Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/1cde9f88-4622-3f2e-a68e-368995e83427.roa
File:                     1cde9f88-4622-3f2e-a68e-368995e83427.roa (raw, json)
Hash identifier:          nmpNFgCSjR1TJUPsMbLmNiLQNKiayqWov7yAlfDS/HY=
Subject key identifier:   44:3B:AD:A0:AC:54:08:E4:C7:8C:39:11:0F:18:4B:0B:C6:18:96:20
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F43285849A8E9E26246F3664357755500
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/1cde9f88-4622-3f2e-a68e-368995e83427.roa
Signing time:             Sun 27 Apr 2025 01:00:46 +0000
ROA not before:           Sun 27 Apr 2025 01:00:46 +0000
ROA not after:            Sat 26 Jul 2025 01:00:46 +0000
asID:                     14618
IP address blocks:        192.67.137.0/24 maxlen: 24
                          192.67.138.0/23 maxlen: 24
                          192.67.140.0/22 maxlen: 24
                          192.67.145.0/24 maxlen: 24
                          192.67.146.0/23 maxlen: 24
                          192.67.148.0/22 maxlen: 24
                          192.67.153.0/24 maxlen: 24
                          192.67.154.0/23 maxlen: 24
                          198.55.32.0/21 maxlen: 24
                          198.55.40.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a8:e9:e2:62:46:f3:66:43:57:75:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Apr 27 01:00:46 2025 GMT
            Not After : Jul 26 01:00:46 2025 GMT
        Subject: CN=6d994bc1-bb8a-4b0f-9eac-6646ff093455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5a:ff:94:52:45:d2:b4:77:4f:d2:bc:73:32:
                    4a:b9:9f:62:f7:34:22:1a:a0:09:41:be:ad:fa:91:
                    16:4b:f0:9e:b2:9e:fa:5a:e7:e1:3d:ab:e1:4f:b8:
                    08:36:7f:f0:3f:22:fa:18:02:f5:69:2a:c3:92:61:
                    92:3f:69:75:0f:b2:69:96:f8:10:a3:8a:5c:94:a7:
                    bd:5c:cb:f9:ea:d3:2b:b5:e3:36:63:2a:25:2e:a2:
                    1e:c5:5d:07:eb:b1:4a:da:2e:fb:5d:ba:b2:e0:47:
                    10:3f:be:51:68:ce:82:f1:87:a4:d3:5c:db:2c:01:
                    76:5c:ff:6a:28:eb:ab:27:70:fb:8e:35:c4:93:72:
                    e4:c7:51:93:81:55:b8:e3:12:ae:17:6b:33:10:37:
                    c6:1d:07:e4:94:59:e6:00:09:94:5d:b4:eb:6b:f1:
                    e5:ae:b9:a8:9c:8e:f0:04:ce:26:60:9e:88:e7:a9:
                    57:a5:c7:40:70:b6:2c:b0:20:8f:42:7e:aa:27:c1:
                    b0:e5:45:95:09:30:88:51:13:79:84:33:d6:71:98:
                    55:9d:51:6f:28:70:c8:7f:98:75:58:90:de:9c:35:
                    35:dc:38:49:93:8d:cc:f7:20:ef:d6:6d:b0:d0:13:
                    c7:43:76:56:0e:fa:06:07:f4:b9:51:19:ff:e1:01:
                    85:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3B:AD:A0:AC:54:08:E4:C7:8C:39:11:0F:18:4B:0B:C6:18:96:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/1cde9f88-4622-3f2e-a68e-368995e83427.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.137.0-192.67.143.255
                  192.67.145.0-192.67.151.255
                  192.67.153.0-192.67.155.255
                  198.55.32.0-198.55.41.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:f7:33:04:c5:3e:9d:9f:c0:8b:18:d3:bf:be:25:52:d2:b5:
         13:6d:9c:3d:91:17:68:e8:e3:46:c7:fe:c4:c9:e3:37:e7:f4:
         c5:a1:61:56:f9:5c:ea:09:b7:ed:c9:68:b7:06:c0:0b:5b:00:
         f8:b1:b5:11:f0:ad:25:da:17:aa:ec:bf:84:56:1c:84:ea:8e:
         c6:44:22:3b:19:eb:ea:5f:04:52:c1:de:93:68:6b:29:97:31:
         fd:d1:e1:e3:7d:26:53:04:bb:f3:2e:cb:c1:81:3e:76:21:22:
         99:2c:c6:48:06:3b:28:b3:57:d4:e8:d2:12:85:d0:77:c7:f5:
         a1:2f:42:a3:a9:ed:f8:8e:8d:78:76:b1:14:98:ba:8e:83:3a:
         40:ea:12:8f:d1:2a:c2:c0:60:60:ac:de:4e:b0:7d:3e:e7:e0:
         bf:5d:e1:7d:1a:dc:45:b0:78:c5:17:3f:9f:48:69:62:62:f4:
         4e:f6:ab:3a:ff:48:21:19:03:13:88:50:fa:98:33:ba:4c:77:
         6e:6b:43:c3:9b:bf:6f:ce:f9:99:97:8b:bf:cf:e3:72:7e:12:
         8d:ff:9a:aa:2d:11:5e:9f:f2:f6:73:22:05:97:f2:af:0d:ac:
         b1:c5:84:e0:7a:a0:53:bf:74:b0:5d:de:5e:ff:8a:ef:12:53:
         a5:bf:43:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:51:42 2025 by rpki-client