Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/34e97f48-2222-35e5-b4f0-e7381b30f440.roa
File:                     34e97f48-2222-35e5-b4f0-e7381b30f440.roa (raw, json)
Hash identifier:          JrAEVp86KK07JVBP6otVY4lo7h5DuzeaKSJoT/Pm16s=
Subject key identifier:   A4:F4:9F:8F:3F:EB:02:1B:5C:9C:94:0A:76:36:46:78:20:74:BA:EC
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285849AA4F6BC67722002316A48D00
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/34e97f48-2222-35e5-b4f0-e7381b30f440.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     55293
IP address blocks:        190.92.128.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:6b:c6:77:22:00:23:16:a4:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=17cfe186-1e6d-4677-88c6-0249810c9eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1c:4e:70:11:83:dd:ad:e0:2d:ee:de:a2:90:
                    b4:66:7c:15:eb:6a:24:8b:fa:1c:f9:21:29:ce:ce:
                    1a:f2:0c:8d:a0:41:c1:c0:6a:0d:38:da:ee:7e:ac:
                    df:bd:2b:a9:e5:15:5d:2c:06:d7:64:ae:4b:f0:49:
                    3f:f4:88:20:da:37:ec:01:0a:b9:2d:29:7a:67:b4:
                    05:da:2f:68:a2:86:9c:b5:5a:f1:3a:f9:e8:be:03:
                    34:f8:ac:5a:54:09:50:e2:c3:f3:b3:49:dc:bd:15:
                    7e:6f:51:8b:79:b8:9f:c7:0e:95:67:b3:87:cc:26:
                    f3:17:26:3b:3b:5e:db:1c:5b:df:d9:6c:2e:53:51:
                    f8:05:f4:b3:56:3a:89:a1:60:ec:c0:d9:73:07:04:
                    1b:d9:5f:57:df:18:5a:6f:e6:ed:11:e9:dd:7d:03:
                    f4:15:ba:f0:e0:99:8b:7a:1a:0d:fe:3a:e0:34:41:
                    ad:88:44:ec:bc:49:90:e2:3e:a2:aa:b6:d4:83:fd:
                    41:0f:13:ac:72:ac:9c:3b:b0:87:6b:67:ff:1f:27:
                    4c:04:70:6a:94:ce:ed:6e:8f:12:44:b4:29:eb:b7:
                    c6:f9:b2:89:6f:f4:8f:28:d7:c0:f6:36:b8:24:28:
                    ec:da:08:28:43:c8:77:a7:6f:5e:46:fd:7e:a5:c2:
                    07:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F4:9F:8F:3F:EB:02:1B:5C:9C:94:0A:76:36:46:78:20:74:BA:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/34e97f48-2222-35e5-b4f0-e7381b30f440.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.92.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:11:65:af:64:82:cb:a5:2b:bf:8f:68:53:2a:54:85:f3:2a:
         31:dd:85:5c:62:03:d1:48:3a:33:48:3e:fb:df:9a:4c:94:1b:
         c1:1f:53:de:46:fe:43:3c:40:a2:1a:32:cc:11:ce:66:a6:10:
         89:89:34:49:6d:e9:a5:91:dc:30:d8:14:80:1a:38:59:05:2c:
         99:54:94:66:bc:c0:d3:19:07:d2:b2:d2:a3:07:ce:ea:6f:29:
         c2:df:c2:33:eb:5a:3f:e1:74:c4:c1:8b:13:1d:9c:02:f6:7a:
         39:76:53:ff:48:af:b1:49:2f:cc:e9:59:41:df:3f:b3:c5:03:
         1d:23:79:db:22:a4:49:5a:ee:db:15:ca:6f:eb:88:71:f5:b1:
         d1:e3:4d:6b:8d:41:56:d8:d5:31:8c:07:c4:3d:0d:81:a1:44:
         5f:18:02:4a:fd:c7:e6:3f:b3:a8:a4:65:7d:01:07:0d:01:7a:
         65:bd:43:4f:40:5b:03:3d:6d:6c:08:2e:fe:48:f2:78:37:d5:
         da:1a:83:f4:2b:db:11:b6:0c:59:93:ef:4c:81:3f:7a:c2:6d:
         67:de:46:e1:79:5c:b3:0d:00:46:b4:fa:7d:30:8a:66:79:4e:
         be:61:98:e2:e4:d3:2a:88:6b:1e:d0:f6:65:87:9e:46:68:3a:
         ba:b1:a3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:27:34 2025 by rpki-client