Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/9ff35021-1a5a-37a7-8f79-b9c773e21707.roa
File:                     9ff35021-1a5a-37a7-8f79-b9c773e21707.roa (raw, json)
Hash identifier:          QgelmxOpExzMDBikCrK+OubSWij0nmHfw53TlzvvcRI=
Subject key identifier:   31:6E:FB:E8:D9:36:F8:D3:84:BA:88:C1:FC:73:8B:B4:9C:6D:2E:0C
Certificate issuer:       /CN=685100f9-3b28-4ef4-b2c2-cf327d9839d6
Certificate serial:       010D0C9F43285848BFEBA0CCAF5AB72DA008B780
Authority key identifier: 8B:12:82:82:9C:49:72:78:65:2C:C4:42:6F:27:84:A1:58:06:0B:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/9ff35021-1a5a-37a7-8f79-b9c773e21707.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     12161
IP address blocks:        199.74.222.0/24 maxlen: 24
                          199.74.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/685100f9-3b28-4ef4-b2c2-cf327d9839d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/685100f9-3b28-4ef4-b2c2-cf327d9839d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:a0:cc:af:5a:b7:2d:a0:08:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=685100f9-3b28-4ef4-b2c2-cf327d9839d6
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=bc3c59d1-422a-469d-8a4b-2e8f86018cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:35:fc:73:7f:ab:39:6b:0b:18:84:01:ec:50:
                    db:82:2c:cd:90:45:42:6e:4b:3f:eb:b6:ea:e1:6d:
                    62:7a:f2:4f:c3:e8:52:5d:06:c0:fe:15:b6:19:3e:
                    50:60:80:d3:fe:80:ad:e2:2e:97:b2:56:1c:80:6e:
                    1c:fb:e3:b0:51:64:55:33:78:b2:c7:e7:f0:26:72:
                    ac:74:8f:35:d3:59:88:d4:6d:60:45:71:05:00:a1:
                    de:9b:c8:be:cc:2d:a0:36:d4:47:68:2f:e8:86:fa:
                    d9:d4:d4:88:5c:be:01:4c:52:b3:a3:a7:09:a1:f4:
                    cd:84:d6:48:6b:1b:9a:8a:7e:88:75:6f:33:30:e2:
                    85:83:87:8c:31:da:4b:fd:a2:00:63:c5:ad:4d:e7:
                    25:fd:cf:4d:70:74:75:f5:73:ad:1d:83:4b:4d:cf:
                    06:12:99:31:7d:a6:e0:ec:77:58:a5:ee:07:47:0d:
                    03:c0:e7:8e:cd:93:85:89:6f:cd:1b:1c:74:83:f9:
                    88:85:03:26:cd:47:2a:73:54:6b:ac:68:ed:5d:2f:
                    69:37:d6:d4:20:8e:7e:25:7f:f9:cc:e4:64:cc:31:
                    a1:32:de:f0:27:4a:82:7b:8b:28:85:13:d2:88:de:
                    bf:70:7c:78:03:e1:90:04:53:05:e7:a1:1b:0a:58:
                    79:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:6E:FB:E8:D9:36:F8:D3:84:BA:88:C1:FC:73:8B:B4:9C:6D:2E:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/9ff35021-1a5a-37a7-8f79-b9c773e21707.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/685100f9-3b28-4ef4-b2c2-cf327d9839d6.crl

            X509v3 Authority Key Identifier:
                keyid:8B:12:82:82:9C:49:72:78:65:2C:C4:42:6F:27:84:A1:58:06:0B:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.74.222.0/24
                  199.74.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:0b:54:c2:ad:3c:17:ff:39:c5:d1:c8:41:82:1d:05:c2:e3:
         2d:26:42:49:a8:44:26:f2:b4:1d:e6:44:52:54:44:a7:37:ae:
         c4:47:dc:61:c3:9b:36:93:71:51:7a:10:90:9c:3c:78:ad:7a:
         e3:8d:19:f3:a8:03:7a:06:b9:b7:f1:2b:a6:e2:7b:d3:da:cf:
         bb:51:eb:a5:f4:a4:63:7f:67:a9:09:77:86:56:ee:48:8c:ec:
         18:05:a9:cf:4f:9b:dd:3b:24:23:c2:28:ce:8a:5c:23:12:b0:
         aa:11:1d:18:3d:15:aa:bd:0e:14:57:5e:f5:8c:a5:2b:64:9b:
         03:65:13:69:86:9e:4d:c9:3c:c4:52:1e:71:3b:88:67:82:d3:
         ef:a8:27:19:67:2e:74:0b:e4:12:a4:aa:0c:0a:5c:53:a6:91:
         24:7a:20:b6:c2:2d:a4:21:dc:3c:cb:42:0b:31:d9:c2:ff:6b:
         37:ca:c6:fb:51:66:59:a9:27:da:b5:c1:76:35:9f:1e:58:56:
         f6:9a:32:2d:d3:74:99:13:8b:f6:94:61:40:c9:12:00:c4:91:
         fa:60:9f:43:6f:4d:6f:30:be:94:28:02:46:43:e6:7d:91:4c:
         e6:90:58:56:b4:46:8c:29:96:bf:30:52:9c:b4:d6:0f:ce:fb:
         4f:b9:25:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:05:41 2025 by rpki-client