Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8594d3e0-32bb-4c5a-93c8-b52239cf17eb/81fb0018-bcb7-3f7c-b9f1-13ea335fc196.roa
File:                     81fb0018-bcb7-3f7c-b9f1-13ea335fc196.roa (raw, json)
Hash identifier:          Zz/eqSlHvhcUzBCFPJvK4ea0hf0Z8pw7EsJh8ZGhWmY=
Subject key identifier:   4F:08:E6:E9:B2:76:DA:AB:CD:42:CB:D0:4E:3C:37:D2:28:2C:4C:AC
Certificate issuer:       /CN=8594d3e0-32bb-4c5a-93c8-b52239cf17eb
Certificate serial:       010D0C9F43285848F4F697EFC4DA91E24C382000
Authority key identifier: 33:4D:5C:95:B0:F1:BE:5A:9E:96:A0:FD:B6:ED:CF:44:4B:22:B8:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8594d3e0-32bb-4c5a-93c8-b52239cf17eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8594d3e0-32bb-4c5a-93c8-b52239cf17eb/81fb0018-bcb7-3f7c-b9f1-13ea335fc196.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     21732
IP address blocks:        192.225.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8594d3e0-32bb-4c5a-93c8-b52239cf17eb/8594d3e0-32bb-4c5a-93c8-b52239cf17eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8594d3e0-32bb-4c5a-93c8-b52239cf17eb/8594d3e0-32bb-4c5a-93c8-b52239cf17eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8594d3e0-32bb-4c5a-93c8-b52239cf17eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:97:ef:c4:da:91:e2:4c:38:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8594d3e0-32bb-4c5a-93c8-b52239cf17eb
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=99c6cd9f-a618-4982-825b-c8232c9d17d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:57:a7:8f:0d:53:f6:07:9f:9d:3e:68:aa:6d:
                    f1:0f:64:d5:08:0c:94:a2:b0:8a:36:70:3b:a9:15:
                    b6:33:de:3d:72:a3:f5:13:07:3a:58:3e:82:db:06:
                    61:e9:1a:f8:9a:12:11:c4:8a:7c:a2:fa:45:f2:c3:
                    7e:72:7c:45:a3:df:71:53:08:27:eb:d8:cd:3f:92:
                    35:73:30:21:b1:98:f6:b9:03:52:6b:10:63:51:05:
                    36:0f:94:8e:26:89:03:ba:40:75:e5:7d:d3:dd:21:
                    5f:4b:3f:4d:8d:8f:23:43:df:a2:3b:00:9c:83:d4:
                    10:aa:b0:66:d2:7c:5d:24:16:c0:dc:69:11:6d:a3:
                    34:b9:a9:7d:10:bf:95:0d:66:bf:b2:8d:fc:2e:72:
                    84:13:5e:15:fa:67:d7:74:f7:ba:d0:62:a3:65:54:
                    07:76:34:4a:2b:e0:4e:ba:c5:3e:fc:e7:6d:97:48:
                    f9:08:90:96:d9:fc:2f:5d:6e:d5:15:11:eb:52:ed:
                    1b:bc:b4:f2:1f:9f:d1:b5:e8:7c:5b:ee:be:2d:88:
                    ae:8a:91:d7:76:99:dc:1b:5c:1f:32:ec:f3:02:c6:
                    ba:ff:e4:7a:78:6d:43:b0:f9:0c:2f:4e:cc:55:91:
                    b6:04:96:7c:1e:00:99:ac:69:de:91:a9:0a:26:b8:
                    6f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:08:E6:E9:B2:76:DA:AB:CD:42:CB:D0:4E:3C:37:D2:28:2C:4C:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8594d3e0-32bb-4c5a-93c8-b52239cf17eb/81fb0018-bcb7-3f7c-b9f1-13ea335fc196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8594d3e0-32bb-4c5a-93c8-b52239cf17eb/8594d3e0-32bb-4c5a-93c8-b52239cf17eb.crl

            X509v3 Authority Key Identifier:
                keyid:33:4D:5C:95:B0:F1:BE:5A:9E:96:A0:FD:B6:ED:CF:44:4B:22:B8:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8594d3e0-32bb-4c5a-93c8-b52239cf17eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.225.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:b5:53:9d:56:f6:71:f3:60:1d:5d:bc:7d:7a:a4:d7:fd:ce:
         48:73:bc:f9:8e:d6:33:c7:92:ec:66:a3:98:16:b5:31:2b:11:
         ba:2c:4f:87:62:3e:bd:1c:49:14:ae:35:c7:b2:a7:79:44:3c:
         82:39:b9:78:c7:5e:84:69:24:6e:6e:7c:d8:1f:1a:ae:ff:5f:
         1d:48:08:d8:8c:7d:79:ab:27:51:6c:8a:da:65:f7:af:e9:ce:
         c3:56:02:87:3c:88:05:ae:d7:b2:fa:54:b7:22:71:a9:67:fa:
         61:dd:62:df:64:1e:de:10:79:83:ea:84:4c:18:06:d3:5a:7e:
         7d:38:64:b1:97:87:aa:9e:b8:5f:c9:0a:a1:4e:6a:e7:ad:c5:
         56:c0:fc:39:05:59:8c:c7:59:37:fa:b4:8b:e0:19:e4:4d:9f:
         c6:b8:21:f7:a2:78:62:25:3b:5b:19:6b:a3:77:89:36:b2:1e:
         46:8a:99:71:20:6e:4b:a1:88:42:aa:8c:dc:d9:c0:e3:18:f8:
         f2:2a:1f:6c:a5:23:73:d2:28:67:27:14:4e:55:99:42:aa:01:
         03:0e:c5:ac:67:d4:ed:9c:b5:2e:cb:a8:d0:12:42:2d:cf:5a:
         0e:6e:82:30:36:67:94:c9:a0:7a:fc:22:08:07:31:30:41:56:
         8f:75:00:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:10:33 2025 by rpki-client