Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad/44093855-c660-345f-9454-29953b3f2acb.roa
File:                     44093855-c660-345f-9454-29953b3f2acb.roa (raw, json)
Hash identifier:          oOBAl44XdWV+kTik9BRkds4M0f9lF5BP0WO8AXOIBzc=
Subject key identifier:   AF:61:A2:BA:70:0E:0C:A6:30:87:6C:9D:DD:F0:92:E7:B6:49:C6:42
Certificate issuer:       /CN=fbe88551-e36f-4364-ac40-a262166c72ad
Certificate serial:       010D0C9F4328584961B99122370D414583D48240
Authority key identifier: A1:4D:9B:84:F4:D6:87:5C:4D:0C:56:6E:8D:D4:C8:64:4B:C8:75:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad/44093855-c660-345f-9454-29953b3f2acb.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     63435
IP address blocks:        199.58.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad/fbe88551-e36f-4364-ac40-a262166c72ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad/fbe88551-e36f-4364-ac40-a262166c72ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:91:22:37:0d:41:45:83:d4:82:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbe88551-e36f-4364-ac40-a262166c72ad
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=7e20e716-4d37-48ca-a58a-3fc8b7ce5b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b7:52:5c:bf:fc:5c:b7:59:e7:9c:e3:14:5d:
                    43:6e:e6:43:ab:59:a4:7a:c4:d4:dc:51:c4:3a:72:
                    c1:99:2e:54:f5:6b:6a:12:8b:45:b4:12:c4:fd:0e:
                    53:e4:c6:0f:07:73:70:eb:b9:02:ea:8f:59:2d:aa:
                    75:30:55:8a:0e:5a:3f:8f:53:43:3f:48:ba:99:19:
                    58:c8:b4:a5:ef:0b:d0:60:b2:42:7a:e9:f7:6f:de:
                    0f:f1:73:e9:9e:16:4c:04:1c:a1:a8:79:21:e4:38:
                    d1:d2:b4:81:c2:e9:8f:3c:1b:3a:98:02:4c:b6:62:
                    93:b7:6f:4c:d6:11:e5:01:0e:28:75:70:67:73:08:
                    6f:77:b4:5d:7f:8e:42:ef:9e:21:83:ab:fc:0a:79:
                    c4:e0:0e:f2:0f:9d:da:0c:dc:6d:29:66:d1:7e:30:
                    c4:e5:42:78:cf:fb:6d:3e:63:73:69:47:af:b6:74:
                    2e:3a:69:99:ce:20:c9:1e:6d:ce:bc:b7:09:8b:9d:
                    0b:3c:5a:4a:73:a7:be:ad:d7:06:c3:88:03:46:3a:
                    be:b6:70:84:da:fd:38:dd:5e:f6:14:17:55:69:ad:
                    8a:8c:35:53:eb:0a:ba:bc:14:05:b5:55:4e:5d:07:
                    80:82:78:fc:19:4d:64:74:28:3c:01:c6:ca:0a:95:
                    cb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:61:A2:BA:70:0E:0C:A6:30:87:6C:9D:DD:F0:92:E7:B6:49:C6:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad/44093855-c660-345f-9454-29953b3f2acb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad/fbe88551-e36f-4364-ac40-a262166c72ad.crl

            X509v3 Authority Key Identifier:
                keyid:A1:4D:9B:84:F4:D6:87:5C:4D:0C:56:6E:8D:D4:C8:64:4B:C8:75:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.58.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:1c:d3:9d:a8:3d:96:55:f9:4c:31:5a:15:a1:89:7d:a3:61:
         f8:6e:23:55:0a:a6:a5:b7:f9:88:04:7b:83:5e:cb:32:17:20:
         e4:a2:72:ac:d2:1b:a3:cb:51:af:e2:59:18:07:6a:d9:1a:f8:
         58:06:1b:70:b6:a0:6e:c2:38:d5:5c:69:02:2e:e1:99:ef:d6:
         d0:a2:8e:aa:a3:80:0b:07:4b:16:11:c1:fc:62:da:1c:8d:a7:
         e0:9d:6f:44:48:aa:c0:d4:c5:37:5d:27:4f:fa:3d:d0:d3:e2:
         68:27:ce:d8:62:06:13:b4:40:b5:87:7a:b9:7d:48:58:4c:6d:
         0e:f1:18:eb:77:b7:ce:8e:70:c4:69:73:32:b6:3b:16:40:6e:
         6c:ca:a8:e8:c6:88:1b:c3:09:4a:1b:9e:5c:b1:70:a1:cc:15:
         41:9b:ef:6a:78:90:48:1c:df:e8:4c:14:10:93:c6:65:c6:be:
         83:b2:d0:6d:85:74:a1:17:71:63:31:64:d7:bc:a7:1f:66:d5:
         38:58:ef:12:dd:84:2f:2a:a5:e4:6d:6c:7d:ab:c0:0b:7c:ef:
         ab:6e:99:e3:bb:79:75:84:0d:ad:60:33:2c:60:a3:bb:e3:9c:
         cf:18:d7:d7:0e:e0:c2:58:05:b3:8a:57:ff:20:46:b1:31:b4:
         d5:b7:c8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:43 2025 by rpki-client