Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/b56ea2ad-090c-3a33-986e-4939a8ecb40b.roa
File:                     b56ea2ad-090c-3a33-986e-4939a8ecb40b.roa (raw, json)
Hash identifier:          zyZwb8KPjZKqt1qez8IxpAcRLmoHAVuLpGHaWhACZIs=
Subject key identifier:   55:11:0D:8B:8C:5E:1E:B4:28:D9:16:94:16:91:B7:18:6E:65:D7:E0
Certificate issuer:       /CN=32e1eff5-1423-4100-89f4-3340efd8f1ea
Certificate serial:       010D0C9F43285849B335B007144283AC251B3CE0
Authority key identifier: 25:40:2E:DA:F7:51:96:33:82:42:E8:DD:64:00:E5:D4:11:88:E7:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/b56ea2ad-090c-3a33-986e-4939a8ecb40b.roa
Signing time:             Wed 30 Apr 2025 17:31:42 +0000
ROA not before:           Wed 30 Apr 2025 17:31:42 +0000
ROA not after:            Tue 29 Jul 2025 17:31:42 +0000
asID:                     393577
IP address blocks:        192.104.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/32e1eff5-1423-4100-89f4-3340efd8f1ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/32e1eff5-1423-4100-89f4-3340efd8f1ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b3:35:b0:07:14:42:83:ac:25:1b:3c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32e1eff5-1423-4100-89f4-3340efd8f1ea
        Validity
            Not Before: Apr 30 17:31:42 2025 GMT
            Not After : Jul 29 17:31:42 2025 GMT
        Subject: CN=fb6ca9ba-57a8-414c-b4b0-07670a73b370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b0:22:4a:62:dc:99:01:cf:76:45:1f:e2:6e:
                    73:12:5a:41:13:0d:62:10:6a:39:2c:97:9b:c7:e4:
                    d4:4f:88:4c:f1:3e:1b:22:57:6b:48:0e:5e:9c:6d:
                    9b:1d:fc:bd:33:ab:d1:a7:53:99:f7:17:df:a0:af:
                    b0:f1:00:7f:00:56:76:f1:87:c0:5a:e2:3e:57:bd:
                    79:bd:b7:cd:95:73:85:96:d4:30:73:ee:cf:3e:10:
                    51:6d:af:85:54:7e:88:b6:46:96:30:64:2a:34:4b:
                    27:d3:06:9d:62:aa:63:56:ee:1a:75:f9:60:f2:65:
                    2d:83:19:43:41:7f:3a:41:4a:c9:66:98:85:f7:b1:
                    d8:4f:80:fb:81:ff:19:4f:be:84:19:a6:c8:8e:77:
                    a9:ba:87:0a:7d:c3:8b:58:18:e8:3e:25:ec:c8:9a:
                    71:83:9a:62:cf:2b:b8:e4:17:10:91:db:29:a4:27:
                    6d:bb:49:b9:fa:4c:b1:59:a9:3a:25:69:aa:df:af:
                    1a:3f:11:90:40:87:56:07:eb:cc:4a:a1:b5:ba:ea:
                    63:35:b7:e8:0b:b1:fa:9a:fe:6d:6e:49:e2:ca:a3:
                    88:12:26:67:ee:6c:d0:e8:83:14:5f:41:61:2e:71:
                    d9:b0:58:a6:c0:ae:77:ca:7c:29:32:e2:c7:f6:f5:
                    68:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:11:0D:8B:8C:5E:1E:B4:28:D9:16:94:16:91:B7:18:6E:65:D7:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/b56ea2ad-090c-3a33-986e-4939a8ecb40b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/32e1eff5-1423-4100-89f4-3340efd8f1ea.crl

            X509v3 Authority Key Identifier:
                keyid:25:40:2E:DA:F7:51:96:33:82:42:E8:DD:64:00:E5:D4:11:88:E7:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.104.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:a7:38:05:41:5b:e2:05:b7:7f:4c:2c:4f:7e:12:14:29:ce:
         15:1b:2f:5d:e4:52:0d:6e:c7:76:77:b4:07:8b:c7:6a:32:32:
         cd:26:07:8f:4b:6b:8b:0b:a6:24:9a:3b:a3:0f:ca:2b:25:eb:
         dc:ee:ea:03:57:46:89:8d:a1:2c:95:8e:6c:ac:50:7d:8c:2a:
         7d:40:2f:74:b6:3b:48:53:e2:6e:fb:4b:ee:b5:f3:76:65:f6:
         0f:6c:e9:b7:dc:f5:15:74:4f:5d:be:cc:b2:39:33:b9:e2:8d:
         80:e6:4a:a0:5e:1a:1d:1c:cf:4a:51:2a:43:ba:dd:36:c5:cc:
         38:b2:dc:10:b6:5f:e2:a3:24:db:00:30:48:bb:7c:9a:c9:a5:
         36:d4:2d:64:26:ce:65:63:1f:3b:27:7b:ba:29:ff:8b:e7:88:
         f8:da:a1:f5:52:a2:90:3a:63:55:da:05:12:c1:a2:d5:30:2e:
         75:c5:7b:58:2d:0e:34:cb:e5:fb:84:a9:f5:4a:1a:62:75:99:
         0e:df:55:fb:49:6a:f5:f1:1d:40:4d:b6:73:bf:04:5d:31:97:
         7e:28:5a:34:7f:52:a1:1c:eb:68:b5:04:58:db:c5:15:26:b0:
         12:20:a9:f1:46:cc:4c:76:82:23:dc:ef:1a:43:73:65:9b:30:
         24:3b:a5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:23:40 2025 by rpki-client