Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/19859675-18fd-3bc6-9869-347dd824eb6c.roa
File:                     19859675-18fd-3bc6-9869-347dd824eb6c.roa (raw, json)
Hash identifier:          o4hSGtBn6bZh0HiKgcoMBVurBWSlz/6dN0Fd2WR3ksQ=
Subject key identifier:   DE:1C:6B:BC:E2:17:ED:EE:53:DE:42:F6:C0:78:02:B9:C2:67:56:F7
Certificate issuer:       /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial:       010D0C9F4328584902EBFD20F3F841F220B84180
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/19859675-18fd-3bc6-9869-347dd824eb6c.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     1273
IP address blocks:        166.63.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:eb:fd:20:f3:f8:41:f2:20:b8:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=20e56c2b-fe4e-4978-8d47-f06593be0606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a6:e9:36:5f:68:9b:28:ea:39:28:58:0d:81:
                    29:37:4e:79:c0:2f:af:14:f6:0d:f1:44:84:68:81:
                    0e:a2:ca:41:83:c8:54:a0:8d:01:2c:2a:1a:04:4c:
                    fb:2e:2b:db:4b:d6:da:99:5a:cb:c7:6a:da:41:17:
                    e8:cd:8b:f5:a1:c9:89:84:9f:3e:be:4a:20:0e:9e:
                    66:d3:58:c9:83:e3:4d:15:20:5d:bb:3d:a5:06:05:
                    dd:51:41:07:10:33:dd:f3:27:b3:c8:82:f2:fb:22:
                    27:e5:09:5b:0f:9e:e8:fb:16:5e:9d:38:e8:5b:7c:
                    10:7b:1b:d4:1e:7a:67:68:65:17:af:7a:2e:e1:0c:
                    8b:25:9a:13:a3:df:2d:44:19:a8:7d:bc:a2:40:87:
                    af:4a:55:4d:6f:82:4d:ea:9e:ff:86:fb:14:15:22:
                    06:97:ae:9b:a6:14:10:e6:75:d3:f3:2a:77:db:0d:
                    ec:cb:2a:95:25:38:97:bf:3f:f3:15:7c:f5:0f:e0:
                    82:c6:02:9e:44:0a:d1:7f:47:b0:02:6b:40:eb:48:
                    dc:1a:ce:2a:a8:16:9c:d9:f7:3f:26:27:36:00:f8:
                    b7:fa:89:f9:0b:d8:7f:e0:60:5e:c7:3d:ef:03:75:
                    84:e3:76:1d:b0:3d:6e:ef:2c:b1:af:af:aa:0b:e8:
                    ca:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:1C:6B:BC:E2:17:ED:EE:53:DE:42:F6:C0:78:02:B9:C2:67:56:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/19859675-18fd-3bc6-9869-347dd824eb6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl

            X509v3 Authority Key Identifier:
                keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.63.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:20:c6:ee:01:68:1e:24:81:20:d9:36:9c:16:ef:96:9f:24:
         89:e8:24:6d:90:16:0c:91:7b:ea:94:d6:32:b6:5a:5a:86:4d:
         4e:79:a3:31:e7:d8:d9:04:94:ed:d6:f2:9e:9d:cc:c0:c5:8d:
         61:e8:29:14:fe:70:4a:8d:ce:ed:cb:2d:5b:67:4d:3c:fc:4f:
         ab:ca:21:17:f8:7b:2b:b2:52:7b:69:2c:7b:d8:99:21:4b:c1:
         26:3c:a8:6b:d2:a7:85:0c:a9:ac:c6:43:77:3d:f6:2d:50:a1:
         ce:2b:b0:de:eb:bb:ff:06:69:10:26:aa:95:33:6a:68:60:38:
         44:52:c5:90:72:5d:da:fb:3e:cc:89:6e:0d:d6:70:c8:29:53:
         af:2a:76:32:f2:36:43:e7:29:9b:93:05:a4:32:28:5b:7a:98:
         c8:29:0d:84:77:99:8b:d2:d5:31:d3:94:70:dd:73:bd:6f:65:
         6f:2c:d8:62:d7:49:b7:51:d8:3a:86:fb:25:fb:dd:18:8b:72:
         77:af:a4:03:d9:f4:42:ed:61:9d:11:81:59:9c:b7:a0:68:3b:
         b9:0a:30:2f:23:0b:d0:d1:e3:c6:b9:9e:60:70:70:6d:64:fb:
         6c:e9:5f:bc:bc:55:7c:b5:0a:9c:c4:69:cd:83:52:e6:90:3f:
         22:5c:a5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:04:21 2025 by rpki-client