Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/3f43baa2-79a5-3eb4-a82c-42bfc84d71cc.roa
File:                     3f43baa2-79a5-3eb4-a82c-42bfc84d71cc.roa (raw, json)
Hash identifier:          aNB9KzNOrE4cthKvqLIeGjaW9544VMqoDp/ENpCev6Y=
Subject key identifier:   37:77:C4:9F:6F:79:2D:90:83:16:C3:93:7C:4D:BB:7A:AF:AB:E3:52
Certificate issuer:       /CN=09c51633-340e-4eac-820c-a36b33746085
Certificate serial:       010D0C9F432858492CAE890DD6CAF1334EFC9900
Authority key identifier: 58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/3f43baa2-79a5-3eb4-a82c-42bfc84d71cc.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     13928
IP address blocks:        199.21.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:89:0d:d6:ca:f1:33:4e:fc:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c51633-340e-4eac-820c-a36b33746085
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=0fa532d7-46fb-4d37-a279-1366c6a3b13e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8d:1c:54:c7:d6:a9:9f:ed:99:27:b3:77:1b:
                    8c:97:4b:a2:0d:63:ae:7b:c6:e5:e1:da:6b:f8:9c:
                    41:96:f1:3c:6d:7a:b9:f3:f5:80:0d:37:7c:5e:5b:
                    cd:03:b9:2a:0d:6d:86:c7:25:56:57:f7:a3:b2:ca:
                    2d:b0:20:90:8b:6c:b5:c4:1f:19:d0:9b:70:6f:e4:
                    bf:51:58:eb:f3:a8:e3:78:e9:50:f4:5c:99:db:b3:
                    ec:6e:55:85:0d:99:e0:40:a6:11:b0:db:ae:38:fb:
                    97:32:e3:1a:b1:0a:73:54:85:27:2f:1c:53:d3:75:
                    70:ca:24:8a:6d:30:f0:15:f5:bc:af:19:1a:0b:50:
                    92:88:34:4a:a4:ae:4c:f0:f9:50:a4:80:f0:b9:74:
                    5d:52:b8:d6:f3:f7:b3:6c:ba:42:d7:24:25:6e:3b:
                    82:d1:9f:68:d4:f4:af:ae:43:b9:a9:85:a6:af:fe:
                    2a:eb:d0:4c:6e:4e:ca:7c:e4:de:06:10:bf:4c:d7:
                    a1:c3:35:fb:eb:0d:91:35:cc:a2:67:be:ee:a8:76:
                    b1:f7:d3:aa:8b:b5:ab:a1:1d:bb:f2:c8:3d:9c:c8:
                    a1:62:77:22:a1:8f:16:43:03:90:b3:28:8b:b5:0f:
                    ce:11:a1:dd:26:b1:6f:36:d6:48:78:1f:b1:75:81:
                    6e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:77:C4:9F:6F:79:2D:90:83:16:C3:93:7C:4D:BB:7A:AF:AB:E3:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/3f43baa2-79a5-3eb4-a82c-42bfc84d71cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.21.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:ba:b5:36:9d:e6:66:3d:93:59:34:19:b5:37:ee:cf:11:d0:
         c9:45:29:1c:c0:81:1e:4f:4f:83:85:7f:65:42:3d:45:a5:7a:
         14:eb:78:a9:01:0a:a6:fb:c4:78:99:a4:0b:cc:f1:c0:05:29:
         e5:f4:c2:2f:7d:64:0d:8b:f8:e6:6a:de:63:ec:3f:79:b7:57:
         7d:4c:7f:2a:80:58:d8:ba:d3:04:ab:a0:15:0d:a3:37:d8:58:
         60:9d:b4:dd:8e:5d:aa:59:ef:fb:c9:06:d8:69:2b:1a:9d:56:
         d2:c1:fe:9c:84:45:82:96:db:c3:96:bd:a5:45:52:f2:f3:f9:
         ea:9f:9b:2e:3d:bb:83:3a:40:fb:48:88:2e:1b:1c:1b:ab:58:
         1d:81:e6:1b:c7:c7:48:b1:10:23:38:9d:7d:b3:ed:4c:5f:14:
         51:86:75:34:ec:28:8e:36:6a:6d:70:b6:c8:9a:00:a9:1e:46:
         3f:e3:1c:0b:7e:46:a7:ec:62:16:ea:49:aa:af:0f:ce:02:e9:
         cf:a6:a2:a0:b6:e3:ad:a8:f5:1f:2a:b4:f1:ce:7a:77:21:22:
         16:24:59:81:e8:45:7a:c3:9d:b0:e1:9a:12:7f:f1:ec:00:53:
         13:9c:50:70:ab:79:2e:5c:87:8c:c6:ec:9d:d5:6f:3c:14:de:
         9f:ad:91:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:10:24 2025 by rpki-client