Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/231e7311-eefe-40ee-a478-3ca2852934bf/37061446-38e2-3d49-804c-7214961c2194.roa
File:                     37061446-38e2-3d49-804c-7214961c2194.roa (raw, json)
Hash identifier:          aWv+4APs7bwVfwFFD9O4mn2RbDTypFIAz7dDRr2/Kuc=
Subject key identifier:   56:A3:77:F4:21:6B:37:33:FD:2A:EE:08:E4:C3:31:F5:94:13:CB:40
Certificate issuer:       /CN=231e7311-eefe-40ee-a478-3ca2852934bf
Certificate serial:       010D0C9F43285849CE9A531ECD72FA05C2269600
Authority key identifier: E5:FC:71:E1:DA:81:BA:08:C4:B8:62:D4:07:7A:B4:43:69:42:5D:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/231e7311-eefe-40ee-a478-3ca2852934bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/231e7311-eefe-40ee-a478-3ca2852934bf/37061446-38e2-3d49-804c-7214961c2194.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        192.190.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/231e7311-eefe-40ee-a478-3ca2852934bf/231e7311-eefe-40ee-a478-3ca2852934bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/231e7311-eefe-40ee-a478-3ca2852934bf/231e7311-eefe-40ee-a478-3ca2852934bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/231e7311-eefe-40ee-a478-3ca2852934bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:53:1e:cd:72:fa:05:c2:26:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231e7311-eefe-40ee-a478-3ca2852934bf
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=9bf0fd77-b730-4454-bf8e-609556f094f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1f:37:63:79:e4:29:46:28:84:3e:e7:cb:4c:
                    b5:c2:6a:9e:5b:85:d9:df:c4:1e:51:b8:d9:8b:7b:
                    b4:d5:49:c1:ed:e0:6e:2d:00:e3:ca:3a:fb:03:44:
                    96:2a:3d:f0:02:41:5c:74:66:10:37:42:8b:ca:a1:
                    21:8f:ea:7f:18:ca:64:85:d2:0d:7d:d0:2d:28:ba:
                    73:da:22:22:43:35:32:4b:82:68:55:21:53:00:37:
                    90:36:e3:9c:e3:61:6d:c5:b9:2a:4d:be:09:5e:d8:
                    16:29:15:f3:73:d6:c9:d4:de:3f:f4:b8:a8:4b:11:
                    85:46:d7:ae:29:b5:b7:33:66:bc:ba:b5:4e:c9:9e:
                    3c:ca:7a:f4:2b:48:c8:1e:03:f2:52:00:6b:f7:6c:
                    aa:8d:65:63:51:dd:fc:14:60:e9:0a:f7:9f:df:4d:
                    19:17:d6:0a:53:f4:d1:70:08:8d:77:cd:bd:6a:74:
                    99:54:0e:17:1f:69:23:89:4f:59:b0:66:72:76:2f:
                    49:16:4e:b2:04:a4:02:c9:2f:f6:ab:44:b3:b8:4a:
                    51:4b:fd:1c:b6:27:aa:32:9b:04:89:21:24:65:51:
                    82:84:d8:a1:c2:4f:02:08:e4:bc:f9:58:38:f2:cd:
                    13:a5:bf:8c:99:29:95:41:12:7c:c9:e8:7b:0f:78:
                    45:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A3:77:F4:21:6B:37:33:FD:2A:EE:08:E4:C3:31:F5:94:13:CB:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/231e7311-eefe-40ee-a478-3ca2852934bf/37061446-38e2-3d49-804c-7214961c2194.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/231e7311-eefe-40ee-a478-3ca2852934bf/231e7311-eefe-40ee-a478-3ca2852934bf.crl

            X509v3 Authority Key Identifier:
                keyid:E5:FC:71:E1:DA:81:BA:08:C4:B8:62:D4:07:7A:B4:43:69:42:5D:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/231e7311-eefe-40ee-a478-3ca2852934bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:7c:49:83:ed:0b:23:07:54:64:bd:d7:7d:d6:ab:f0:c5:b8:
         e7:e5:8d:bd:2a:3b:a0:81:71:de:29:18:ea:fd:0f:6b:1e:2d:
         29:fc:2c:d7:87:1d:70:b0:74:7d:7f:03:67:24:1a:80:d0:b9:
         05:13:51:09:c5:8c:39:e8:4b:e0:7a:cd:3e:55:87:3c:37:5d:
         46:71:b7:18:c0:ee:a6:33:ba:fe:e6:b7:25:0d:fd:33:db:ac:
         5e:73:c4:61:d9:22:c2:eb:59:50:c3:15:0b:a7:c5:e0:27:5f:
         fc:7b:2f:84:57:43:f3:c3:18:72:d6:ac:ee:8a:0b:7e:42:6d:
         82:1b:27:26:6f:19:fd:48:6d:8f:d1:23:c9:ab:36:45:91:76:
         ca:46:8e:3d:c4:e5:93:82:31:6a:a4:87:b0:50:ab:c7:4d:d8:
         bb:ea:ed:19:04:1b:b6:76:ec:eb:17:bb:e9:05:37:8a:dd:01:
         ab:00:4a:ad:9e:90:b5:80:cb:f9:42:ab:af:8e:9b:01:14:c9:
         9d:7a:ac:d2:5e:26:29:56:c7:81:91:2d:8a:61:f7:19:c0:80:
         3b:74:45:0e:49:90:a2:e3:e7:18:c3:c5:b6:12:af:8d:15:80:
         f6:38:0d:f2:b5:a4:db:93:05:c4:5e:fc:25:f8:4e:04:0f:76:
         ec:25:f1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:27:57 2025 by rpki-client