Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1f590187-fc1d-4681-a0a4-aa1d23202e80/b551df8a-9563-3e0f-856f-1ea0420a13dc.roa
File:                     b551df8a-9563-3e0f-856f-1ea0420a13dc.roa (raw, json)
Hash identifier:          ljAQ5hjAgLmGNTyucfGKwHt0WjnbgdzEApZxCke8pCA=
Subject key identifier:   91:06:55:7E:14:64:45:B4:CA:BB:73:7D:05:FC:50:66:82:13:D1:40
Certificate issuer:       /CN=1f590187-fc1d-4681-a0a4-aa1d23202e80
Certificate serial:       010D0C9F43285848E59BBEB3445D1664F35C6A90
Authority key identifier: 59:A1:2D:69:AC:FD:A4:05:22:9E:42:C9:4A:35:AB:B8:A1:7E:E0:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1f590187-fc1d-4681-a0a4-aa1d23202e80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1f590187-fc1d-4681-a0a4-aa1d23202e80/b551df8a-9563-3e0f-856f-1ea0420a13dc.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     19945
IP address blocks:        216.46.192.0/19 maxlen: 19
                          2620:101:3000::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1f590187-fc1d-4681-a0a4-aa1d23202e80/1f590187-fc1d-4681-a0a4-aa1d23202e80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1f590187-fc1d-4681-a0a4-aa1d23202e80/1f590187-fc1d-4681-a0a4-aa1d23202e80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1f590187-fc1d-4681-a0a4-aa1d23202e80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:be:b3:44:5d:16:64:f3:5c:6a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f590187-fc1d-4681-a0a4-aa1d23202e80
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=0394eeaf-b389-484f-8d7e-873359381414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:79:53:6d:0a:c0:f6:d6:9d:9e:cd:9a:13:f8:
                    94:dd:61:55:74:2f:8b:cf:02:30:65:5f:b2:2b:bf:
                    19:1c:36:58:f5:91:9b:f4:1f:91:40:85:7d:de:3c:
                    f6:aa:8a:3a:8b:a4:34:1f:c1:1a:09:aa:e3:42:da:
                    6b:74:22:d3:23:2e:c6:05:48:45:bd:b5:be:d5:b8:
                    08:7b:6d:bb:05:a0:c4:2a:89:e7:29:65:08:4a:87:
                    0f:92:b2:d3:80:72:a6:f2:2b:1c:81:60:43:9e:b1:
                    fa:51:cf:14:ee:c0:9a:ef:fb:e9:97:2b:f7:37:8c:
                    5d:2d:64:fd:6d:ca:ff:aa:57:d0:1b:fd:20:65:a0:
                    1b:e5:9b:f9:11:b6:36:7b:e0:ff:dd:b2:93:1b:03:
                    3d:ab:6a:b6:31:b1:68:a6:da:fc:10:ca:16:f1:c6:
                    99:c4:60:53:76:f7:7f:4d:92:99:69:89:72:f5:a3:
                    42:a9:80:5e:36:23:e2:47:bc:ec:e7:82:72:a8:eb:
                    12:3f:20:af:6b:76:b5:35:5c:6b:b8:6a:38:25:c9:
                    b4:2e:5b:46:2e:e2:df:b5:bf:29:5f:a3:81:de:55:
                    0e:be:e6:7d:57:78:9c:91:78:ad:01:28:d8:d7:be:
                    67:cb:c5:39:11:93:1a:1d:ad:e5:6a:81:bb:f5:9f:
                    a1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:06:55:7E:14:64:45:B4:CA:BB:73:7D:05:FC:50:66:82:13:D1:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1f590187-fc1d-4681-a0a4-aa1d23202e80/b551df8a-9563-3e0f-856f-1ea0420a13dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1f590187-fc1d-4681-a0a4-aa1d23202e80/1f590187-fc1d-4681-a0a4-aa1d23202e80.crl

            X509v3 Authority Key Identifier:
                keyid:59:A1:2D:69:AC:FD:A4:05:22:9E:42:C9:4A:35:AB:B8:A1:7E:E0:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1f590187-fc1d-4681-a0a4-aa1d23202e80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.46.192.0/19
                IPv6:
                  2620:101:3000::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:5c:d1:66:c5:c5:46:c7:a3:a1:2f:56:b7:24:a7:31:94:68:
         11:e2:05:5c:f4:ba:6a:e8:09:5f:1b:23:2c:41:06:8d:94:8e:
         18:1d:8c:e9:67:08:89:0f:53:b7:ab:0b:6d:59:1b:d2:99:87:
         f4:18:71:d0:ef:ef:b4:aa:13:86:ae:44:0a:36:c1:25:81:a4:
         34:8e:b9:0c:60:0d:28:dd:bd:07:8c:4c:0d:73:2e:4e:b8:e1:
         d5:4d:8c:02:99:d5:0e:97:5c:d9:7a:85:02:7b:2e:54:78:66:
         40:b4:86:4d:09:a3:db:f0:6c:4b:78:3a:ab:00:17:92:e5:73:
         77:ad:3f:3a:db:ca:f6:3d:c0:06:85:f2:84:aa:7a:8e:52:1d:
         40:3f:69:19:70:4b:86:b9:67:45:a7:df:4d:bc:5a:dd:b3:8e:
         58:09:de:eb:1c:3c:23:7b:20:a5:cc:74:37:9e:84:11:7e:00:
         22:37:56:d2:66:88:c6:e6:e0:56:1b:8e:60:67:32:50:9f:11:
         71:cb:df:fe:5d:e5:19:89:62:41:0c:f1:7d:22:3d:3d:18:39:
         55:6b:7c:9d:58:53:5a:cb:d4:e4:82:29:4f:4a:6d:a3:00:1c:
         67:e1:70:97:23:c4:fd:ec:06:f3:c6:7c:0d:f0:3a:07:59:14:
         48:60:d7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:55 2025 by rpki-client