Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/0c90eb11-fdab-3352-ba16-e677a12cb711.roa
File:                     0c90eb11-fdab-3352-ba16-e677a12cb711.roa (raw, json)
Hash identifier:          HMrGwlzv+gJnWtjE/fGCOfHVNMNKez38eCcThnFJ3BI=
Subject key identifier:   A4:41:C2:1B:1E:09:C1:CA:08:6A:51:65:41:60:2A:2C:10:71:D0:80
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F43285849CBCFA3A88CF9E131F60E5E18
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/0c90eb11-fdab-3352-ba16-e677a12cb711.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     174
IP address blocks:        216.185.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:a3:a8:8c:f9:e1:31:f6:0e:5e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=cac5b302-0349-45c5-b8ce-79c96b4c289d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:db:71:d8:23:85:a6:2b:09:dc:d8:84:c3:9d:
                    06:4d:25:2f:b2:a4:72:94:21:45:fb:e8:14:36:f5:
                    ce:38:63:05:1c:33:52:c1:a3:e9:54:26:12:64:42:
                    d9:e3:24:36:5b:c4:a3:66:dc:fa:e6:68:41:9f:ce:
                    0e:01:e5:46:91:34:6f:80:de:81:a7:83:53:59:c1:
                    28:5d:b3:15:c8:27:84:6e:a9:a0:f8:e8:66:ad:ef:
                    6b:a8:6a:ae:db:7b:34:13:1b:5f:ca:d2:8e:1f:75:
                    34:54:39:b5:52:86:fd:3c:ae:f7:36:57:53:43:73:
                    dc:51:4c:bb:61:2b:91:3d:a0:ac:92:a0:27:ce:dd:
                    8b:42:60:14:d6:fc:8b:b3:71:5b:05:cb:07:84:b3:
                    de:7a:3d:e4:f2:d0:8b:8c:5d:05:9f:0a:c4:ad:ba:
                    31:0d:d2:45:ec:58:76:b5:50:7f:7f:61:12:42:b2:
                    9d:99:dd:fa:71:56:80:5a:ca:10:1d:03:43:be:67:
                    fb:43:c3:0a:c3:10:5d:23:6d:a6:28:da:e5:90:4c:
                    1a:fd:46:b5:d9:82:46:a6:d9:35:fc:d1:90:69:73:
                    43:46:cc:2c:e0:7a:8c:31:ad:6b:0b:1c:df:a8:ff:
                    fc:6d:e6:cf:a0:fa:1c:18:96:0b:bb:02:40:d8:65:
                    51:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:41:C2:1B:1E:09:C1:CA:08:6A:51:65:41:60:2A:2C:10:71:D0:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/0c90eb11-fdab-3352-ba16-e677a12cb711.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:e3:ad:af:7c:73:bc:df:73:6b:59:71:f2:5a:40:7e:03:1e:
         30:c5:e2:20:9d:17:56:6c:bc:3c:bf:63:d4:1a:4a:4b:e3:72:
         4f:d1:ff:9d:ba:29:04:aa:31:7d:ba:22:8d:03:f4:21:4f:87:
         96:9b:a6:7a:2a:3e:88:bc:37:ba:aa:f1:e3:bf:be:6c:9c:fe:
         ba:a7:9a:4a:86:7a:dc:d3:1e:e8:f9:30:56:c3:e5:7e:43:37:
         3b:14:c1:99:6b:5f:34:d5:ed:ba:06:fc:d8:0c:8d:74:6f:a7:
         ff:18:35:63:f5:45:a7:ec:f3:d2:40:97:7c:b6:99:13:80:a1:
         17:dd:c3:6a:cb:e5:81:96:37:83:27:03:8b:a5:cb:1d:e5:0f:
         e6:2b:76:fd:9b:bc:9b:8a:5c:9a:c3:59:71:03:ee:98:44:a6:
         d6:26:3b:2d:d1:98:69:e9:95:17:f4:9e:17:3f:e9:d1:52:3f:
         8f:fc:27:64:3e:e4:c6:15:e7:ac:c3:93:a5:32:7a:93:19:7e:
         4b:9a:df:8c:c4:84:df:f1:1c:15:f8:db:03:e8:63:19:dd:1c:
         60:1e:4b:c1:e5:e1:2e:ff:e2:cc:66:ce:0d:8c:1e:ab:0e:d7:
         85:43:d0:e9:9d:f9:ae:9e:05:a2:4d:89:f7:e3:c8:1a:9b:18:
         20:de:c6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:23:26 2025 by rpki-client