Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/184f5a0b-8470-3c2c-a83f-7af590b80120.roa
File:                     184f5a0b-8470-3c2c-a83f-7af590b80120.roa (raw, json)
Hash identifier:          ubbGQRhgveaU1Bomwu2mlsqm8lH2ayseLr6dHx5FZfU=
Subject key identifier:   50:E2:6E:10:D8:BD:12:AA:06:26:32:AF:B0:82:41:AF:C1:A6:C6:B9
Certificate issuer:       /CN=a6ba0fd2-b526-4985-9314-bf6485056a64
Certificate serial:       010D0C9F43285849C0A4D91D477052CF5D6FB340
Authority key identifier: CC:23:95:78:8D:02:B3:B1:39:3C:D8:49:09:D0:31:6B:4F:1C:A6:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/184f5a0b-8470-3c2c-a83f-7af590b80120.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     2552
IP address blocks:        192.31.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/a6ba0fd2-b526-4985-9314-bf6485056a64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/a6ba0fd2-b526-4985-9314-bf6485056a64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:d9:1d:47:70:52:cf:5d:6f:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6ba0fd2-b526-4985-9314-bf6485056a64
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=37b34d28-b500-49cf-844d-a66bda7d1373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c6:54:dc:c3:94:f1:db:b0:0b:20:82:73:c2:
                    38:87:7c:75:1e:f4:0f:47:1d:ef:c9:dd:9f:a5:cf:
                    90:29:fd:49:2c:56:cf:1b:92:65:a2:03:90:a3:4c:
                    c2:c2:10:d3:d9:7a:63:05:81:11:e1:d8:d0:6f:aa:
                    93:61:9e:e3:1d:cd:75:4a:06:e4:77:ed:c7:7a:09:
                    3a:b2:dc:09:ba:ac:fe:3a:9e:8d:8d:94:6b:86:2a:
                    9e:20:07:36:97:36:1d:df:8e:da:e5:28:90:80:54:
                    34:b7:33:8a:67:7b:b0:aa:64:74:d9:5f:ac:e4:04:
                    ad:fa:04:59:4b:32:b7:89:a5:02:a5:df:e1:eb:a6:
                    28:aa:67:b4:72:f5:82:f5:f8:56:68:d8:02:e3:9c:
                    27:a2:4e:1d:8e:59:0a:f9:85:5f:a8:b1:e1:f4:c6:
                    2e:0e:e1:2c:82:28:f5:23:78:7c:fe:d8:bf:15:58:
                    19:5d:20:f4:42:76:7e:7c:fa:18:33:3d:d1:83:7e:
                    40:14:00:6c:64:c1:28:9e:08:00:d9:cf:a7:f2:0b:
                    53:c2:56:1b:55:cc:4d:dc:2c:79:4c:9f:39:f8:9b:
                    9d:5e:89:a4:7d:7c:42:b7:75:04:08:f6:a7:de:a7:
                    f3:cb:1a:cf:46:a8:e6:c1:b6:8d:71:e8:56:1d:11:
                    62:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E2:6E:10:D8:BD:12:AA:06:26:32:AF:B0:82:41:AF:C1:A6:C6:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/184f5a0b-8470-3c2c-a83f-7af590b80120.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/a6ba0fd2-b526-4985-9314-bf6485056a64.crl

            X509v3 Authority Key Identifier:
                keyid:CC:23:95:78:8D:02:B3:B1:39:3C:D8:49:09:D0:31:6B:4F:1C:A6:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:34:d5:da:4d:c6:a1:93:c3:62:91:ff:61:e9:56:8e:77:1d:
         c4:7e:ed:35:f8:ac:df:99:1c:42:b6:cd:ee:05:f5:97:71:0d:
         83:4a:89:28:ba:a7:3a:4d:2e:5c:00:16:4a:72:18:d6:66:6d:
         3c:29:a3:64:77:0e:85:ec:ad:19:10:af:4c:62:14:37:67:2f:
         02:ee:e5:37:f7:19:cc:c0:5f:42:82:e7:62:21:7d:13:3b:7e:
         97:2f:1b:15:ff:10:0c:aa:3d:09:ce:9e:32:c7:79:d6:b5:3c:
         0a:31:aa:35:cc:c7:2b:57:01:45:e1:f0:0a:25:5c:9a:ed:17:
         1d:fc:93:51:0c:5d:38:0b:d4:e9:c3:7c:90:42:3b:f9:de:2f:
         02:41:8d:83:e2:a5:43:df:23:c4:57:84:74:1c:79:68:22:90:
         4b:43:ec:33:00:2d:c4:35:e8:f0:25:1b:30:d4:74:6a:57:a7:
         a9:f4:53:26:e6:3f:98:f5:e7:75:2c:ac:11:f8:db:e9:9c:29:
         06:ac:34:ac:29:d5:63:bc:d9:1b:30:bd:8d:b6:c1:8c:a1:7b:
         d8:6f:71:29:dc:ee:29:26:b8:07:19:26:72:2a:de:51:3f:54:
         c7:45:9d:91:c5:08:63:88:00:04:f9:c9:38:9f:e0:0c:da:51:
         8a:2f:67:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:39:19 2025 by rpki-client