Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5e9e182c-f177-3ffd-ab03-8320cb691371.roa
File:                     5e9e182c-f177-3ffd-ab03-8320cb691371.roa (raw, json)
Hash identifier:          JGsVN8R4nbWz0oG0xx9hFfxfAev/sDzodmO0YI9FPJc=
Subject key identifier:   91:3A:02:C8:74:B3:7A:DB:0D:91:CD:68:52:35:98:1E:C4:CA:29:B8
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858489076034220BED8B1FD478FC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5e9e182c-f177-3ffd-ab03-8320cb691371.roa
Signing time:             Thu 16 Jan 2025 14:00:50 +0000
ROA not before:           Thu 16 Jan 2025 14:00:50 +0000
ROA not after:            Wed 16 Apr 2025 13:00:50 +0000
asID:                     397234
IP address blocks:        199.7.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:76:03:42:20:be:d8:b1:fd:47:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jan 16 14:00:50 2025 GMT
            Not After : Apr 16 13:00:50 2025 GMT
        Subject: CN=d36c6c01-ada5-4b87-afac-ec6b07ec6f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fd:b4:52:d6:0e:f7:12:a7:24:fa:d0:63:81:
                    93:60:2e:0e:87:59:e8:08:2f:fd:0f:f0:4f:a3:fe:
                    9e:fd:90:7c:da:76:0d:f0:0e:28:11:09:ce:fa:fb:
                    ec:b3:60:91:4d:c1:94:ce:08:45:ad:e0:3f:1a:91:
                    5e:88:cf:fd:34:78:76:b0:43:be:a1:09:0f:e9:dd:
                    50:0b:f2:62:93:7f:3f:99:bc:d6:33:92:56:8a:d2:
                    ab:dd:f7:82:90:04:9a:83:44:e6:e8:cf:3c:ec:fd:
                    72:73:2e:4f:cb:f0:91:15:13:92:b3:c1:c5:17:11:
                    11:ba:1a:e6:b1:37:e1:66:2d:f1:88:76:eb:b7:2e:
                    cf:25:09:42:b8:3b:6c:99:db:35:46:ea:20:9c:71:
                    8d:c7:a6:e2:48:df:d8:5f:8c:57:9d:58:9a:43:ec:
                    92:71:d3:2d:a3:b4:6d:44:f5:97:c5:f5:62:6e:89:
                    f5:42:76:23:bb:17:50:0b:f1:9b:8b:21:a4:33:02:
                    f1:f4:0b:ee:cf:f1:d9:be:cb:0a:19:f3:28:74:da:
                    f2:31:81:52:25:c4:2c:c4:6e:c4:0e:f7:b7:c2:6c:
                    ff:ca:3e:54:fa:6d:2e:ad:72:63:1e:9b:d2:d4:df:
                    92:98:9e:c6:7e:c6:95:45:32:96:3c:c6:40:05:33:
                    29:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:3A:02:C8:74:B3:7A:DB:0D:91:CD:68:52:35:98:1E:C4:CA:29:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5e9e182c-f177-3ffd-ab03-8320cb691371.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:1f:77:ac:2a:8a:da:ba:ee:65:c7:f6:88:63:de:e2:42:9e:
         1a:d0:fa:a8:ad:18:19:36:26:52:c1:f7:4b:f2:f2:e0:48:e0:
         82:f3:e1:b6:8a:da:ff:9f:40:11:21:23:2e:3a:6c:2c:80:6a:
         16:41:84:b6:8a:28:8d:0e:a1:90:d6:6f:d6:69:df:69:c1:3d:
         7f:3e:5c:bc:1a:14:76:84:f6:12:55:33:b0:60:5b:fc:d2:1b:
         f3:db:59:58:90:a0:6e:dc:cd:c2:2f:4b:15:80:9e:10:71:b1:
         b4:7d:0b:1a:05:ba:1c:e3:27:2b:ed:ff:3a:9a:4b:e0:77:2a:
         8a:01:aa:8f:64:45:f3:2b:cd:ae:93:82:28:98:6d:f1:94:65:
         39:54:f9:82:e2:17:88:c0:76:68:9f:eb:0a:06:13:20:f6:b6:
         68:40:d1:be:4e:58:f8:05:34:e0:a1:26:12:c4:8d:3a:0f:12:
         62:f3:c0:37:11:44:5a:04:d9:1c:5d:54:3e:0a:91:7a:49:a5:
         c6:75:aa:b9:f4:85:6e:63:46:9c:4f:22:87:54:5d:6d:bb:b1:
         1a:68:49:51:20:39:1e:b2:1a:a4:50:54:e6:be:ee:57:b9:38:
         ac:cf:47:de:5a:cd:3c:73:5a:b6:33:eb:65:4b:43:33:87:eb:
         cc:b0:87:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:44 2025 by rpki-client