Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/f1aed8d6-940e-3937-85b2-13f8369430be.roa
File:                     f1aed8d6-940e-3937-85b2-13f8369430be.roa (raw, json)
Hash identifier:          5khLamzq/WEMON37ceE3IvgeXQ63/TW3v87a1Vy8gO8=
Subject key identifier:   CE:DE:62:CA:43:9E:B7:D4:4C:E0:2F:CD:4A:E0:AA:93:37:22:C0:64
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858491AA6BCF19F025070A71F91A0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/f1aed8d6-940e-3937-85b2-13f8369430be.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     15290
IP address blocks:        159.18.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:bc:f1:9f:02:50:70:a7:1f:91:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=a5e5a192-26a2-4eaa-b79a-ba2c89b59aa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:31:a6:14:34:b0:53:b8:c0:2a:ef:83:39:65:
                    90:d9:61:55:23:c3:c7:08:cf:84:e4:23:bf:b9:ef:
                    04:dd:53:cc:8b:99:df:b7:cf:a6:86:e3:58:87:ad:
                    14:ba:eb:25:68:4e:30:4c:38:54:dd:af:3e:46:38:
                    cf:0a:58:44:c6:ea:df:a6:b9:f7:35:f6:98:68:2c:
                    8c:d2:01:24:bb:42:90:d5:20:6c:61:89:10:d3:61:
                    a3:9a:76:da:c6:16:db:0a:ac:6a:45:6c:28:7c:2c:
                    7c:b5:3f:45:e5:de:c2:92:f0:3e:57:25:10:fd:0f:
                    5f:a0:eb:26:44:51:23:31:b0:29:66:e9:4e:7e:5f:
                    45:ac:20:2a:2a:66:f4:78:cf:24:98:64:ec:9f:fb:
                    11:29:01:47:50:11:4f:bd:53:7a:7a:82:6c:24:5d:
                    1e:83:23:be:1b:de:29:25:ad:70:e4:18:9f:95:ad:
                    a1:3a:09:4a:b1:93:44:6e:81:32:3e:55:c9:88:1f:
                    51:48:2c:c3:49:c2:fc:f8:2c:d6:c1:6e:5a:4e:a9:
                    7e:d4:a0:21:b3:b0:a2:90:9f:8f:ff:1a:d7:11:25:
                    62:2d:dd:80:e9:21:a8:ea:54:6e:45:c7:02:0a:39:
                    dc:20:e9:76:7d:10:0f:a1:0f:5f:8f:65:6d:33:b4:
                    34:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:DE:62:CA:43:9E:B7:D4:4C:E0:2F:CD:4A:E0:AA:93:37:22:C0:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/f1aed8d6-940e-3937-85b2-13f8369430be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:47:53:05:0b:a0:9a:1f:47:55:30:99:1b:d9:4d:e5:fd:08:
         4e:01:d8:14:1b:54:1c:db:e7:e1:31:5a:70:a7:78:8c:20:ea:
         ae:23:1a:39:83:63:5e:bf:7a:1b:41:67:94:fa:ec:72:6d:98:
         41:20:17:fc:92:8d:ce:94:5f:a5:49:1b:ac:ac:e1:06:e6:fa:
         81:7d:fb:db:bf:da:2d:98:43:a5:6e:19:e6:bd:36:98:14:00:
         13:d4:72:90:13:4f:ab:11:c4:63:42:57:da:4c:60:4b:d6:60:
         72:f8:d6:86:68:31:da:3c:2f:c7:52:ce:a4:df:de:0b:36:93:
         31:5e:18:03:67:a4:e1:cb:ef:e6:7b:47:88:a6:cc:b7:bd:86:
         46:72:4a:67:40:a7:c4:5b:44:69:14:c6:63:76:b7:88:0c:9f:
         7e:fd:af:17:c1:08:ee:cf:29:d6:d2:2a:79:b6:83:42:f0:eb:
         5d:c2:76:b5:b1:68:09:0f:48:2e:75:ce:48:69:4d:ca:11:c4:
         45:90:24:c9:c7:96:e4:36:b3:be:c7:d9:38:5a:46:39:ca:77:
         34:16:b5:f3:8c:46:4c:bf:8b:57:cf:b2:3f:86:2c:e6:48:69:
         02:54:cf:bb:6c:c8:cb:bc:a1:c0:13:6e:f2:5d:03:be:c9:f2:
         68:1b:d9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:44:14 2025 by rpki-client