Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/cdbc81fc-d0e5-3dc7-b50a-582bc4d92fad.roa
File:                     cdbc81fc-d0e5-3dc7-b50a-582bc4d92fad.roa (raw, json)
Hash identifier:          zNA9UShV7ijcyNZmE5D4/YJZaYGzV+npWi8klSuUmLM=
Subject key identifier:   F6:75:B6:0A:EC:83:11:85:F4:67:B2:06:55:B3:7B:36:66:D7:EC:76
Certificate issuer:       /CN=f29918e2-971b-4c6a-bc57-75bdb88796a9
Certificate serial:       010D0C9F43285849BDDA3B97BE1565C22D298900
Authority key identifier: C4:A2:9F:A5:63:02:53:CD:87:5E:AF:A2:1A:8E:35:EC:94:73:A1:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/cdbc81fc-d0e5-3dc7-b50a-582bc4d92fad.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     32590
IP address blocks:        192.69.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:3b:97:be:15:65:c2:2d:29:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f29918e2-971b-4c6a-bc57-75bdb88796a9
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=e3c3efb8-7864-47f1-9b07-08bb5f2c1278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2c:55:b0:69:07:d8:c9:b6:e5:08:af:e7:04:
                    8e:5c:4e:9c:86:ef:2b:74:ac:7c:57:10:8a:66:40:
                    2c:db:8a:a9:3d:e3:48:86:12:75:18:92:96:ad:62:
                    6a:ae:7d:7a:f2:e9:6c:85:18:1e:a8:a6:67:0d:e1:
                    da:49:b2:f0:5b:b4:df:a7:d8:71:ef:9e:48:8a:2f:
                    cc:cc:72:9c:74:9d:ea:1f:cf:a8:37:7c:95:66:a8:
                    3c:0e:a7:08:39:a2:cc:b8:0a:de:1b:40:d2:2e:14:
                    14:5d:5f:a2:bd:13:b5:f8:2d:4b:09:9f:bd:97:30:
                    66:36:2d:53:4f:d8:0c:ce:16:41:a8:a1:19:fe:4e:
                    86:b8:d8:ae:3b:13:60:b9:b2:b9:dd:b3:5a:84:9a:
                    f1:f8:48:b9:e6:02:4a:e2:67:4a:fb:8b:5c:a1:21:
                    bf:86:95:74:59:2b:2e:0c:9c:e7:04:65:f3:bc:8b:
                    69:70:3e:67:59:8e:bd:12:79:28:fa:18:57:eb:3c:
                    fb:6b:3a:a2:f4:ca:aa:aa:6c:6a:f6:4d:1a:bb:1f:
                    8a:7d:4b:b9:23:1a:8d:43:8e:81:72:ff:5c:8c:f9:
                    e6:23:0d:a0:b6:58:c1:43:27:06:40:7e:c5:9d:69:
                    10:90:72:ac:de:74:03:df:5b:20:5f:93:3a:4d:ac:
                    44:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:75:B6:0A:EC:83:11:85:F4:67:B2:06:55:B3:7B:36:66:D7:EC:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/cdbc81fc-d0e5-3dc7-b50a-582bc4d92fad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.crl

            X509v3 Authority Key Identifier:
                keyid:C4:A2:9F:A5:63:02:53:CD:87:5E:AF:A2:1A:8E:35:EC:94:73:A1:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.69.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:ac:58:25:bc:3c:20:bc:72:fb:c1:18:89:9d:58:f9:cd:03:
         52:09:87:b8:ad:47:63:ef:34:32:8c:b4:8e:80:94:6c:06:f2:
         15:d5:76:3b:a5:24:a0:d1:40:1e:fc:1c:b0:77:14:16:c4:46:
         76:c6:bc:24:c1:35:36:3c:ae:ed:b1:69:ef:7a:f5:ad:dc:8a:
         81:45:b3:cf:7f:54:97:5f:1c:04:40:b4:b2:83:e1:f5:65:9f:
         80:8f:fe:0f:d7:86:24:d0:27:8e:ad:2f:14:ed:97:e5:30:74:
         8f:9a:e3:74:fb:2a:a6:4f:c8:10:30:f6:2a:b4:af:70:05:02:
         76:17:c9:d4:08:fe:21:c5:18:27:7d:0a:96:48:67:b8:9c:cb:
         8a:a8:e2:1f:53:5e:09:b2:e2:0e:b1:f3:5a:ab:f6:47:c6:01:
         cf:58:f7:83:35:be:e4:b2:83:ed:3f:61:da:f9:52:66:89:e2:
         83:af:21:63:12:cb:f0:8a:d6:d4:6a:71:86:dc:e2:0b:a8:b9:
         26:8e:b8:66:15:27:d5:78:51:6c:6d:6b:f6:f4:52:59:02:a5:
         a3:97:94:17:8d:3d:5b:fc:e2:f0:e2:12:c9:dd:c7:04:fd:6e:
         e4:74:c8:aa:88:9c:b2:30:83:83:d0:2d:cf:42:9b:c9:e4:de:
         5c:65:64:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:11:47 2025 by rpki-client