Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cd102c2e-82fb-3732-8bfb-acffe257b6dc.roa
File:                     cd102c2e-82fb-3732-8bfb-acffe257b6dc.roa (raw, json)
Hash identifier:          tbZSCbgSabrxUmBbWZ4km+VLoav+iRCBPHqzV8TbPpw=
Subject key identifier:   18:4D:F3:5C:BD:96:86:1F:EB:D3:DA:B9:DF:DD:18:C5:7C:1A:93:23
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F43285849F17FC43E92039188E7B53380
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cd102c2e-82fb-3732-8bfb-acffe257b6dc.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     3360
IP address blocks:        192.46.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:c4:3e:92:03:91:88:e7:b5:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=09a99339-df38-4985-aebc-289255ffbc63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6d:30:6f:c2:61:d3:79:41:f3:ac:2a:09:46:
                    6e:67:d2:c7:26:69:c3:6a:ef:ab:46:e2:da:91:9e:
                    05:5e:c1:d9:0d:10:cc:28:ef:5b:bf:24:d6:1e:58:
                    88:5d:8b:b6:4a:ca:52:26:44:dd:9b:ad:03:f9:50:
                    60:cd:20:13:ee:c2:f7:ec:18:ef:1c:0b:0c:d6:10:
                    74:f1:9d:fb:46:1a:ef:24:fb:be:5a:d3:b0:6b:e0:
                    bc:01:0d:36:9c:c2:d7:cd:0c:0c:38:2a:31:95:33:
                    33:3a:20:d6:48:b1:a9:ea:3c:1f:88:ab:86:a2:b4:
                    8d:14:78:4f:b2:ad:43:a2:d6:2b:fa:a4:14:6a:31:
                    8a:46:6b:22:6e:0d:fb:f2:82:c4:5d:22:2b:55:39:
                    37:34:7f:de:95:26:86:f2:90:75:0d:84:e6:df:19:
                    59:5c:6d:f4:26:9b:d0:61:ca:96:6d:a5:c2:8d:1f:
                    69:3e:5e:a8:72:e6:db:fa:e0:09:4b:cc:8a:ce:16:
                    14:ba:f5:42:29:02:d6:39:06:aa:8c:ee:8f:2e:3d:
                    b3:c8:a0:f7:f6:7e:ac:5a:39:7a:da:f1:84:ad:d8:
                    c7:d4:c0:33:30:0f:9d:eb:ff:a9:3a:4b:46:e9:20:
                    02:47:91:98:2c:57:94:bf:c6:13:a1:e4:b8:1c:61:
                    ce:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:4D:F3:5C:BD:96:86:1F:EB:D3:DA:B9:DF:DD:18:C5:7C:1A:93:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cd102c2e-82fb-3732-8bfb-acffe257b6dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.46.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:66:a6:7e:0e:c6:90:fa:53:53:f3:09:37:9a:c4:44:cd:77:
         d1:75:32:8b:66:ba:f6:66:7c:dd:0b:b7:b7:b1:a6:aa:2e:d3:
         39:b0:a5:2d:ae:ce:15:cb:2b:84:e8:5d:92:cb:46:08:10:4a:
         38:cb:f1:12:af:c5:fb:9b:50:fc:9d:ec:9c:a2:60:36:13:20:
         7e:9a:2c:12:01:0f:56:88:d1:67:f2:16:44:d2:b3:e3:6d:8f:
         7a:99:7b:f2:8b:25:ab:3c:88:74:4e:e3:5b:62:43:d4:47:42:
         55:14:55:a4:31:a7:3c:6f:db:8e:39:36:ab:b7:0c:fa:8a:b0:
         d4:56:2d:f2:d9:84:d1:cc:30:f5:27:6d:af:50:15:70:01:14:
         68:01:9b:49:c7:88:e4:3f:d8:33:bf:98:09:07:eb:34:38:87:
         98:b3:db:3e:58:c1:28:31:6c:f0:4f:3e:aa:31:e6:bf:d6:92:
         23:92:59:d8:46:97:da:eb:2c:ce:68:ad:4a:87:93:11:f1:34:
         c6:88:1f:97:40:4e:d0:2e:a8:a6:13:19:ef:3a:a5:06:f3:ca:
         57:40:21:26:32:ca:9f:09:32:5f:fd:82:d2:15:27:1f:79:c8:
         52:fe:02:09:88:9d:ec:b4:65:71:ff:3c:e5:a7:c2:6d:4c:85:
         ce:c6:81:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 12:30:27 2025 by rpki-client