Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/93a1b843-74a2-369d-b6df-752f028943a5.roa
File:                     93a1b843-74a2-369d-b6df-752f028943a5.roa (raw, json)
Hash identifier:          tZmhGKSjSNM4nPMQIE+g73m2KMDqogreEpwH2z8IWHs=
Subject key identifier:   23:1C:70:08:B1:4D:6B:44:1A:D5:E4:D0:CC:C9:A5:DF:77:27:EC:69
Certificate issuer:       /CN=cf016678-dab3-43d1-b7ea-5d3ad8148e97
Certificate serial:       010D0C9F4328584A3FAAD8FF5F890033C7C5BD00
Authority key identifier: 46:85:D2:50:6B:90:50:D3:17:93:6E:11:71:EA:C3:8B:99:E5:01:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/93a1b843-74a2-369d-b6df-752f028943a5.roa
Signing time:             Fri 20 Jun 2025 01:00:51 +0000
ROA not before:           Fri 20 Jun 2025 01:00:51 +0000
ROA not after:            Thu 18 Sep 2025 01:00:51 +0000
asID:                     4186
IP address blocks:        192.104.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3f:aa:d8:ff:5f:89:00:33:c7:c5:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf016678-dab3-43d1-b7ea-5d3ad8148e97
        Validity
            Not Before: Jun 20 01:00:51 2025 GMT
            Not After : Sep 18 01:00:51 2025 GMT
        Subject: CN=90c545ad-9a58-4f3f-bd26-90a63307cbf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6c:9b:0d:00:0d:db:6a:e7:2b:61:b4:0b:d7:
                    b2:39:19:dd:5b:8c:f3:04:ef:39:35:cd:78:cf:ac:
                    22:85:17:2c:54:b8:54:99:29:36:16:74:91:aa:3f:
                    34:b1:a5:86:6f:60:b3:6d:2a:51:a2:d1:9b:c6:c6:
                    c9:f3:df:12:2a:b1:d7:99:b2:07:69:54:13:90:c8:
                    64:b7:98:f3:eb:8b:23:f6:ac:31:6e:7d:f9:de:03:
                    b7:dd:b0:6c:cc:1e:ea:37:37:8f:98:7d:ae:f3:04:
                    3c:34:9f:5a:1d:e2:18:51:51:07:3d:70:e4:33:5e:
                    94:9a:5b:60:80:a5:4c:27:d1:1a:92:be:31:dd:c3:
                    63:6f:9b:34:be:01:cc:9c:e3:db:c8:33:28:4e:c4:
                    c4:d8:4c:30:73:ec:80:c7:18:48:9a:17:96:e6:2a:
                    fc:3d:73:b9:12:af:f8:2b:d4:b9:67:85:49:88:d9:
                    f2:29:ce:76:cd:11:67:27:01:32:a9:6b:30:db:48:
                    4e:36:81:1c:70:c3:8a:a0:c6:14:19:41:be:9c:03:
                    89:61:ec:87:19:27:06:14:fc:3d:b3:54:0d:1c:55:
                    99:d3:76:7a:58:cf:b3:d9:f2:a4:04:aa:9e:d8:08:
                    96:25:f9:9c:8d:0c:74:35:66:26:e9:51:98:82:e9:
                    9b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:1C:70:08:B1:4D:6B:44:1A:D5:E4:D0:CC:C9:A5:DF:77:27:EC:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/93a1b843-74a2-369d-b6df-752f028943a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.crl

            X509v3 Authority Key Identifier:
                keyid:46:85:D2:50:6B:90:50:D3:17:93:6E:11:71:EA:C3:8B:99:E5:01:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.104.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:36:24:e8:a3:16:3a:7a:86:4c:5a:9a:d6:f1:ec:e8:a4:9b:
         1b:8f:76:04:be:f0:20:fc:d7:ab:ba:ca:a2:ba:b0:9e:b6:dd:
         8b:c3:ce:7f:18:01:d8:4f:3c:d8:3c:cf:35:31:8e:39:bc:76:
         c5:df:27:1f:91:d5:10:99:53:93:df:70:28:fd:b6:23:bd:44:
         06:29:ee:b7:92:91:94:f9:eb:25:70:82:db:0e:94:d3:b9:4c:
         d1:f3:4e:5d:88:2a:b9:31:b8:bc:26:b5:55:36:94:18:10:64:
         0f:7e:f3:e4:bb:75:02:98:92:77:62:50:d7:83:6a:65:12:64:
         55:43:fd:3e:a0:20:67:76:51:4c:17:10:80:fb:86:a9:ae:28:
         36:85:f4:f0:5a:b4:ce:05:4c:7c:0c:43:34:7f:62:6e:86:4a:
         9d:a9:2d:67:ba:59:c2:bd:a2:dc:b7:f5:82:6c:ca:3c:77:4b:
         1e:98:01:dd:33:82:a4:e7:05:e8:2a:b1:2d:c8:44:d5:8f:5f:
         8a:93:c4:fe:88:14:b7:0b:ac:21:1a:2c:bd:7c:dc:df:fe:aa:
         c7:2d:cc:93:f5:38:20:93:26:b4:6d:f3:06:0c:9e:87:73:87:
         65:69:b3:4e:da:3b:51:b4:07:40:21:af:39:ee:75:cc:e4:67:
         6a:74:58:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 23:07:21 2025 by rpki-client