Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/442d8d89-07c2-3234-8a6b-08d87f6def9f.roa
File:                     442d8d89-07c2-3234-8a6b-08d87f6def9f.roa (raw, json)
Hash identifier:          pDo2fg4T9JRa9mTsO3l3iRUEjhwtPkCxiAMyf2HOhw0=
Subject key identifier:   05:44:8C:2E:18:D6:F2:A9:44:4A:8D:82:C5:32:5D:8C:EE:41:BB:CE
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584961B9A18B86A31FCEA2D30200
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/442d8d89-07c2-3234-8a6b-08d87f6def9f.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     12083
IP address blocks:        143.59.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:a1:8b:86:a3:1f:ce:a2:d3:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=c7b4b8d2-3687-456e-867e-f326491294f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0f:2f:d1:70:e7:87:0a:04:73:90:cb:ce:82:
                    85:4c:b4:ec:67:d0:c4:7d:6d:1d:6a:a0:ae:f2:3d:
                    c3:49:d7:e0:b9:c6:02:51:05:2d:47:f8:d0:4d:8c:
                    25:bc:63:a1:a3:ea:c9:9d:d8:9f:d4:54:8c:ed:35:
                    e2:90:14:b2:7a:f4:e7:1e:98:28:dd:9c:2f:aa:dc:
                    eb:b2:01:fd:a3:fc:42:64:21:1b:be:43:af:45:48:
                    1b:03:62:af:0e:1e:32:77:75:10:83:9a:c8:e3:57:
                    c4:2e:3f:29:38:0d:3f:88:1b:15:f8:a7:38:f2:66:
                    38:1f:22:82:f9:82:11:18:40:a8:f2:fb:df:89:30:
                    f1:8b:ec:0a:dc:3c:01:3e:cc:bd:e2:74:3d:3e:f8:
                    91:9a:ce:31:58:ea:f8:33:ab:2e:66:d1:52:08:59:
                    c1:fb:f6:c8:7a:ab:5f:e1:ca:37:2c:51:50:4d:32:
                    d1:6b:ed:fd:42:15:db:11:a1:c3:43:91:8e:82:f5:
                    dc:78:8e:64:9d:f7:ca:97:0f:2b:89:19:a2:d7:3a:
                    ce:4b:c6:fc:dd:5a:e0:ed:39:e6:7f:c8:1b:69:b0:
                    e7:85:59:14:1a:62:1a:10:be:6b:b9:96:56:1e:db:
                    d2:42:03:81:82:e2:55:c6:1c:49:9d:3e:cb:0f:19:
                    f0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:44:8C:2E:18:D6:F2:A9:44:4A:8D:82:C5:32:5D:8C:EE:41:BB:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/442d8d89-07c2-3234-8a6b-08d87f6def9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.59.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:7b:35:99:bb:b8:37:e1:0b:65:8f:77:25:c8:f4:ce:7b:1d:
         80:0f:55:6e:49:90:2b:bd:5d:00:cc:e0:a8:a7:0b:dc:c8:a0:
         71:db:d7:59:99:e9:95:91:62:33:c0:b2:67:5a:73:8a:94:f7:
         3d:8c:d2:9e:32:77:b3:f5:e9:7c:b7:05:77:0d:b1:dc:ba:1a:
         85:59:c5:a4:0c:f7:5a:23:b9:28:3c:35:42:ab:c6:01:16:e2:
         2d:17:0a:54:c8:d2:f6:08:06:df:05:4c:8b:2e:95:b7:2d:b5:
         bb:53:2c:ae:87:7d:0b:f1:58:9d:76:7c:ff:83:49:66:88:06:
         d4:4d:3c:21:d9:7e:cd:b6:d9:4d:20:cc:1b:0c:06:0e:be:3d:
         f7:c8:b3:31:b4:e0:6b:38:c8:c3:c2:8f:6d:c4:c9:8a:7b:5f:
         06:4a:f2:2a:bf:ff:8c:08:cd:90:36:3e:12:40:4c:93:b2:c1:
         40:48:86:df:21:0e:98:4d:d4:6a:a5:d1:c2:f7:e6:06:73:a5:
         02:ec:07:ae:e9:9b:07:7d:66:35:62:57:a3:35:e3:d4:bd:28:
         40:8a:c5:bf:d3:de:af:72:97:a0:df:da:40:66:9b:d8:ad:5d:
         25:12:72:bb:dc:2a:88:26:23:4a:71:31:cc:fe:98:91:6d:c4:
         b2:cc:bc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:00:15 2025 by rpki-client