Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/4335fb9e-616b-368d-997c-c015da56c9bf.roa
File:                     4335fb9e-616b-368d-997c-c015da56c9bf.roa (raw, json)
Hash identifier:          O4b8+HDISUCn9yDPN78BiCcZVr8ADp8rBMIsiR+ADZk=
Subject key identifier:   D1:13:B1:FD:2B:8B:29:CE:10:83:FF:96:74:1F:BB:3A:4F:DC:F6:D8
Certificate issuer:       /CN=9050423a-b7ae-4879-a880-ea3be6e193a8
Certificate serial:       010D0C9F43285849F44A5928FF733CA9C45F0680
Authority key identifier: E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/4335fb9e-616b-368d-997c-c015da56c9bf.roa
Signing time:             Sat 24 May 2025 01:00:49 +0000
ROA not before:           Sat 24 May 2025 01:00:49 +0000
ROA not after:            Fri 22 Aug 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        192.111.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f4:4a:59:28:ff:73:3c:a9:c4:5f:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9050423a-b7ae-4879-a880-ea3be6e193a8
        Validity
            Not Before: May 24 01:00:49 2025 GMT
            Not After : Aug 22 01:00:49 2025 GMT
        Subject: CN=cac04777-8fe8-4d29-a066-ad14e0d23011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5c:d1:38:51:05:5d:3b:75:b9:72:0e:b1:8b:
                    0a:05:d6:7b:aa:34:d7:79:70:d5:28:80:e3:6e:cc:
                    db:7b:5f:05:a4:89:f4:c0:93:4c:7d:86:e0:d8:03:
                    5a:aa:51:56:fc:65:b0:d2:85:68:13:68:52:d7:4a:
                    0c:82:12:b1:15:ef:36:8e:39:c2:8a:37:92:05:19:
                    1a:2d:52:6b:5d:75:8a:c2:87:5b:e5:11:7f:a3:01:
                    66:cc:32:7c:18:a4:33:56:8e:24:ce:6d:6e:32:cb:
                    f0:04:f6:af:44:ea:87:9b:7b:33:85:40:d8:5c:c8:
                    12:62:de:93:46:3c:96:6d:2b:26:29:3c:40:59:9d:
                    6c:63:37:0e:8c:e7:a8:70:00:0a:66:63:b8:44:42:
                    64:55:88:e4:e1:91:e5:36:19:07:86:38:6e:e1:59:
                    01:63:f3:2b:ea:07:49:f6:ac:2a:72:78:6b:0e:5d:
                    43:43:dc:65:f8:10:bf:a1:b0:d6:2c:92:c5:02:92:
                    49:ac:9d:29:7a:73:64:56:6d:93:55:36:f2:f8:2c:
                    01:6c:6d:b7:6d:7d:fa:d6:0a:ba:af:d3:43:bc:f1:
                    b3:74:ca:19:33:29:e1:d6:04:09:54:17:f0:da:ad:
                    87:50:90:b4:95:f8:04:a3:85:e3:54:d7:c8:75:32:
                    c1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:13:B1:FD:2B:8B:29:CE:10:83:FF:96:74:1F:BB:3A:4F:DC:F6:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/4335fb9e-616b-368d-997c-c015da56c9bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl

            X509v3 Authority Key Identifier:
                keyid:E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:95:46:66:59:49:5e:46:19:a9:55:5b:34:7f:c7:e7:24:75:
         ee:5a:3b:9c:cd:ab:bb:d2:f3:a1:d3:2f:1d:76:2d:e4:34:e6:
         78:9b:59:44:01:c0:ad:b4:7e:c0:35:60:fb:1c:da:58:4c:30:
         f9:d2:7f:64:ca:1a:99:2c:d5:07:89:09:c9:2c:49:c1:32:ae:
         65:19:a4:83:b9:a1:6c:60:f3:0a:79:ae:e4:80:ea:f9:67:52:
         18:e4:c1:07:6f:aa:e1:86:61:e9:f1:f7:4d:ce:a5:e3:d6:6e:
         6f:a7:76:05:45:a9:a2:ab:1c:47:63:61:ed:91:a3:a8:61:25:
         ef:f8:d2:05:40:30:59:62:42:04:22:48:3f:6a:4a:1d:97:8f:
         d8:91:c3:ac:6a:5c:18:83:ac:ca:79:b2:cd:5a:80:6d:ec:9a:
         23:d5:79:94:ae:f6:54:73:a4:98:6f:bb:dd:ab:bf:a9:9f:d8:
         6e:01:a3:7a:ce:27:1b:d1:d3:56:b2:9d:b1:e5:95:18:34:c0:
         07:5f:0a:ce:16:2f:02:87:ff:fb:1d:a0:b4:aa:a2:44:b9:1f:
         6e:05:7e:11:ff:1d:95:ab:8b:a7:c3:4e:01:54:40:d1:89:c2:
         08:96:82:6d:8e:48:9f:ef:d0:84:7b:1a:63:b3:01:69:7d:b4:
         70:a4:ef:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 18:40:03 2025 by rpki-client