Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/4de85870-1812-37c2-b185-f215614574da.roa
File:                     4de85870-1812-37c2-b185-f215614574da.roa (raw, json)
Hash identifier:          h1p1LKVfHqnDHCNKYJUCoduV3nDdtgspjH8AnrE8orE=
Subject key identifier:   FC:C1:FA:B0:06:BD:9D:6E:1F:2B:C5:C9:4E:4E:69:D5:31:36:9C:9E
Certificate issuer:       /CN=81fb7701-7454-4b9b-810d-3d604f504467
Certificate serial:       010D0C9F432858491AA6B9EC9F3DC7975D784D00
Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/4de85870-1812-37c2-b185-f215614574da.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        199.65.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:b9:ec:9f:3d:c7:97:5d:78:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=3dfa5c7f-5ef6-4a43-9c68-1396809409ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:10:8e:34:4f:8d:53:f0:5e:74:49:f6:2c:da:
                    ec:e1:07:9f:7a:2a:37:97:2e:6d:a2:52:b0:06:54:
                    e8:a1:d8:80:5f:9c:4a:b6:62:53:f5:df:f9:41:60:
                    ee:79:ac:f9:a0:c6:8b:63:79:73:79:d1:d6:7c:54:
                    22:0a:8c:09:be:66:ed:da:7b:f9:85:07:c2:0d:f6:
                    8d:6d:03:b1:be:2e:ce:8b:b4:21:d9:6e:88:92:17:
                    a7:d8:01:33:25:0a:ea:52:f5:d7:d8:e0:91:21:80:
                    42:e0:37:68:c9:5e:c4:e2:b5:0e:58:9d:23:17:d4:
                    8d:63:1c:4b:3f:cd:c5:b9:f9:de:8e:b1:54:db:cb:
                    e6:84:b6:58:8c:ed:e6:17:2f:a8:2f:52:3f:1b:af:
                    e9:fe:80:e0:9c:f0:f5:84:79:ca:c0:23:6f:c3:5f:
                    a9:9c:4a:aa:aa:fe:4c:a5:ff:01:9b:72:ce:a1:42:
                    de:be:22:f8:eb:1f:69:67:c7:ff:35:db:43:cb:e1:
                    08:28:e5:6b:09:c3:9c:0c:c9:3c:64:63:7d:fc:14:
                    b5:57:e6:c4:2c:8f:dc:96:45:b0:a4:0d:50:ac:ca:
                    b3:b9:8f:2b:26:8e:b3:d5:2f:46:e7:32:18:6a:be:
                    36:e7:18:76:08:16:60:17:1e:8b:05:bd:78:ad:a5:
                    46:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C1:FA:B0:06:BD:9D:6E:1F:2B:C5:C9:4E:4E:69:D5:31:36:9C:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/4de85870-1812-37c2-b185-f215614574da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl

            X509v3 Authority Key Identifier:
                keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.65.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:ce:c9:1b:85:86:9b:e8:22:63:b2:60:6b:92:27:a2:8f:3d:
         30:ec:dc:60:d0:fe:ed:f9:9f:4e:6f:88:76:73:71:b1:fd:5d:
         83:59:78:83:59:be:e8:2c:29:91:0b:ae:2b:08:4b:88:9e:6a:
         73:61:0a:29:dd:18:23:4b:df:d1:54:89:80:ed:24:b6:7a:b9:
         54:dd:9c:dc:63:ad:dd:98:af:ff:13:56:ff:ac:a3:9a:6d:06:
         a4:7d:25:2e:cd:71:54:5d:42:75:76:16:59:74:85:88:36:2b:
         df:68:06:96:04:30:b1:be:12:4b:40:d3:e9:20:14:12:bd:ec:
         27:e1:ae:d2:7f:3b:ab:71:a3:ca:ee:27:0c:bd:75:6d:00:90:
         3f:44:d6:2c:06:f8:d3:f9:8c:f2:43:f6:5f:70:5d:a1:cb:b5:
         d8:74:ff:b6:20:e7:eb:8b:d1:ef:c3:4b:ed:3a:c4:4f:6b:17:
         a3:32:49:72:a3:f1:1a:73:ec:f1:a9:f7:b0:d1:ab:d1:57:57:
         f3:50:c6:2a:60:be:8a:81:d0:fd:c6:2d:66:84:e6:3e:c0:ff:
         8b:d1:28:7c:23:ba:b7:d4:50:af:ed:5a:5b:b6:20:96:d0:cd:
         de:e1:7f:97:8a:ba:9a:9f:11:b9:cb:00:a8:6f:62:d7:73:2c:
         4f:40:57:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:07:37 2025 by rpki-client