Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/38849820-bd67-31ee-910f-a7325f635489.roa
File:                     38849820-bd67-31ee-910f-a7325f635489.roa (raw, json)
Hash identifier:          IJjAylugqpYlesGB/7oueW2DDcBOqA0Swlat7kQJt8I=
Subject key identifier:   C5:A1:03:18:C5:12:F1:B6:AF:8D:72:21:EB:F0:8B:F6:D7:40:41:F4
Certificate issuer:       /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3
Certificate serial:       010D0C9F43285848AF7A495A562CF4DFB5171B00
Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/38849820-bd67-31ee-910f-a7325f635489.roa
Signing time:             Mon 27 Jan 2025 16:39:44 +0000
ROA not before:           Mon 27 Jan 2025 16:39:44 +0000
ROA not after:            Sun 27 Apr 2025 15:39:44 +0000
asID:                     32058
IP address blocks:        69.55.80.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:7a:49:5a:56:2c:f4:df:b5:17:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3
        Validity
            Not Before: Jan 27 16:39:44 2025 GMT
            Not After : Apr 27 15:39:44 2025 GMT
        Subject: CN=178ca42d-5856-41c8-bf44-56676b295d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0c:42:6b:89:1b:61:c5:ff:96:be:46:97:ef:
                    ab:f7:f1:38:a3:88:47:64:06:21:ce:92:13:d8:ad:
                    69:56:bd:0e:c2:fe:7c:7b:86:aa:8a:e4:17:95:13:
                    34:c9:6c:8b:18:a0:8b:95:e0:3c:2f:52:86:8b:ce:
                    3e:1b:00:ae:f4:e4:79:76:01:a0:d8:98:82:6a:f4:
                    71:bc:c0:3a:e3:27:0d:25:9e:2c:c1:50:7b:ec:b3:
                    67:a6:63:e3:af:8e:89:e9:c8:2b:5f:a7:ff:8f:06:
                    7c:cf:b3:08:72:51:12:6d:98:ac:3d:e0:e3:c9:ce:
                    df:2e:52:de:e9:db:c5:e2:42:c1:5c:51:f4:56:e5:
                    3d:5d:0a:59:f0:0c:74:31:ec:63:3f:cb:18:32:fa:
                    c8:8e:4c:b2:e7:6a:2c:af:3c:3f:2e:b6:20:45:ff:
                    b0:57:0f:72:8b:69:dc:94:a2:5b:a2:7d:8a:03:9f:
                    52:46:b2:2a:38:bb:2f:e4:bb:df:e3:4f:40:9e:88:
                    83:07:d7:b1:7e:aa:f6:f2:fa:89:db:6a:c9:f7:06:
                    fa:59:19:6d:48:70:0d:a5:b4:14:48:bb:49:ea:3d:
                    4a:4e:84:db:87:f8:36:51:ee:b9:0f:35:92:4d:e5:
                    6f:0f:f4:a5:a3:eb:62:2a:88:4a:69:42:c4:9a:0a:
                    ec:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A1:03:18:C5:12:F1:B6:AF:8D:72:21:EB:F0:8B:F6:D7:40:41:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/38849820-bd67-31ee-910f-a7325f635489.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl

            X509v3 Authority Key Identifier:
                keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.55.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:04:5f:b3:2e:f8:4a:25:77:7c:50:3e:40:77:ad:cb:7d:0a:
         c2:ce:40:3e:a4:42:d1:f2:aa:26:ea:cc:e2:47:18:df:58:ef:
         55:ea:8b:5d:6e:c6:09:e2:19:fb:0d:01:c2:06:0c:35:ab:39:
         39:4e:a5:f8:39:f2:46:24:58:01:23:93:bd:29:2b:3e:3c:d6:
         23:a2:29:10:24:61:4b:31:19:9d:9e:cc:11:85:9b:82:d4:00:
         4e:0f:33:43:3f:a0:76:49:a8:d1:ff:4e:7b:39:38:97:88:2b:
         5d:39:b8:4d:13:74:72:5c:ad:cf:47:4a:49:10:0a:5f:51:49:
         04:d6:54:9b:e2:c5:3a:35:92:46:8d:f5:de:7a:90:18:c1:30:
         01:85:5f:58:3b:4e:0f:88:27:5a:d1:ce:ad:36:ae:be:8d:44:
         cc:3f:a3:e8:6d:67:9b:0d:95:1c:40:75:67:9e:d7:4b:7e:ba:
         24:56:0a:d9:b4:11:4b:3d:af:da:7b:e5:3d:4d:8f:f9:35:14:
         80:0e:a5:25:b5:aa:3c:21:25:89:20:e1:e4:ef:df:fb:2d:39:
         a5:10:c4:0a:ca:4e:37:83:13:9a:3e:b1:38:db:3b:0c:68:49:
         d1:e1:6a:4b:52:db:15:03:df:45:d9:71:47:3c:9a:9a:82:94:
         d1:7c:20:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:44:17 2025 by rpki-client