Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/967eaad3-c11f-369f-9120-3854ace1ae5d.roa
File:                     967eaad3-c11f-369f-9120-3854ace1ae5d.roa (raw, json)
Hash identifier:          8NZLQhY+lw6OX8iz2QzOSEWQyNVeCOsUB7ZR36fhgIU=
Subject key identifier:   7C:EA:92:66:68:12:70:E5:09:85:19:7D:D0:04:2F:44:37:E7:70:70
Certificate issuer:       /CN=145bac4b-d098-4846-b4b1-ac1761209cd4
Certificate serial:       010D0C9F43285849CE9A49963EF90436F0A0AD00
Authority key identifier: AB:FC:69:04:AA:F5:94:85:0E:C8:FB:C7:A1:22:07:1D:20:CE:ED:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/967eaad3-c11f-369f-9120-3854ace1ae5d.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     21681
IP address blocks:        192.86.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/145bac4b-d098-4846-b4b1-ac1761209cd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/145bac4b-d098-4846-b4b1-ac1761209cd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:49:96:3e:f9:04:36:f0:a0:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=145bac4b-d098-4846-b4b1-ac1761209cd4
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=996ca485-e5df-41ca-8f91-1b99fb72aea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:93:10:d0:27:b0:92:cd:11:d7:57:8f:31:e2:
                    68:65:a4:d5:f3:08:c7:3f:95:47:dd:b4:4f:3d:55:
                    0c:b5:2e:a3:6d:cc:6e:e0:35:a8:70:37:af:52:a1:
                    97:00:70:b7:5f:1b:8d:dd:f6:eb:5a:c8:0c:47:2b:
                    71:dd:f4:28:ab:6f:45:3e:01:58:47:00:2e:76:d1:
                    4d:6d:9e:a4:e8:5f:88:ea:ba:73:71:03:50:4c:cb:
                    65:ac:3f:e4:ae:01:a4:ab:25:7b:4a:31:7b:02:d7:
                    ad:f8:09:e7:e6:26:1c:01:16:eb:8b:52:a7:19:eb:
                    09:88:f3:a1:94:be:ae:a4:72:61:4e:87:90:a5:a6:
                    1a:26:2f:dd:37:68:9a:4a:1f:a0:61:07:40:04:3b:
                    a9:1b:fb:d3:b0:25:08:c1:cc:b2:2a:e9:3f:c1:19:
                    9a:96:23:63:9c:a5:52:65:4a:0d:f1:af:4d:3e:7b:
                    97:18:26:26:95:1b:9a:8e:d5:d2:d4:95:7b:a5:54:
                    c9:b6:ac:ba:8c:74:73:fa:ac:5e:32:2f:dd:7c:8d:
                    0a:4f:d6:2b:c1:2f:59:31:f3:d9:58:ba:23:dd:d4:
                    00:30:64:de:31:96:13:94:b2:60:fe:fb:18:8f:71:
                    06:ac:0a:6b:e6:6b:f2:90:4d:ae:71:b4:7a:e0:17:
                    d1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:EA:92:66:68:12:70:E5:09:85:19:7D:D0:04:2F:44:37:E7:70:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/967eaad3-c11f-369f-9120-3854ace1ae5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/145bac4b-d098-4846-b4b1-ac1761209cd4.crl

            X509v3 Authority Key Identifier:
                keyid:AB:FC:69:04:AA:F5:94:85:0E:C8:FB:C7:A1:22:07:1D:20:CE:ED:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.86.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:bb:71:f0:67:70:a2:2b:1e:a5:6a:ca:80:52:4e:e9:c6:31:
         14:c0:78:0d:ab:cb:c5:6e:28:65:e8:6b:e1:ef:dd:84:61:4d:
         14:29:34:df:a0:20:e8:a5:a8:86:dd:13:6e:66:ae:e1:0f:ae:
         80:34:47:6d:7b:01:d8:62:83:35:8a:a7:c7:d3:12:25:c8:4a:
         e8:67:71:dd:86:27:73:1c:c2:35:b3:e5:a2:12:6e:e9:22:c3:
         57:0b:fb:94:c4:51:4b:ce:90:b4:4a:a1:03:80:33:5e:26:5b:
         16:55:97:6a:db:30:d8:49:12:07:94:5c:09:2b:cd:b1:c6:80:
         ea:41:2d:a7:61:d0:d7:7a:aa:0b:4d:88:ec:b8:56:88:2f:e8:
         ba:5d:fe:4b:53:d8:5a:60:c7:9a:2c:12:4b:f8:39:95:25:22:
         f7:0b:6d:f3:20:79:ee:a2:6a:33:a2:6c:e9:1f:b8:c7:0f:74:
         08:0d:f5:af:2a:b4:10:57:ae:81:5a:13:58:ce:01:62:dc:2d:
         ed:be:75:5a:9c:e7:8b:52:36:08:ed:82:76:0c:59:23:fb:f7:
         8e:14:9a:30:97:3b:bb:0c:05:2d:87:1a:be:43:77:7c:db:67:
         75:52:c1:c6:be:ce:71:e9:7c:2f:46:3f:51:8c:f2:dd:ba:41:
         1e:18:3e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:41:20 2025 by rpki-client