Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/73691726-2b71-3c13-8f40-33360fe608ad.roa
File:                     73691726-2b71-3c13-8f40-33360fe608ad.roa (raw, json)
Hash identifier:          DeVaXNVNLYYOJZDKFN53wvSJsB3Kvz3Skl6M2gl6PSU=
Subject key identifier:   02:CF:90:0C:19:C3:E2:3D:D6:BF:94:A9:F4:1C:F3:E2:E4:AD:61:10
Certificate issuer:       /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
Certificate serial:       010D0C9F432858491246C470011170A750D76B00
Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/73691726-2b71-3c13-8f40-33360fe608ad.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     3755
IP address blocks:        199.109.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:c4:70:01:11:70:a7:50:d7:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=a062ba78-bb9d-47e5-b050-2cb15b8ad9ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ec:59:39:67:10:7d:7b:bc:ae:a8:1e:84:85:
                    0e:07:07:54:7e:79:d2:b1:8b:b5:03:61:a3:24:42:
                    75:69:26:71:f4:ab:93:54:3b:7a:71:e4:27:17:0a:
                    6e:ce:7c:a4:39:f2:1c:08:72:91:3a:45:f1:05:a6:
                    0c:03:54:21:bc:52:a6:a5:55:67:f9:69:c7:bf:2f:
                    e2:08:dc:d3:44:67:b8:78:21:a0:2e:75:96:2e:c2:
                    19:25:1e:a6:5f:a1:a6:b5:20:0e:2f:72:83:68:dd:
                    08:aa:db:14:6a:bd:97:37:6c:f1:4a:18:83:5f:dc:
                    30:57:f5:8d:30:09:32:34:55:1e:51:08:5b:c9:e7:
                    70:88:a4:b0:20:f9:14:d9:32:f4:dd:42:34:ce:4e:
                    27:96:16:39:78:b0:2d:d5:21:bb:9c:d8:e5:07:df:
                    ae:08:34:0c:c0:f2:0f:74:7d:f2:3a:e5:9c:cd:f7:
                    68:47:b9:65:f9:c8:f5:fb:ce:ff:90:f8:28:80:9f:
                    09:7b:22:8f:50:06:08:16:e0:ab:8b:21:30:8c:4c:
                    94:e2:57:eb:5e:f8:5e:76:93:90:93:2f:a1:ad:0a:
                    f4:36:58:24:a2:de:e4:d1:a9:cc:ce:6b:55:f4:3d:
                    84:01:ff:0e:d5:42:7e:c9:ce:ed:dc:fb:1e:5e:1c:
                    d9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:CF:90:0C:19:C3:E2:3D:D6:BF:94:A9:F4:1C:F3:E2:E4:AD:61:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/73691726-2b71-3c13-8f40-33360fe608ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl

            X509v3 Authority Key Identifier:
                keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.109.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:79:8d:7b:a9:62:59:ff:0b:7b:0d:82:25:49:bc:d1:38:d3:
         f3:a2:4f:c2:2f:72:5a:49:b1:83:85:ea:a5:5c:5e:13:3f:32:
         3e:19:18:e5:5f:3d:ae:38:69:e6:cc:ef:4b:35:41:13:81:cd:
         b0:60:5f:7e:b7:12:3f:f4:d5:b7:fd:b1:08:d5:54:fb:73:00:
         7a:b5:27:1f:43:00:e0:d6:b2:f0:19:e2:2d:ce:dc:51:37:c9:
         fa:e0:c0:17:d9:50:a0:85:69:bb:bb:36:70:8c:08:6c:e0:31:
         b7:da:31:63:62:b1:2a:16:84:32:f5:b9:e1:d2:3d:0d:66:84:
         3d:f1:60:7f:b3:93:f8:26:24:8c:00:fb:05:ec:d8:e0:a3:c5:
         17:1c:31:e7:0d:fe:4d:36:2e:fd:dc:50:7a:e2:c9:15:66:c3:
         61:28:ff:a7:e2:03:89:ba:e1:72:be:46:8d:f2:fe:4a:65:09:
         cc:ad:f1:25:aa:cf:55:48:7f:4a:54:ba:00:fc:e3:6e:48:ec:
         0d:90:6a:b6:27:b1:ff:61:fb:e8:05:d0:2c:05:39:f6:9e:8a:
         7c:21:4a:12:85:36:71:ec:c0:fe:02:ae:72:b3:6f:1e:f0:02:
         34:ba:40:c2:31:4a:33:c5:18:0f:35:94:72:f8:36:98:c6:e4:
         65:81:aa:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:13:18 2025 by rpki-client