Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c/5922d6c0-2307-3d06-bf32-7cbc12eaf61c.roa
File:                     5922d6c0-2307-3d06-bf32-7cbc12eaf61c.roa (raw, json)
Hash identifier:          18IBBBxmPpUH4MJPAl67CpgyUCZGU1vfED+wLEAoBgg=
Subject key identifier:   BC:FD:95:09:A8:00:A5:D6:66:30:EA:DA:4D:BC:AF:64:24:84:62:91
Certificate issuer:       /CN=8fdaa083-5b1b-4810-b0a5-c4984449067c
Certificate serial:       010D0C9F43285848CB1655E61B1F07ADE64960D0
Authority key identifier: 0A:F4:7C:8F:CE:19:1C:E6:4B:91:4D:0A:58:20:35:39:A4:8B:CB:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c/5922d6c0-2307-3d06-bf32-7cbc12eaf61c.roa
Signing time:             Thu 06 Feb 2025 14:00:52 +0000
ROA not before:           Thu 06 Feb 2025 14:00:52 +0000
ROA not after:            Wed 07 May 2025 13:00:52 +0000
asID:                     327782
IP address blocks:        192.69.19.0/24 maxlen: 24
                          208.70.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c/8fdaa083-5b1b-4810-b0a5-c4984449067c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c/8fdaa083-5b1b-4810-b0a5-c4984449067c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cb:16:55:e6:1b:1f:07:ad:e6:49:60:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fdaa083-5b1b-4810-b0a5-c4984449067c
        Validity
            Not Before: Feb  6 14:00:52 2025 GMT
            Not After : May  7 13:00:52 2025 GMT
        Subject: CN=1cfb9532-afb5-4fa6-9dfa-b2babcf58dc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8d:76:17:7b:c0:19:e8:0c:7d:e9:4b:fa:77:
                    b1:6e:bc:d3:27:1a:12:dc:80:98:e9:56:fd:d8:aa:
                    ba:ae:03:22:9a:59:61:32:62:84:b7:5d:8d:c9:ec:
                    30:f5:f1:bc:67:61:fa:06:58:07:51:41:b6:1a:30:
                    46:9f:30:e0:cc:28:dc:4a:e1:ac:ac:07:21:fd:1e:
                    e8:f1:22:37:a4:04:c3:ae:52:4e:c8:e8:1f:97:4c:
                    37:dc:20:f2:6b:b5:a1:dd:7b:0d:1f:4c:38:8a:47:
                    16:6c:ee:ce:04:f3:45:25:88:1a:82:07:13:60:63:
                    31:7e:27:86:42:65:7f:47:6b:3d:55:d5:95:aa:50:
                    ed:d4:08:fa:a2:1e:59:9c:f3:4f:d2:51:cf:7d:af:
                    df:75:dc:b5:d1:4a:d9:af:3e:12:ba:29:ba:17:9d:
                    73:5a:cd:82:1c:ac:12:d3:7b:a9:41:4d:ce:37:98:
                    3d:3b:44:05:a0:8b:2e:1c:3f:80:97:51:b9:0c:3e:
                    37:b6:a0:44:08:a6:f5:cc:b8:97:b9:da:d2:7e:6b:
                    e0:c2:7a:8d:b6:b5:3a:41:c8:47:cb:bf:de:1b:45:
                    07:f6:ae:bf:09:31:c8:b8:6d:a7:2b:e6:c1:1c:d7:
                    04:63:a8:55:ed:74:cd:32:c3:a5:89:1d:02:ca:42:
                    8c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FD:95:09:A8:00:A5:D6:66:30:EA:DA:4D:BC:AF:64:24:84:62:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c/5922d6c0-2307-3d06-bf32-7cbc12eaf61c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c/8fdaa083-5b1b-4810-b0a5-c4984449067c.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:7C:8F:CE:19:1C:E6:4B:91:4D:0A:58:20:35:39:A4:8B:CB:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.69.19.0/24
                  208.70.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:29:09:25:f1:df:b8:0e:e0:3c:44:71:d3:82:d9:73:10:98:
         4f:e7:1b:d0:ea:b1:55:f3:75:e7:5f:00:c4:94:e1:11:62:43:
         fd:b9:65:9e:f9:d0:bd:1b:10:f8:92:fb:c8:87:b5:52:cb:b5:
         9b:e4:e6:67:1e:e8:32:75:32:d7:88:32:37:1d:41:65:ff:0c:
         60:f7:16:73:69:82:e5:5a:6a:bf:45:16:e1:65:35:ab:f3:bb:
         97:a5:9f:ba:85:12:29:f5:68:c3:ee:0e:6f:df:eb:ad:b9:e8:
         1f:22:4d:b9:ab:d0:67:3a:23:82:d4:03:0f:51:94:a6:22:2d:
         e4:b4:e5:a6:ae:a3:78:8d:25:11:13:86:37:21:8f:55:59:84:
         bd:92:36:d4:3a:f2:93:fa:87:c9:57:ae:d5:ab:f0:2c:a6:45:
         d9:3e:d9:ab:e2:94:4f:84:5a:3d:57:47:0a:7b:f6:18:72:49:
         7d:60:eb:fa:b1:81:44:57:d2:7d:d2:de:fc:80:34:67:28:bf:
         46:7c:9e:6a:66:b8:a0:5f:09:38:f0:43:0d:fa:7c:36:0c:6f:
         90:95:5e:30:ab:d9:7f:89:06:ee:60:a4:4b:54:9b:ef:a5:ef:
         6d:c7:80:d5:e0:49:e2:83:1a:a3:8d:f9:4c:cc:7d:f3:eb:15:
         a6:e1:e8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:24:21 2025 by rpki-client