Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/fb4ff76b-09ec-3ba4-8cca-842fe4600e5f.roa
File:                     fb4ff76b-09ec-3ba4-8cca-842fe4600e5f.roa (raw, json)
Hash identifier:          7cIuY+J3/4d2wX43+NHvkfkp1UhyWWUHo4y+tTHLkps=
Subject key identifier:   7A:F8:68:01:D6:F5:F7:29:66:7D:86:5B:DE:29:07:83:6D:1F:CE:CB
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584917DC39F987E2462181A59B80
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/fb4ff76b-09ec-3ba4-8cca-842fe4600e5f.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     22953
IP address blocks:        132.219.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:39:f9:87:e2:46:21:81:a5:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=c6da4e29-013b-48d1-90ed-4be03382797c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8d:0d:26:b4:6d:b0:77:f1:12:14:bb:b7:e8:
                    e9:a9:4a:d1:8b:f7:81:8f:fd:66:7e:9f:c0:0c:dc:
                    db:b1:d2:3f:c9:9c:6b:90:0b:06:a4:20:dd:63:47:
                    77:ed:01:dc:e4:48:a5:45:0b:af:44:51:0e:9b:27:
                    66:7a:02:93:21:b5:20:47:d6:50:c1:89:bc:91:81:
                    f5:88:10:17:92:90:37:94:95:f8:f6:b1:63:c0:b1:
                    8d:4d:43:b0:3f:47:cb:0c:fd:bc:6f:92:80:ee:16:
                    48:4f:13:b0:4a:50:61:61:d2:77:e8:fe:a1:c8:5b:
                    0c:60:47:fa:13:6d:d5:f4:37:71:0c:2b:88:fe:2a:
                    af:24:eb:9a:63:88:3f:1e:12:c4:af:1d:33:88:1d:
                    1d:eb:7e:a5:b7:93:28:0b:44:03:13:70:8c:e9:5b:
                    2a:17:01:8c:f2:6e:8c:ee:8e:81:97:aa:06:8b:a6:
                    1b:67:c2:ea:c8:7e:d2:f6:03:59:15:f6:e9:6f:87:
                    c8:f3:16:48:2a:82:02:ca:8e:8e:8b:d7:7d:e7:2e:
                    66:d2:a5:bb:97:47:6a:e4:b8:bd:2b:16:13:4e:83:
                    8c:d1:72:9c:f5:88:7f:31:b7:17:bf:ef:18:f8:46:
                    ca:81:4c:b6:b3:01:39:ea:be:25:7f:89:46:86:07:
                    a0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F8:68:01:D6:F5:F7:29:66:7D:86:5B:DE:29:07:83:6D:1F:CE:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/fb4ff76b-09ec-3ba4-8cca-842fe4600e5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.219.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:c1:b3:68:1e:d3:1f:05:51:64:46:45:d7:36:ee:f9:bd:73:
         e1:78:6f:47:e4:40:13:be:05:ce:51:2b:b7:b5:bb:68:5b:6c:
         f3:e6:b4:5a:1f:dd:5f:3e:a5:f8:5d:55:d4:32:0d:11:57:d8:
         97:88:89:b3:52:ce:16:b2:ae:cd:fe:00:df:b0:17:2e:cb:a3:
         28:f6:6a:7b:a0:a4:03:fd:d3:16:5a:da:45:20:db:58:00:20:
         4c:0c:d6:fb:bc:a1:40:e0:20:a5:f7:f5:3d:50:fa:98:60:68:
         a4:fc:1a:97:36:98:36:d7:15:8c:05:51:ad:84:40:cc:de:2a:
         83:50:a4:5e:46:3b:ae:68:07:a1:c4:aa:b4:94:75:1e:5d:6b:
         2a:6f:61:47:36:23:38:9b:f5:3d:04:82:86:db:a2:68:db:14:
         ff:a2:7c:01:c8:0f:04:97:2d:44:c8:b9:02:6d:5f:ed:27:3c:
         9e:90:d7:a1:f5:c2:de:e8:4e:1c:1b:fd:4e:51:76:33:da:7e:
         09:ca:9b:4e:3e:65:1a:af:6a:6d:ce:48:11:13:57:ed:41:67:
         73:30:49:f0:b7:4f:4c:76:60:bf:ca:c8:fb:43:db:0a:e3:ab:
         5d:bd:fd:6e:35:ef:1a:b0:53:98:86:e5:c3:0f:ce:b7:a4:cd:
         01:27:88:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:04:08 2025 by rpki-client