Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/3f19cad0-6ddd-35a7-877d-c343355be8b2.roa
File:                     3f19cad0-6ddd-35a7-877d-c343355be8b2.roa (raw, json)
Hash identifier:          NapBL5Anq6wbfvHz+aMM68MmrHXIt+e5tnF22IwGyP0=
Subject key identifier:   ED:3F:6E:1B:B5:FC:A0:D9:87:B0:32:71:8F:8A:53:37:FD:94:80:57
Certificate issuer:       /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial:       010D0C9F432858496A19A927F1FABD73E1F8BD68
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/3f19cad0-6ddd-35a7-877d-c343355be8b2.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     25697
IP address blocks:        152.44.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:a9:27:f1:fa:bd:73:e1:f8:bd:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=776114ed-89f5-47c9-94b5-3e7f64317844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e0:2e:d5:43:a4:7d:1d:15:43:b0:85:30:78:
                    1f:a4:d9:a2:46:1a:c0:0e:28:ff:d2:af:a3:0d:c2:
                    d7:d0:af:f3:8c:80:6b:4b:6c:95:7a:e3:45:a4:1d:
                    16:fb:0e:58:42:b1:22:25:cc:4a:e1:8f:ab:dd:60:
                    72:71:d1:aa:d0:6d:45:c1:a9:c1:50:ea:9b:72:84:
                    1a:e1:bd:c7:0a:4d:fd:e6:90:b3:a0:70:5d:c6:71:
                    36:76:05:5f:f0:3b:bf:67:61:91:f0:12:f8:03:ec:
                    3b:41:95:f4:cc:2d:e2:23:08:df:36:3d:a8:52:7a:
                    68:a3:b3:7c:da:ad:17:c5:9d:4d:9b:10:c6:4c:e7:
                    d4:54:e6:2c:62:b6:2d:b9:41:91:4d:a4:6e:fe:d9:
                    55:24:f4:0d:9d:01:65:c8:a2:01:29:0a:1a:86:ee:
                    ad:2d:9c:70:88:6e:4f:ec:99:61:f0:d7:3a:70:5f:
                    36:40:20:62:ac:3c:ef:08:fc:02:93:b7:fa:77:2d:
                    c3:46:f5:fa:7a:e4:79:b8:e1:3d:8c:c6:a3:bf:2a:
                    b7:74:c0:8e:c5:8a:f3:77:6c:04:12:f1:e4:d0:18:
                    11:05:f0:bc:72:6e:1d:6f:49:1e:88:a7:b6:f1:36:
                    eb:d4:ff:8d:fd:a2:51:00:a5:cc:d0:e3:b7:68:4f:
                    32:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3F:6E:1B:B5:FC:A0:D9:87:B0:32:71:8F:8A:53:37:FD:94:80:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/3f19cad0-6ddd-35a7-877d-c343355be8b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl

            X509v3 Authority Key Identifier:
                keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:8a:bd:1e:9d:7b:7e:c2:17:ae:a3:14:17:b7:41:ea:ba:38:
         bb:95:0e:c3:dc:1e:e9:d0:1b:a4:e1:cf:98:b7:5d:84:ac:39:
         3f:63:04:db:ff:65:d1:8c:e4:ed:d0:00:14:c7:6e:a9:dc:72:
         54:90:cf:cb:7e:59:1b:62:89:b6:ab:60:f9:46:1d:8b:25:47:
         55:8f:f9:5e:ea:5f:71:77:52:dd:00:30:f7:5a:4c:11:69:ff:
         3c:59:51:17:66:73:65:84:3b:c3:7f:9a:b0:64:eb:0a:31:e1:
         be:9e:b4:8c:96:89:75:3b:a3:4e:7d:70:b4:5c:63:aa:7e:0b:
         8e:f2:95:fc:96:ac:48:72:b7:68:46:47:cd:8c:2c:53:74:04:
         d3:06:b3:30:0c:79:6c:f1:62:08:61:71:15:c0:3d:7a:ae:65:
         f2:a1:e7:2f:bf:f4:24:e9:f2:53:77:15:5f:45:3e:12:79:99:
         7a:14:24:7e:85:8f:05:8c:95:cc:2a:5f:30:9b:6a:88:0c:96:
         04:58:71:9b:17:1a:63:b0:ca:8c:f0:2d:32:dc:6a:1b:4b:7f:
         58:56:e4:6f:71:43:68:19:c9:05:ac:ed:90:6d:81:ec:63:7a:
         16:51:a0:ab:44:ea:25:32:86:32:bb:14:b8:06:77:2c:7d:3d:
         9d:c8:e2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:15:52 2025 by rpki-client