Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a9a02da3-1044-35f4-9095-e40aa350a168.roa
File:                     a9a02da3-1044-35f4-9095-e40aa350a168.roa (raw, json)
Hash identifier:          imXDXS8MCHRYEm5eUWE5D7g6jFfuT3z3QGIfapLglrE=
Subject key identifier:   90:68:2A:D9:F4:C7:27:36:C5:B2:C1:6A:63:B9:E4:F0:05:E5:C2:D2
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285848C2B64C8EC280C07FB4A3DCC0
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a9a02da3-1044-35f4-9095-e40aa350a168.roa
Signing time:             Mon 03 Feb 2025 14:00:52 +0000
ROA not before:           Mon 03 Feb 2025 14:00:52 +0000
ROA not after:            Sun 04 May 2025 13:00:52 +0000
asID:                     11404
IP address blocks:        199.91.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:b6:4c:8e:c2:80:c0:7f:b4:a3:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Feb  3 14:00:52 2025 GMT
            Not After : May  4 13:00:52 2025 GMT
        Subject: CN=9bd88041-f641-4c25-ae5d-695360534de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a3:cf:52:6f:6d:24:6e:6e:37:ea:65:fc:d0:
                    3c:47:38:df:4b:5d:da:03:40:1a:ec:e6:98:d2:d3:
                    4f:c4:f9:f3:2a:c9:7f:52:b5:2e:aa:20:75:4d:f6:
                    76:b7:0b:22:7d:2d:3a:92:8e:68:9b:29:b0:02:e5:
                    5c:dc:0e:65:51:4e:28:11:cb:26:12:d2:51:0c:1d:
                    87:c2:9c:61:4b:63:10:aa:0a:90:02:dc:60:c0:c7:
                    ca:4d:bd:80:ed:03:44:4a:e1:f8:1a:bf:2b:b4:3a:
                    49:80:49:ad:8e:f9:47:2d:c6:a7:43:ee:fd:5c:fe:
                    36:12:e1:83:97:38:a3:bc:0f:dc:ad:1f:ff:10:71:
                    60:67:d6:8e:09:99:25:5c:43:9d:87:10:08:24:d4:
                    21:e1:5d:37:5d:71:40:71:8b:ae:8c:8b:d5:99:c4:
                    09:88:8c:74:fd:ff:36:fe:3c:0d:86:2f:39:57:58:
                    0f:b8:ac:05:b6:7e:b5:1c:f9:95:0e:b1:e1:9c:d0:
                    3b:d1:cb:9e:96:de:d0:13:3c:9b:29:ee:80:0f:4e:
                    bf:4e:29:c9:d1:78:e4:56:c1:33:d1:20:7b:6b:9a:
                    32:a3:00:e9:ea:aa:ab:3b:bc:53:d5:20:c4:30:87:
                    a2:f3:bc:7c:19:e7:33:9f:55:e2:19:98:f1:b6:fb:
                    a5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:68:2A:D9:F4:C7:27:36:C5:B2:C1:6A:63:B9:E4:F0:05:E5:C2:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a9a02da3-1044-35f4-9095-e40aa350a168.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:95:af:d4:f7:9e:81:66:3c:7a:d3:cd:75:66:0d:91:58:d4:
         39:1a:01:ae:7f:81:20:be:9b:dd:99:c3:ba:ae:4c:62:c9:d4:
         4d:48:f5:77:f0:ae:8e:d9:c8:28:31:83:6d:98:e6:b3:12:41:
         e3:a9:5f:73:8d:c2:c4:d0:9a:e5:f5:d6:2c:90:62:35:77:63:
         32:43:df:c5:d8:44:60:8d:c8:6b:81:c4:9b:9c:3d:6c:96:fa:
         dc:2d:c3:5d:51:23:c3:e9:1a:4e:bf:fc:0a:ca:f3:02:90:a8:
         bb:df:63:6d:20:04:a8:36:bd:5f:d2:4d:a7:9d:56:c4:13:1e:
         f8:8e:7e:da:67:05:77:0a:c4:c9:8e:37:cb:ad:31:e7:1f:ee:
         1f:8d:33:7e:0b:7e:8b:60:39:a5:31:b6:f8:6f:b6:c9:42:f4:
         d1:a1:6d:71:53:c9:65:39:76:ec:5a:23:15:ff:5d:d1:cb:ee:
         d7:95:15:f5:c9:a7:68:91:fc:c0:07:d3:09:4a:b7:68:f6:97:
         86:17:b2:21:68:30:88:f2:c1:70:83:65:c3:d0:db:62:aa:4e:
         a1:09:5b:4e:11:eb:c9:72:3f:f6:7f:91:91:f0:c8:03:5d:53:
         c8:e0:50:b3:0b:6d:a7:0c:70:80:b6:62:ef:b0:94:a9:9f:87:
         c2:e8:ce:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:55 2025 by rpki-client