Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/b451892a-5138-3693-a8ec-542e202655c0.roa
File:                     b451892a-5138-3693-a8ec-542e202655c0.roa (raw, json)
Hash identifier:          RmXET7Aq6N8IaGPAgNiQCJ2Sc6pCVlic4om0Ocsaa6g=
Subject key identifier:   37:C3:55:65:99:F1:EA:BE:38:4D:D0:A8:C7:36:B7:23:FA:74:7D:7A
Certificate issuer:       /CN=f3281a82-6c17-4658-80f7-ee1327b4779a
Certificate serial:       010D0C9F43285849C20A1D623A8C3191573E2F00
Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/b451892a-5138-3693-a8ec-542e202655c0.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     22418
IP address blocks:        192.157.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:1d:62:3a:8c:31:91:57:3e:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=6c008c55-e99f-48ed-b4fb-18f4d8b2499a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:19:c9:e4:fd:40:8b:18:4b:97:1e:0b:80:a8:
                    44:ff:54:99:1e:ef:bd:b3:42:71:44:50:e0:76:11:
                    8d:3b:4f:93:45:00:c9:c8:5c:f4:90:93:15:da:9c:
                    c7:69:1b:59:8e:57:aa:1a:bf:14:75:e4:07:ea:14:
                    b3:48:e6:eb:49:42:e9:65:45:2e:46:a5:21:be:75:
                    24:7e:bb:22:2d:4f:84:f4:1c:44:eb:ea:45:e4:8b:
                    11:87:4e:97:26:ec:1a:3f:e2:5a:28:aa:ee:b4:15:
                    59:b7:e8:57:f7:54:bf:ca:28:9b:0a:0e:e9:9d:07:
                    f6:55:6a:1f:66:ca:cc:70:9f:3a:c7:90:92:06:00:
                    7f:9f:01:06:0c:59:1a:11:c4:1d:f7:63:a6:4e:6e:
                    f8:8d:a9:ab:86:f6:5f:d4:c7:9e:67:ce:64:b8:54:
                    b0:f9:c6:6a:a6:f0:87:a5:a9:35:6c:20:ea:1a:b8:
                    e9:f2:f2:b2:79:8a:c9:5a:78:22:8b:c8:8f:a5:c7:
                    a9:1c:78:89:9e:ea:cd:d7:f2:37:a7:c8:72:27:b3:
                    7f:92:29:25:d7:24:7d:ec:79:84:df:42:72:ef:93:
                    81:aa:52:16:6b:bc:7f:40:67:e2:98:b4:d2:92:e1:
                    a5:ed:a7:8c:0c:55:23:dd:d8:eb:53:7e:10:70:b4:
                    7c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C3:55:65:99:F1:EA:BE:38:4D:D0:A8:C7:36:B7:23:FA:74:7D:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/b451892a-5138-3693-a8ec-542e202655c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl

            X509v3 Authority Key Identifier:
                keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:d4:36:0c:9c:d4:b1:37:90:1c:a0:14:64:9e:81:1f:56:c3:
         69:46:a6:6a:63:d1:1b:02:83:73:ca:92:04:d8:db:c0:0a:02:
         64:37:1b:c2:c4:39:8b:24:b6:2e:8d:83:2f:74:91:a5:8f:54:
         97:d4:45:86:9b:cd:41:b2:0d:71:d9:55:23:52:99:a5:dd:eb:
         53:17:9d:21:a9:75:0b:2c:e8:92:1d:fa:ac:12:a8:af:6d:fa:
         44:7d:7e:31:03:2e:0c:ba:08:e4:34:4c:c8:e8:7f:8e:14:20:
         17:97:00:10:ee:be:c5:85:81:a6:cc:a3:60:50:1e:32:e3:22:
         ee:1f:15:97:1b:66:b2:99:5c:ad:5a:22:36:46:53:e4:67:b3:
         29:3e:fa:57:0c:ec:20:e7:7d:59:05:6d:e5:30:a7:c0:54:5b:
         0c:99:57:1c:46:13:77:69:b6:b4:53:c1:05:0b:f2:0a:aa:b9:
         45:96:5b:d4:41:cb:31:81:c6:03:59:1d:9a:7b:45:6f:c7:b9:
         4f:09:38:d9:11:89:9c:4b:9d:0a:cc:32:bf:eb:71:d8:2b:28:
         34:aa:88:fc:2a:3d:b6:23:5e:ba:c3:92:87:08:4c:60:34:4c:
         3c:5d:c0:a3:0e:1c:13:ec:f7:5d:79:8e:64:ef:a4:4a:d3:ed:
         ca:63:22:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:33:23 2025 by rpki-client