Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/039f5692-e754-3499-b816-cf4abdf29fae.roa
File:                     039f5692-e754-3499-b816-cf4abdf29fae.roa (raw, json)
Hash identifier:          C/9geJovUAX9v3iYrqy5FEJGv9XdDO5lwZEV6GW6U78=
Subject key identifier:   D7:4B:15:F9:79:CE:DD:A6:FF:1F:58:7A:73:55:89:2A:B3:A7:22:07
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858491AA6BD040CDA3DF9A0341DA0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/039f5692-e754-3499-b816-cf4abdf29fae.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     18563
IP address blocks:        159.18.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:bd:04:0c:da:3d:f9:a0:34:1d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=0d44f1b3-a4ed-4eba-ade4-0054630e1cd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:65:4f:db:e3:f9:40:86:a6:4a:ef:4e:52:b8:
                    6b:0e:d1:d8:13:03:e8:58:ab:71:79:34:88:c1:f5:
                    e1:40:e7:86:7b:53:21:67:b9:f3:da:ef:46:ce:a5:
                    20:17:b2:3e:cb:d5:c5:95:b9:d6:50:47:1f:f1:b6:
                    d1:94:20:93:29:57:a8:1e:af:88:07:22:2d:6b:61:
                    8f:43:af:07:d0:43:df:58:99:c6:0c:c2:fc:4b:b0:
                    ca:1d:27:d0:c6:42:4e:52:03:2f:69:bf:89:cf:11:
                    6a:ed:33:80:63:1d:19:b1:ce:30:25:6e:1e:52:a0:
                    95:a1:9e:7e:69:55:21:23:7a:b5:80:37:22:84:5c:
                    02:ab:b8:d8:d8:87:56:96:d0:a3:21:4d:0c:c7:f6:
                    7a:38:61:b4:b6:65:75:65:c3:4e:e8:77:d9:4d:35:
                    a4:b1:4d:07:df:65:6f:03:26:69:9c:b1:53:cf:a8:
                    64:d7:b7:fd:1f:44:3f:05:a6:2e:96:7e:e4:a0:57:
                    f4:b0:09:ab:94:36:ff:45:6b:08:d7:9a:5c:fc:81:
                    ae:6f:8e:74:72:70:66:6e:91:36:3f:d9:c8:7d:d2:
                    ee:f1:45:56:b3:76:df:d4:f7:78:52:c4:70:68:5d:
                    c7:9b:7d:ac:6b:0e:b5:a5:bd:58:d2:3e:5a:81:e5:
                    09:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:4B:15:F9:79:CE:DD:A6:FF:1F:58:7A:73:55:89:2A:B3:A7:22:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/039f5692-e754-3499-b816-cf4abdf29fae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:03:59:be:ec:06:05:7f:56:06:8e:26:87:b9:cb:11:ef:f5:
         54:bd:d7:cf:67:32:b4:56:d8:3e:ad:db:73:de:df:39:a7:e3:
         f9:34:da:95:94:7f:e3:88:6f:d3:5e:89:9c:79:5e:f1:25:e6:
         13:fb:a6:ed:b1:65:4b:b1:a4:7c:f6:b8:47:86:fa:14:2d:fa:
         f4:19:0b:e6:ad:af:25:0f:a8:0a:d2:30:12:89:0a:eb:8c:34:
         88:9c:da:47:c8:1c:d9:16:7a:9a:1a:9f:80:1e:8a:e0:6a:fe:
         16:89:f1:30:d6:ba:2e:6f:ef:1c:10:e6:3f:a5:77:0c:72:70:
         a5:c7:42:6b:f3:b9:c6:0d:f6:17:43:d5:47:09:58:f0:78:f4:
         d4:89:37:5c:ee:81:ea:89:9d:cb:c7:45:7b:c6:a5:d1:49:36:
         26:4d:7e:40:5e:e5:2c:83:fe:35:5d:81:3c:11:43:ac:82:7a:
         a9:da:72:d0:3a:02:92:50:2f:3e:a3:ae:a2:6b:72:e2:24:e7:
         59:50:fb:c7:8b:28:62:fd:51:10:47:ef:bb:50:e5:c8:d8:1b:
         95:94:3b:72:1a:08:8d:85:ca:6f:da:54:b9:89:ed:52:e2:53:
         ec:ba:b3:5a:c7:9b:4c:6e:7e:3b:18:7b:ff:e9:c1:2c:2d:d3:
         9b:9c:37:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:54:30 2025 by rpki-client