Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/cdbc81fc-d0e5-3dc7-b50a-582bc4d92fad.roa
File:                     cdbc81fc-d0e5-3dc7-b50a-582bc4d92fad.roa (raw, json)
Hash identifier:          DbV31ePySRzh1bwb8FITBVQ+bOTjgg944MDVa91/Bo0=
Subject key identifier:   02:9D:59:39:CA:EF:59:55:FF:D6:41:7E:6D:F8:E8:62:DE:1C:C3:93
Certificate issuer:       /CN=f29918e2-971b-4c6a-bc57-75bdb88796a9
Certificate serial:       010D0C9F43285848DEA133A552A88F680B33A380
Authority key identifier: C4:A2:9F:A5:63:02:53:CD:87:5E:AF:A2:1A:8E:35:EC:94:73:A1:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/cdbc81fc-d0e5-3dc7-b50a-582bc4d92fad.roa
Signing time:             Thu 13 Feb 2025 14:00:50 +0000
ROA not before:           Thu 13 Feb 2025 14:00:50 +0000
ROA not after:            Wed 14 May 2025 13:00:50 +0000
asID:                     32590
IP address blocks:        192.69.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:a1:33:a5:52:a8:8f:68:0b:33:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f29918e2-971b-4c6a-bc57-75bdb88796a9
        Validity
            Not Before: Feb 13 14:00:50 2025 GMT
            Not After : May 14 13:00:50 2025 GMT
        Subject: CN=2fdde241-756a-4e04-a5e8-48c85a1792f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:81:1c:17:d0:3c:df:66:1e:a4:60:63:4b:a2:
                    05:8c:3c:73:27:fe:b2:47:f6:f6:22:da:b6:a3:63:
                    5f:9e:39:cf:4f:80:ba:29:43:24:28:e7:0e:73:b1:
                    87:20:27:9a:fd:76:c2:5e:86:47:70:87:a9:70:5f:
                    33:f5:1d:b0:87:6a:dd:4f:76:e9:66:bb:c6:a0:cd:
                    c5:ac:a6:62:0e:7f:1a:96:aa:cc:28:63:5b:05:64:
                    68:f6:ee:1a:9a:94:db:ad:22:31:19:46:b6:51:d8:
                    45:c7:67:26:3b:0c:fa:d2:cd:97:97:e8:62:1d:2e:
                    e5:d7:94:f9:c0:21:8e:c1:e1:40:a3:8d:eb:fc:0a:
                    8a:cb:5b:b9:61:b3:b6:e4:3c:3b:00:88:7e:57:3f:
                    50:c2:a3:d2:86:f7:e5:95:af:8b:ac:a3:56:3b:80:
                    dd:c0:e0:74:41:94:31:78:d1:6b:ee:97:cd:79:90:
                    ab:38:8f:27:0d:6a:24:83:29:13:77:5a:3b:4c:fa:
                    a5:5d:b5:84:b9:85:45:10:6c:ca:72:66:76:2b:26:
                    ac:89:79:ff:b1:4b:4a:e3:69:d0:99:01:cd:a5:3e:
                    e7:d4:3a:65:0d:23:d8:d6:65:5d:c8:04:3f:9f:df:
                    fd:e9:1b:f2:84:f1:25:7a:80:6f:44:12:7c:96:0e:
                    9e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9D:59:39:CA:EF:59:55:FF:D6:41:7E:6D:F8:E8:62:DE:1C:C3:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/cdbc81fc-d0e5-3dc7-b50a-582bc4d92fad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.crl

            X509v3 Authority Key Identifier:
                keyid:C4:A2:9F:A5:63:02:53:CD:87:5E:AF:A2:1A:8E:35:EC:94:73:A1:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.69.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:de:1e:20:dc:e5:16:c9:56:a7:5c:5c:cd:df:fb:37:43:73:
         67:2f:9f:43:99:57:9c:86:56:e2:97:69:45:a1:ea:e1:d1:e5:
         7f:ff:bd:9c:85:14:32:2f:f8:c9:08:db:0b:18:0d:78:dd:6f:
         73:cd:0f:8a:8b:b0:3b:50:a8:81:77:31:b9:61:38:09:dd:53:
         e3:e9:18:82:32:51:dc:82:24:dd:e7:21:92:24:4d:a0:cb:a7:
         72:4c:7e:33:81:bb:a3:2a:e2:5d:0f:da:47:c7:50:5f:c1:a2:
         1d:b6:e1:55:e1:27:8b:b5:b5:fe:09:9d:d8:6d:25:aa:ca:83:
         b1:68:46:b1:ea:9e:8b:88:84:ed:7f:98:92:e8:65:5b:7d:58:
         38:51:b5:d1:f9:1c:bf:79:7c:2d:47:a0:f3:66:e9:4a:ed:f4:
         79:1b:b8:75:6e:34:6e:57:b3:84:ad:d0:4a:94:e4:e4:46:ce:
         ad:59:2f:2c:f7:48:48:e5:17:ef:c8:d1:a4:2e:93:e1:b1:39:
         b3:40:f5:d6:d2:73:61:86:38:76:5e:e1:fa:d2:83:04:20:be:
         71:00:11:02:a5:88:2e:a0:9a:78:aa:ab:76:34:52:8b:13:4e:
         c2:03:13:fc:15:fc:f4:64:20:cb:5a:1a:24:1e:89:8a:98:a1:
         26:88:2e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:06 2025 by rpki-client