Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8313af5d-b9c8-4967-8095-04e99d8a4197/be685e96-e39f-382a-9f8a-2d5ad6f4aa48.roa
File:                     be685e96-e39f-382a-9f8a-2d5ad6f4aa48.roa (raw, json)
Hash identifier:          F/tsXLq2r61+QmG3GoQOcAGwzVCV56mIA9HOJOa8JG4=
Subject key identifier:   58:A3:4C:C4:79:BC:29:06:11:32:EE:C6:70:36:30:46:72:82:38:94
Certificate issuer:       /CN=8313af5d-b9c8-4967-8095-04e99d8a4197
Certificate serial:       010D0C9F43285848C6E63904578CA29DB162F200
Authority key identifier: 40:FD:F7:21:C0:D0:2A:15:9E:98:0C:F2:39:45:13:9A:89:46:EE:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8313af5d-b9c8-4967-8095-04e99d8a4197.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8313af5d-b9c8-4967-8095-04e99d8a4197/be685e96-e39f-382a-9f8a-2d5ad6f4aa48.roa
Signing time:             Wed 05 Feb 2025 02:00:39 +0000
ROA not before:           Wed 05 Feb 2025 02:00:39 +0000
ROA not after:            Tue 06 May 2025 01:00:39 +0000
asID:                     17369
IP address blocks:        192.77.116.0/24 maxlen: 24
                          198.175.251.0/24 maxlen: 24
                          198.175.252.0/24 maxlen: 24
                          206.211.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8313af5d-b9c8-4967-8095-04e99d8a4197/8313af5d-b9c8-4967-8095-04e99d8a4197.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8313af5d-b9c8-4967-8095-04e99d8a4197/8313af5d-b9c8-4967-8095-04e99d8a4197.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8313af5d-b9c8-4967-8095-04e99d8a4197.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c6:e6:39:04:57:8c:a2:9d:b1:62:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8313af5d-b9c8-4967-8095-04e99d8a4197
        Validity
            Not Before: Feb  5 02:00:39 2025 GMT
            Not After : May  6 01:00:39 2025 GMT
        Subject: CN=5706a530-4ef5-472f-942e-76e0c6b91a45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:41:13:07:53:67:f7:f9:b0:22:8f:0b:0e:eb:
                    5c:f9:33:0c:35:74:9a:2b:e9:69:7c:48:32:51:ca:
                    e1:8c:2a:72:15:d8:c4:93:83:dc:7c:10:71:cb:81:
                    db:a3:6a:90:c5:d1:87:21:d6:8a:78:60:b8:0e:c5:
                    b8:d5:2f:8a:bc:68:82:57:c4:89:7f:6b:dd:50:6d:
                    b1:06:cf:2d:67:24:a5:40:17:3e:90:8e:bc:03:0e:
                    3d:12:1f:95:19:18:74:1a:26:ed:a6:80:1b:4d:f6:
                    0b:15:15:1f:cb:1a:76:14:3a:ed:6a:a1:1f:f2:ef:
                    1c:8d:de:dd:e4:5f:4e:7b:cf:85:c9:ed:8b:e7:d3:
                    69:2e:88:e2:29:30:f9:f7:aa:69:0d:6a:cb:c6:7d:
                    f9:e2:f8:d5:15:71:94:c4:ed:61:11:d5:ab:ac:29:
                    6f:ba:df:41:85:81:c4:c7:a7:b5:0b:83:80:f5:dd:
                    0f:97:91:7d:bc:c0:8d:63:08:09:0c:5c:9e:3d:48:
                    d9:08:f9:48:d9:da:87:e8:63:80:5b:0b:76:58:f7:
                    01:14:ce:cb:1a:3f:cf:5c:a5:ca:e1:8c:2c:96:89:
                    a6:3c:b3:2e:e4:5a:c5:8b:08:51:e3:1b:80:d9:b6:
                    d4:9e:e9:be:c1:20:80:b2:01:55:fb:bb:98:e4:a9:
                    2c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A3:4C:C4:79:BC:29:06:11:32:EE:C6:70:36:30:46:72:82:38:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8313af5d-b9c8-4967-8095-04e99d8a4197/be685e96-e39f-382a-9f8a-2d5ad6f4aa48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8313af5d-b9c8-4967-8095-04e99d8a4197/8313af5d-b9c8-4967-8095-04e99d8a4197.crl

            X509v3 Authority Key Identifier:
                keyid:40:FD:F7:21:C0:D0:2A:15:9E:98:0C:F2:39:45:13:9A:89:46:EE:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8313af5d-b9c8-4967-8095-04e99d8a4197.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.77.116.0/24
                  198.175.251.0-198.175.252.255
                  206.211.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:28:7f:ca:21:10:f9:e9:f6:ef:7b:a0:ab:46:46:2e:c2:aa:
         15:3a:27:9b:8e:37:4f:a0:93:55:43:39:88:d1:32:02:db:e6:
         67:d7:a2:68:d7:f1:30:0f:e0:00:ab:1c:48:c1:fd:b1:de:47:
         85:4d:d3:f7:19:a1:66:86:bb:d1:99:23:cb:cf:82:a3:f0:d2:
         83:e2:db:1f:a4:b1:6b:49:aa:42:be:15:b9:60:48:45:57:eb:
         db:64:f1:32:14:4f:90:2b:ae:89:a5:8f:84:0f:93:3d:5e:5b:
         a9:eb:35:04:f4:1d:1f:0a:ff:da:bf:64:d6:78:f3:35:96:01:
         18:f4:ca:3b:08:ac:eb:b7:bf:75:ef:49:a9:44:af:92:6a:87:
         dc:79:3a:43:ce:9e:b7:96:fd:cb:1a:69:98:a0:ad:b4:ea:9a:
         4d:12:56:f2:b5:77:7c:6b:e0:a7:78:84:d9:fc:71:39:88:03:
         db:29:05:9b:00:15:bc:80:78:42:1d:1b:e4:fc:34:52:de:66:
         7a:9c:d8:5a:2a:7d:4c:71:12:ef:8b:70:51:f1:f4:32:28:d2:
         71:c0:cb:76:53:eb:2c:8e:ae:ad:0f:64:cd:49:6a:1e:74:07:
         05:37:fc:c4:6a:99:0b:6b:b4:45:f4:b8:8f:45:0c:78:0c:30:
         79:f4:9f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:04:59 2025 by rpki-client