Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/abc03ea6-f529-3aa9-8649-ff39d4312020.roa
File:                     abc03ea6-f529-3aa9-8649-ff39d4312020.roa (raw, json)
Hash identifier:          lqQIAYbeLAIa76Eq9DAcn+9A9sThpHmiEyTqQm0w0O8=
Subject key identifier:   54:B9:5C:3E:F9:E8:8F:80:7C:A6:43:D1:DD:74:CE:56:4B:40:6E:59
Certificate issuer:       /CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd
Certificate serial:       010D0C9F43285849C4D4B3FA8A50361AAC892A80
Authority key identifier: 31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/abc03ea6-f529-3aa9-8649-ff39d4312020.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     395287
IP address blocks:        192.104.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:b3:fa:8a:50:36:1a:ac:89:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=861a8ef0-5fae-4bb6-ad6b-8a60206b8a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9b:da:37:b3:b3:d4:8e:88:bb:a2:18:d7:9a:
                    a0:15:1d:90:89:53:31:ef:48:38:bc:4c:d8:b6:91:
                    85:2b:ac:9a:2a:b2:1d:02:df:1a:6f:e4:eb:4c:53:
                    0e:81:02:bc:c3:bf:cb:a5:05:02:94:41:55:e0:8c:
                    4c:90:97:04:1b:8d:d4:08:4e:68:5c:39:c8:33:d6:
                    df:86:c0:cb:13:26:eb:46:25:09:0c:72:82:c6:c8:
                    90:85:9d:fd:60:4f:f7:13:81:b9:50:e0:5b:f6:4f:
                    04:1b:15:32:92:62:c9:00:16:83:f4:80:12:73:82:
                    41:74:fd:0e:78:df:d1:ab:5c:07:6e:73:c5:d7:64:
                    0a:d1:54:e1:83:7a:15:31:00:c6:dc:82:3f:c2:6f:
                    28:cc:6d:68:e1:0f:e8:8e:d3:b0:8d:af:eb:f4:67:
                    36:b5:c9:cf:5b:3b:8e:b8:fc:4f:0b:98:10:78:c3:
                    39:60:3d:6b:12:69:d5:a4:62:60:ca:e4:59:30:fd:
                    74:f5:84:52:8d:01:eb:9f:37:5b:76:18:f5:cf:00:
                    d8:a1:da:0f:54:98:f5:f5:51:b1:99:e2:4b:21:40:
                    cc:34:e0:6c:99:c1:62:25:93:62:39:db:b7:a8:f2:
                    d2:0b:ac:30:df:18:b6:66:f3:18:f4:d3:22:d8:62:
                    69:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B9:5C:3E:F9:E8:8F:80:7C:A6:43:D1:DD:74:CE:56:4B:40:6E:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/abc03ea6-f529-3aa9-8649-ff39d4312020.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl

            X509v3 Authority Key Identifier:
                keyid:31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.104.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:e2:92:73:20:e6:52:06:03:57:16:ff:76:6f:39:2f:78:87:
         3f:9c:2a:9c:c0:b3:9f:8c:f7:79:6c:4a:e3:5a:4b:f6:cc:27:
         20:1a:ff:6b:ea:f9:25:99:aa:75:d2:bd:53:16:c9:c8:85:ed:
         9a:f1:b2:9f:ad:97:6f:7d:89:f0:9a:9d:7e:19:20:f5:64:e9:
         d4:7e:86:86:d1:b9:d9:93:90:9e:c5:5d:54:41:21:d9:0c:d9:
         db:1d:62:f2:b9:b7:4f:0d:86:e4:a3:38:84:c1:27:97:6e:78:
         3e:05:bd:ec:94:69:bb:a6:84:f7:e5:92:b0:20:96:9a:41:bd:
         b6:35:20:27:3a:2b:f6:e2:20:08:0b:51:8b:37:a7:0f:82:a3:
         0e:a0:9e:d5:84:dc:7a:57:62:9f:e6:2c:a8:c6:e2:4f:c2:3c:
         e7:75:bb:b1:5f:8e:eb:af:15:31:17:18:41:f8:b3:6c:88:32:
         82:16:7f:24:12:7d:5c:80:7a:ba:91:c0:34:85:3b:cc:1f:c8:
         a9:da:c7:a9:33:ac:62:11:38:38:83:e1:6d:f2:a0:c0:52:c4:
         c6:8b:96:9f:1b:6a:11:75:5b:ac:a3:bd:4e:ed:31:6a:1f:94:
         b0:fe:f2:cb:93:2b:77:7c:ea:af:02:25:f0:69:86:4a:75:99:
         c2:32:d9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:16:15 2025 by rpki-client