Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/80a71883-2d20-3602-b123-f618f72af148.roa
File:                     80a71883-2d20-3602-b123-f618f72af148.roa (raw, json)
Hash identifier:          Ke/oxyN68dXwTEEh1kjSjc/FAio7k5MvjTPkkBMl+Zk=
Subject key identifier:   DA:34:68:0A:1B:F0:61:3B:3C:35:A8:AF:19:91:53:1C:06:AE:56:4D
Certificate issuer:       /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial:       010D0C9F432858491ED6E77D102DE7F1B8CEA640
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/80a71883-2d20-3602-b123-f618f72af148.roa
Signing time:             Sat 08 Mar 2025 14:00:52 +0000
ROA not before:           Sat 08 Mar 2025 14:00:52 +0000
ROA not after:            Fri 06 Jun 2025 13:00:52 +0000
asID:                     1239
IP address blocks:        199.11.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1e:d6:e7:7d:10:2d:e7:f1:b8:ce:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
        Validity
            Not Before: Mar  8 14:00:52 2025 GMT
            Not After : Jun  6 13:00:52 2025 GMT
        Subject: CN=ead09664-c1f6-4ac7-9e4e-c0b56679691c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:24:84:c0:06:4d:9c:1d:c6:df:6a:68:c8:a7:
                    6d:eb:89:39:e3:a7:1a:63:af:ed:88:54:0b:6a:06:
                    2d:2d:b1:54:75:3d:90:2c:d6:af:4e:a4:dd:2f:ae:
                    18:81:36:4e:d2:93:20:e0:7b:92:bb:96:26:70:34:
                    85:a9:5d:51:2e:c4:4e:22:77:e5:c6:6d:b3:77:0d:
                    73:02:a9:44:2b:67:25:31:fd:1a:72:f8:26:47:55:
                    e7:1e:da:11:60:c1:a0:c0:32:78:e0:d2:93:a7:ac:
                    ea:24:3a:8a:e5:d2:36:06:56:df:31:f4:96:f5:ea:
                    39:d2:36:54:72:76:a3:de:3e:96:5a:0f:69:94:6f:
                    c4:ea:53:27:30:ec:3e:00:b4:f6:45:6b:00:80:33:
                    fc:18:60:6b:47:f0:63:08:0a:c1:70:1e:7e:a3:30:
                    b5:d4:f2:5c:2d:a4:54:db:21:31:cf:7a:57:9e:2a:
                    0d:83:c4:84:f6:e5:2d:3b:53:72:d3:2a:5d:a2:17:
                    c5:06:17:a3:6f:2b:ef:34:96:fb:1a:f0:f0:3a:b7:
                    69:95:2e:f0:b2:5c:42:01:d0:4b:06:bf:c7:2d:6a:
                    18:13:a8:8c:b7:70:55:68:9c:95:7c:c2:a2:5c:b6:
                    85:64:d3:7a:7b:c0:e8:b7:dc:c3:d1:d3:62:97:2c:
                    c4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:34:68:0A:1B:F0:61:3B:3C:35:A8:AF:19:91:53:1C:06:AE:56:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/80a71883-2d20-3602-b123-f618f72af148.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl

            X509v3 Authority Key Identifier:
                keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.11.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:b7:36:7c:29:be:65:35:a1:39:a4:91:9c:d9:a3:18:74:f1:
         75:a2:15:53:81:b3:f5:d3:09:70:dc:9d:e2:27:46:5a:ee:aa:
         e7:5a:c4:9e:19:1e:d5:85:07:1f:0c:74:6b:5c:05:da:82:9c:
         49:8d:b3:f4:62:2a:d5:5e:01:8d:22:cd:12:79:63:2b:36:20:
         9d:b8:07:57:2a:4b:ed:b5:ad:1b:25:d5:c7:71:3d:3d:75:62:
         b1:10:77:f0:b1:3f:85:0e:db:13:ac:37:0a:fc:85:b4:ea:32:
         99:d4:77:3c:6e:f6:09:a3:71:3b:55:ac:9e:09:ca:c2:f4:00:
         4a:ed:ca:f3:0c:2c:f0:45:3e:17:29:1f:fb:66:c6:0f:b7:d2:
         20:dd:b1:fb:b8:d5:cf:16:62:14:5e:c0:b0:5b:ed:f7:2c:72:
         57:9b:0f:e5:60:fd:e4:67:de:af:aa:d0:ce:06:3d:aa:bc:ba:
         e0:d5:81:d0:b0:72:d6:0a:92:a4:20:7e:42:f5:04:69:b6:81:
         98:80:8c:3c:65:b2:bc:c0:75:67:1f:31:e2:84:70:4f:bc:c0:
         39:5b:84:47:89:c3:0c:e0:a4:78:84:b9:13:3d:d8:e1:77:66:
         87:d5:fa:44:05:b0:b4:82:9d:8e:9f:93:88:e4:f8:72:1f:f0:
         fb:6d:f1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:26 2025 by rpki-client