Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/2a0d65f4-0bf8-3733-8250-200e7634a82c.roa
File:                     2a0d65f4-0bf8-3733-8250-200e7634a82c.roa (raw, json)
Hash identifier:          1eoyq6F8rTo/4iRoJF+bmVcymsXzivOLWeuozfDhMcY=
Subject key identifier:   7B:7D:AD:B3:2D:29:EE:F8:09:32:74:D4:0F:5D:AA:DE:19:A3:C9:79
Certificate issuer:       /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Certificate serial:       010D0C9F432858495EEEEA657CC0B73C6E686180
Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/2a0d65f4-0bf8-3733-8250-200e7634a82c.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     10430
IP address blocks:        168.99.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:ea:65:7c:c0:b7:3c:6e:68:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=e4b4c21f-e735-438a-9693-ca384d763a5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:65:e1:7a:3d:2c:cf:08:c0:8e:04:76:bf:86:
                    d3:1d:9e:bd:e3:11:6a:47:02:31:7f:5f:3d:5b:ac:
                    d5:6a:ba:af:1b:90:12:5e:3c:90:83:74:00:e9:40:
                    f5:43:b7:97:59:3e:bc:0a:13:5e:88:f7:3a:d3:91:
                    db:57:67:f7:6e:fb:d1:4d:62:b9:d8:d5:c9:23:81:
                    dc:b7:76:ae:b0:46:25:45:f5:1a:f6:de:9b:be:4d:
                    5b:20:3e:ba:0e:d2:22:a9:14:68:b5:6f:5a:23:1c:
                    19:cb:03:2e:db:65:a7:ab:6e:14:c9:ee:56:45:8d:
                    52:21:16:57:5b:82:81:1c:c7:ae:f3:e2:b7:4d:c5:
                    e2:76:9d:1b:72:4f:a9:87:6c:db:ce:42:66:33:b0:
                    7d:f1:0e:c7:5e:53:86:e4:4e:57:bd:5f:7a:a0:98:
                    a0:51:8d:55:3f:35:b1:21:58:03:34:5b:d4:02:15:
                    9f:08:33:84:8a:24:b2:91:13:51:e9:d9:e0:55:6e:
                    36:64:0d:e4:58:46:21:88:c8:ad:e7:a5:7d:ba:87:
                    3c:6d:33:28:b2:c9:7b:ab:4f:80:0d:80:92:88:2c:
                    af:b1:05:00:89:d7:c3:cd:d3:67:d1:5c:72:bc:1b:
                    68:2e:88:fe:40:82:45:b7:f1:89:a8:9f:be:4c:c2:
                    eb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7D:AD:B3:2D:29:EE:F8:09:32:74:D4:0F:5D:AA:DE:19:A3:C9:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/2a0d65f4-0bf8-3733-8250-200e7634a82c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl

            X509v3 Authority Key Identifier:
                keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.99.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:b6:28:e9:0b:ee:62:eb:d5:b8:84:d5:c4:91:62:2f:94:22:
         d5:34:c3:f7:4b:28:73:51:0a:90:10:6a:44:8c:02:44:5d:b2:
         3a:4b:3c:71:61:97:a7:e0:4b:e3:78:97:4b:29:e9:03:7d:4c:
         d4:ea:e0:7b:82:ac:ce:da:af:4c:4c:d6:1d:fe:74:1c:1e:f2:
         36:ff:d1:23:11:ed:60:91:50:1d:4c:b6:36:38:d1:9a:3a:92:
         bd:97:41:9c:e1:57:fa:8c:fd:31:f8:89:c4:de:8c:ef:46:93:
         b8:4b:b2:b2:02:4a:fb:8c:86:94:d8:db:82:4a:4b:d7:2c:01:
         03:57:2a:d3:c1:67:ae:cc:88:26:5d:66:9e:d3:0f:c7:86:65:
         27:52:a5:e1:d7:7e:c7:be:fe:1c:f7:28:8b:30:79:96:a3:aa:
         ee:55:c8:59:95:4d:ec:5d:f6:03:a0:76:bf:42:95:db:10:d4:
         29:7c:35:15:47:9c:12:d7:7c:e9:d1:03:9e:28:2f:bf:cf:0a:
         2e:82:95:e8:f1:06:fe:45:b5:4c:bb:18:2e:b4:e9:64:92:d2:
         4c:70:11:f2:64:1d:c9:73:51:a6:82:c0:08:31:b4:71:46:27:
         a9:31:6b:20:15:7d:2a:8c:09:0c:ee:18:ba:56:95:c6:f0:01:
         82:95:49:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:40:42 2025 by rpki-client