Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a973be6d-e115-33cf-9248-c6c35ab8897d.roa
File:                     a973be6d-e115-33cf-9248-c6c35ab8897d.roa (raw, json)
Hash identifier:          E63lp6GMT47XtaG+X4Y314BUjMfjuhA7CkX8S82yUmU=
Subject key identifier:   FA:8F:99:AD:B4:2C:1C:FC:6D:83:34:03:00:B1:6B:8C:4E:7A:3F:B1
Certificate issuer:       /CN=ba461ed6-9748-4005-b669-8946003e1ae1
Certificate serial:       010D0C9F43285848E006546FEE44CBFBA13DEB80
Authority key identifier: 86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a973be6d-e115-33cf-9248-c6c35ab8897d.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     4246
IP address blocks:        128.235.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:54:6f:ee:44:cb:fb:a1:3d:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba461ed6-9748-4005-b669-8946003e1ae1
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=09d7ba47-f221-4193-a1c8-6e43a0121c5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:95:63:b2:65:29:e0:78:0d:3f:73:58:17:3f:
                    6b:d2:1c:98:e0:8c:64:90:84:ae:1c:dd:04:2d:b1:
                    0b:a2:ba:fe:db:ea:48:ac:b8:31:31:d3:b6:dc:9c:
                    45:36:ab:3a:3b:8b:43:3b:16:02:0c:4a:6c:24:4f:
                    6f:2d:83:76:55:31:4a:8d:01:18:6a:cc:f6:7d:41:
                    3c:88:80:f0:8d:30:21:8e:9d:d4:4c:c4:f4:63:ef:
                    98:24:87:4b:8f:67:b9:46:9e:47:b8:38:2b:62:fd:
                    70:25:eb:a5:05:cd:19:3f:a3:94:0f:c6:60:62:9a:
                    83:55:32:35:32:2a:3b:03:53:76:24:82:42:69:17:
                    a9:8a:d9:a2:34:42:4b:8f:6d:34:51:24:44:f4:3e:
                    6e:65:1b:82:16:4f:55:7d:21:cd:d8:db:97:9d:3b:
                    5a:dd:e3:94:3f:49:2e:3f:80:e8:0a:2e:67:25:68:
                    00:94:07:7f:4a:83:8b:78:f2:94:f0:a2:f6:2f:04:
                    f1:df:88:e3:c5:36:d0:94:78:83:4a:ad:17:ba:19:
                    c3:fb:0e:7b:ed:3e:94:12:57:49:90:3f:c2:b7:78:
                    4f:cf:fd:fe:a4:6d:6c:34:de:a4:cd:14:ae:e8:04:
                    e7:f4:b6:80:4a:6b:fb:c7:84:e9:37:36:20:29:54:
                    28:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:8F:99:AD:B4:2C:1C:FC:6D:83:34:03:00:B1:6B:8C:4E:7A:3F:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a973be6d-e115-33cf-9248-c6c35ab8897d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl

            X509v3 Authority Key Identifier:
                keyid:86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.235.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:f2:42:61:27:ad:7a:ef:e3:e2:05:75:4b:0f:d3:eb:42:30:
         09:54:dc:e0:6f:2e:bf:30:80:55:0c:4e:51:84:70:19:53:c3:
         b3:12:e2:6e:d8:c6:ae:07:a2:50:06:e6:e6:c3:d0:60:d5:75:
         f8:cb:19:56:1b:30:0b:43:5a:60:66:1e:8c:01:47:31:b6:43:
         e0:71:c2:f4:d8:5c:e0:53:c3:f4:f8:15:cd:17:b3:8d:e7:0e:
         8e:f1:51:a9:11:17:7c:66:62:2f:bd:f2:c3:9b:df:4b:bb:b7:
         d5:26:41:7c:4a:23:71:8c:ea:ba:cd:05:21:de:59:de:43:0b:
         c2:0b:b1:1a:7f:98:75:33:21:29:1a:f9:20:fc:e5:d6:ee:2b:
         dd:c9:84:17:02:7a:9b:4d:6e:3d:bd:10:ee:ef:8f:fb:8c:fd:
         b5:b0:91:6e:2f:f3:c7:a1:2a:fc:1a:85:82:c8:06:f4:34:f0:
         4e:b1:10:06:06:45:1f:bd:cf:4c:9b:c6:d9:57:31:7e:08:28:
         8d:4f:ef:54:4a:6c:9a:4e:d1:f2:6a:83:eb:f1:a9:a0:0f:3a:
         95:68:c1:ea:e3:2e:c8:c0:90:14:03:dc:c1:33:74:87:3d:fc:
         19:46:de:ef:6c:44:98:1b:1c:fa:83:e8:f4:a7:e2:75:09:91:
         58:8d:3f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:19:16 2025 by rpki-client