Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/c4d49987-7b4b-3be2-8e42-497758e9897c.roa
File:                     c4d49987-7b4b-3be2-8e42-497758e9897c.roa (raw, json)
Hash identifier:          XyNGy+dyrxvKcAooNBt/uZYXvCiq4s3dmfT/u8Ry9ss=
Subject key identifier:   94:0B:14:12:9D:EE:F4:38:54:59:A1:3B:F1:A1:ED:87:25:09:A4:94
Certificate issuer:       /CN=cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd
Certificate serial:       010D0C9F43285848E2D109D7C6C0A368CFB7D06C
Authority key identifier: 7C:EF:22:A8:02:45:1A:70:15:CE:99:1E:76:7D:3A:53:61:36:4A:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/c4d49987-7b4b-3be2-8e42-497758e9897c.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     395224
IP address blocks:        199.91.151.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:09:d7:c6:c0:a3:68:cf:b7:d0:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=ba9bdfd4-7398-4581-87ec-51ea1f714e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:80:87:44:2b:64:3b:22:2e:82:cd:04:b6:07:
                    32:f1:31:10:7b:78:d2:0b:84:9c:5a:85:7a:59:39:
                    02:03:b0:f9:a7:5e:fa:d8:98:2a:09:94:20:c4:c3:
                    9f:ab:b1:69:f0:17:86:61:6c:37:25:d0:bf:5d:69:
                    e3:fa:38:49:34:8e:0b:52:db:6e:59:0f:c6:c0:2f:
                    12:06:f8:f6:da:3c:f0:04:b6:cb:45:39:82:5e:b6:
                    bf:00:47:ca:c2:06:49:fa:e2:8e:d6:b7:51:24:4c:
                    ec:92:8b:ca:21:68:1b:4c:07:c3:4f:f4:2a:2d:48:
                    f0:f0:7d:db:36:c1:e7:d7:52:9a:96:54:70:38:db:
                    b3:94:0b:12:90:3e:98:7c:d0:f7:9c:f5:35:ba:04:
                    ca:07:e4:49:55:e8:03:01:9c:4f:98:1f:b6:12:c1:
                    d0:de:a3:8b:fc:20:09:23:f1:9c:a2:6a:a6:03:79:
                    87:f4:de:d3:8b:28:fa:00:b4:4f:05:f2:3a:93:84:
                    5a:6c:a9:ca:39:49:81:03:da:65:a1:e6:48:97:a7:
                    fd:43:77:bd:b6:33:d5:86:eb:55:31:38:dd:a3:74:
                    2e:82:b0:a2:aa:7c:05:e4:a0:b7:d2:a1:dd:28:23:
                    70:43:39:69:4f:5a:e2:77:fa:10:8b:27:58:02:ed:
                    08:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0B:14:12:9D:EE:F4:38:54:59:A1:3B:F1:A1:ED:87:25:09:A4:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/c4d49987-7b4b-3be2-8e42-497758e9897c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.crl

            X509v3 Authority Key Identifier:
                keyid:7C:EF:22:A8:02:45:1A:70:15:CE:99:1E:76:7D:3A:53:61:36:4A:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:77:2a:50:ac:52:c5:ed:62:d7:78:91:32:da:cc:5f:bf:78:
         7b:87:ad:42:3d:2f:34:6d:1f:14:1d:d0:93:09:a1:16:e0:c0:
         73:e6:42:b1:d6:63:02:95:f9:0c:e0:5f:c3:25:6f:69:fc:ff:
         7b:5a:1b:f4:5d:31:be:c4:b9:7c:3d:43:22:f1:53:63:5b:45:
         af:46:ff:00:63:ee:f4:67:55:87:a8:92:50:a8:be:54:d6:ad:
         42:92:4c:de:2c:67:3b:7b:b2:db:a7:92:16:a0:e8:1d:72:3e:
         60:7e:eb:0f:a6:34:96:f5:c9:5c:6d:a3:5c:22:10:01:b8:5e:
         38:1f:31:04:dd:7e:29:a4:ce:14:3d:ca:a7:1a:e6:c0:3e:c9:
         b1:45:55:ea:51:a9:88:8e:a3:e7:40:3d:37:94:21:17:36:18:
         ae:fa:a5:69:ab:5c:02:07:7a:33:1d:de:0c:2d:3b:71:bd:16:
         28:4c:26:f9:81:76:29:61:32:a1:f7:27:1d:7b:f7:b1:7a:9f:
         db:36:35:04:24:b9:90:1c:b3:4a:57:33:60:ce:57:b1:7e:c8:
         96:f2:3b:99:a1:84:76:a8:58:e1:bf:a8:5b:91:bb:9f:09:f6:
         45:b5:0d:ce:1c:7b:b2:e5:c3:3d:da:5c:6d:0c:77:fe:fc:c2:
         42:1a:4a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:56:50 2025 by rpki-client