
                    36:94:18:cf:21:85:fd:20:65:08:21:9d:2d:b4:92:
                    bd:2c:fd:1b:ae:80:5e:2e:3e:b4:ba:1e:55:a7:32:
                    5a:5d:45:84:c4:f1:db:55:32:a3:c7:0d:97:7c:04:
                    33:1f:2c:e9:03:f2:47:42:89:f0:22:b4:af:5d:4a:
                    f6:71:ff:d5:5d:e1:a2:3b:73:75:f1:fd:ab:9c:7e:
                    6d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E0:59:25:13:74:EA:4B:70:A6:89:0B:AC:F4:FC:13:9B:CA:A2:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/fc734abe-84cb-31fb-9091-572995e67bbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/08a6d347-5170-4470-abb6-1b99491a1406.crl

            X509v3 Authority Key Identifier:
                keyid:34:E9:93:A8:56:86:39:15:85:BA:37:93:95:1E:90:CA:D0:9C:13:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.189.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:e8:42:1d:c2:6a:fa:80:0b:84:fe:50:f1:2f:25:a6:f9:13:
         97:81:7d:e7:d7:42:f2:63:b8:02:45:0d:4a:bf:52:5e:d8:02:
         c5:03:67:ab:b7:4c:a2:1c:f4:49:60:df:3c:7c:8d:74:fe:bb:
         c1:c9:20:8b:63:49:5e:f8:3f:7c:c0:ce:38:c6:c1:5e:6b:ba:
         81:f3:88:28:e8:c0:98:9b:1f:00:05:3e:b9:80:7b:e0:b6:88:
         ac:93:75:8b:ec:fa:fe:a5:f8:2c:94:58:3b:bc:2f:a4:95:82:
         e9:07:d8:08:6b:28:ac:c0:d1:b8:b4:22:83:9e:4e:50:41:ce:
         5f:85:9e:f7:af:12:d4:97:ff:e6:b1:a6:12:9d:99:53:41:ce:
         1b:d0:0b:5a:2a:7f:e7:29:59:ac:a7:38:9c:33:87:a0:bb:70:
         9a:6c:0f:6a:a8:24:5a:d8:9b:24:fc:1e:03:53:af:3a:7a:f5:
         7c:af:a3:1d:c7:e0:e8:b8:9e:31:3a:16:30:9e:46:a8:e1:f6:
         4c:18:cb:14:e5:23:c7:ab:1c:f6:69:e6:c4:b8:28:e5:0b:41:
         f1:b7:21:df:7a:40:c5:6d:10:46:6a:75:1a:88:c0:e2:2c:66:
         74:85:79:f5:c9:2f:ea:a0:c6:2e:db:cd:bd:39:3e:6f:e6:f3:
         18:b8:8e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:58:24 2025 by rpki-client