Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/09da335a-7bde-3f25-9732-e626e6be5353.roa
File:                     09da335a-7bde-3f25-9732-e626e6be5353.roa (raw, json)
Hash identifier:          wbWmNAWVV5OqO9uYCoqxuVMGy5tvuaGAwJFk5kyKiS8=
Subject key identifier:   F2:A0:C5:C0:45:AB:F4:6D:36:03:6D:85:59:5F:AE:F1:71:3B:99:AB
Certificate issuer:       /CN=d2442e49-fb31-4bf7-aee6-2a7033a57cfa
Certificate serial:       010D0C9F43285849244E88F773458C02F9C21A00
Authority key identifier: 37:A2:03:56:95:92:2C:35:BD:99:C2:5A:9B:82:20:77:73:14:1E:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/09da335a-7bde-3f25-9732-e626e6be5353.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        199.193.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:88:f7:73:45:8c:02:f9:c2:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2442e49-fb31-4bf7-aee6-2a7033a57cfa
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=eefca795-c3ee-4284-9167-02a76b5c18e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1b:17:e3:6a:b3:3e:96:c1:5c:9b:c2:cd:8a:
                    10:7e:97:c6:88:b4:f8:54:86:49:a8:c6:9b:4b:ce:
                    92:d2:d1:25:f6:85:ad:cd:77:6a:9e:76:a9:1a:de:
                    46:66:4b:79:de:35:ca:a1:b4:b1:d3:f9:62:e2:4b:
                    d7:7e:a9:41:a0:85:58:bd:3a:53:2e:73:b8:7b:7f:
                    26:a8:37:bd:97:91:af:ab:22:db:fd:95:70:62:2c:
                    79:87:2b:79:e0:77:9d:fe:d6:3c:a5:21:3f:3d:ca:
                    65:d4:08:83:31:77:a2:19:d6:70:a1:56:80:fd:ea:
                    2d:f8:80:81:6d:ce:49:4b:da:72:d9:86:5f:dc:9d:
                    86:3f:0c:b9:dc:e2:56:8d:d7:15:17:94:a4:81:36:
                    7f:7f:2f:2d:ce:ed:1d:58:b5:a2:0b:61:98:d0:32:
                    ff:97:d5:47:f2:d8:56:ae:ed:f9:98:00:3c:a6:a7:
                    11:5e:db:d5:85:97:9d:da:e5:e1:aa:51:42:65:71:
                    fa:3a:fb:f3:12:ad:a0:31:4d:ab:f9:ef:9b:a1:c9:
                    9b:30:1c:cb:98:e5:fc:f1:75:7b:c5:d6:8c:bf:80:
                    3e:7e:ee:9d:24:ac:e0:c7:e4:e0:cb:d2:c7:d1:7b:
                    a0:ff:4d:26:0a:02:5d:64:ec:5f:eb:a3:2c:d4:ee:
                    54:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A0:C5:C0:45:AB:F4:6D:36:03:6D:85:59:5F:AE:F1:71:3B:99:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/09da335a-7bde-3f25-9732-e626e6be5353.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.crl

            X509v3 Authority Key Identifier:
                keyid:37:A2:03:56:95:92:2C:35:BD:99:C2:5A:9B:82:20:77:73:14:1E:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.193.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:79:bc:0b:ce:f7:1b:75:a3:fa:35:82:fe:90:ec:f2:42:c5:
         80:f8:4c:47:db:a6:35:fa:bf:e0:e9:2c:64:21:a7:de:b5:9f:
         58:24:cd:d8:a2:16:18:1c:b5:93:11:3b:7a:3b:be:ef:b9:6b:
         a5:dc:c5:e3:2a:09:37:7c:a3:ae:a5:65:4d:90:5e:bc:6a:b5:
         7a:0f:8a:0e:9b:f1:61:d5:87:97:96:8b:bd:c2:ce:97:ff:64:
         9f:08:54:1b:ea:a7:89:c0:fe:0c:c5:75:a5:3f:4c:be:73:a1:
         1b:c6:01:89:7d:ec:12:0a:b5:93:f3:40:8d:1a:1f:32:b7:d0:
         0c:26:1b:94:4c:da:4a:f9:31:7c:52:b5:8d:8f:71:3d:76:5f:
         0d:9b:37:bb:d2:e0:5a:7f:c9:21:bf:0b:a2:96:1c:76:e1:29:
         3d:8f:b7:2c:84:f6:dd:6c:9f:b5:87:10:84:ee:72:be:4b:f3:
         df:8f:ea:37:17:8c:13:55:d3:1c:be:23:be:39:49:e8:3f:2f:
         b2:69:b4:76:b4:6f:a3:73:6a:16:af:34:39:5c:52:d5:89:29:
         96:40:25:2b:ff:c6:21:ca:7a:f2:0e:a5:2c:23:31:57:a5:b7:
         bf:02:24:c7:48:e9:24:93:49:32:29:f2:d0:88:de:64:09:8d:
         16:90:cb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:05:38 2025 by rpki-client