Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/db36983e-c4e6-3087-b2f5-4952185b9bb4.roa
File:                     db36983e-c4e6-3087-b2f5-4952185b9bb4.roa (raw, json)
Hash identifier:          oda5gExGfKhik8aV/HozN2etIckS5A89ajqS+qVAEgM=
Subject key identifier:   3D:AA:18:9F:A3:1D:53:DF:39:86:25:D5:9A:CA:26:A3:AF:FA:AD:BB
Certificate issuer:       /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
Certificate serial:       010D0C9F43285849C4D4C781D00D31FCA86EAF80
Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/db36983e-c4e6-3087-b2f5-4952185b9bb4.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     55178
IP address blocks:        192.230.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:c7:81:d0:0d:31:fc:a8:6e:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=b2c3834a-c96c-4a8f-a98b-5bfb80d72f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b8:69:a5:95:a9:0e:3d:16:de:c6:cf:81:c3:
                    50:54:b7:71:86:ce:d7:09:91:de:d3:f4:5e:b5:fd:
                    a0:7b:e6:f9:99:7d:46:8b:66:e8:1c:7a:b2:6a:8f:
                    db:36:23:ea:be:c7:83:65:55:d8:ce:56:78:eb:b0:
                    c3:96:88:11:66:7c:95:c1:3a:1b:32:7c:4d:55:ae:
                    a8:b4:9a:0b:b8:22:5c:53:00:5e:bd:d8:67:1b:93:
                    ea:99:08:04:e0:7a:da:3b:7b:cd:c0:8d:29:7d:3d:
                    c7:39:f2:3a:42:2f:6a:0e:34:93:1d:c6:85:04:5e:
                    a4:22:80:44:29:9a:9f:1e:4a:95:0f:cd:14:6b:5d:
                    e9:3e:45:d7:d0:51:3d:79:64:63:5f:fc:f9:21:f5:
                    c2:2e:b0:3e:a4:c0:70:c7:ef:7b:39:44:61:cd:94:
                    66:c3:85:d0:87:91:d1:fc:2d:32:0c:ab:e8:86:2c:
                    7e:84:63:2b:40:76:9e:c3:9a:d9:6b:b1:dc:3b:44:
                    76:15:47:32:98:b1:05:e7:21:c0:20:9e:c7:7a:31:
                    4c:ff:bc:6f:0d:96:92:50:82:9a:af:d6:8f:1f:97:
                    a1:0d:26:a6:9c:b3:ee:f8:e9:ef:c6:2d:3f:2b:6b:
                    4f:1d:6e:29:70:bd:25:4e:dd:35:85:01:99:5c:50:
                    8d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AA:18:9F:A3:1D:53:DF:39:86:25:D5:9A:CA:26:A3:AF:FA:AD:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/db36983e-c4e6-3087-b2f5-4952185b9bb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl

            X509v3 Authority Key Identifier:
                keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.230.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:8f:f3:90:d0:43:e6:d3:24:89:a7:fc:98:33:c9:2c:e4:bb:
         23:48:c8:22:c1:75:91:4c:3b:ff:b7:8e:5e:ca:0c:5e:cf:96:
         45:e1:bd:a4:5c:96:61:d9:bc:19:24:4d:1a:bd:51:33:d8:83:
         79:8b:d3:d9:01:16:b8:bd:ac:fc:cf:cb:bf:93:d5:b4:2a:76:
         20:0f:f6:88:57:37:98:26:c2:db:57:75:0e:a7:34:41:84:71:
         30:65:ce:dd:ef:06:a5:9a:c1:ad:ef:52:a9:02:c5:47:95:0b:
         9c:b5:b1:e8:d0:31:fb:b7:db:8c:c4:33:60:45:c5:0e:ac:4e:
         a0:06:f4:5f:e3:5d:f0:f2:a2:3b:c6:b4:15:03:3b:3d:5d:21:
         1d:ed:1e:9c:f9:c6:5d:ac:4f:58:fa:50:21:c9:1f:d3:92:31:
         1c:11:4c:a0:be:8c:c7:39:4a:d4:01:61:68:9b:a1:a8:b2:d4:
         06:9e:ef:ac:ba:ed:ef:a9:12:7e:83:ad:b3:d9:8f:87:85:8c:
         a4:55:36:b9:0e:5b:46:94:18:fa:17:32:ec:47:2a:7f:cd:0a:
         ee:95:88:5c:f9:2c:d4:83:de:72:f2:8a:1b:9b:40:d6:ff:7f:
         a2:64:ad:9c:b9:76:40:98:0c:33:f8:df:49:8a:80:fd:bb:20:
         fb:42:1c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:29:48 2025 by rpki-client