Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c5885067-49f4-3a7f-bf2e-4f3c31808739.roa
File:                     c5885067-49f4-3a7f-bf2e-4f3c31808739.roa (raw, json)
Hash identifier:          X96UD+v4RHKUqsXyCFb6aafMRITrGnG4u1PlNBDY2PA=
Subject key identifier:   E8:67:BB:F1:4D:4D:B9:48:1E:D0:DE:B3:DB:71:D9:53:5F:23:26:BA
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285848E9CBF14C53B2CD438346C740
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c5885067-49f4-3a7f-bf2e-4f3c31808739.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     25899
IP address blocks:        199.182.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:f1:4c:53:b2:cd:43:83:46:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=e9583d70-5be7-44e1-8685-0ffbdd5a0f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cc:ad:f6:15:7a:60:71:c0:ee:e6:fb:fd:33:
                    e1:f9:ba:b9:6b:ca:0a:4f:4f:64:56:4d:ce:cf:16:
                    1e:7b:86:0f:79:3c:cd:7d:3c:08:cb:e0:74:d5:0d:
                    02:36:77:cf:a4:cf:bf:71:86:6a:de:fb:50:5e:1d:
                    f4:d2:19:60:18:9f:ea:4e:28:7e:f2:b8:0a:bd:0f:
                    3f:11:e2:a9:e0:9c:21:3b:3c:91:8c:00:b7:38:d5:
                    e8:27:51:49:5e:18:39:d8:17:a8:ca:7b:6e:d4:13:
                    f3:ec:69:9f:1e:dc:87:7b:67:67:da:e1:2e:48:bc:
                    55:e2:d3:3e:4d:ba:ac:43:71:3e:cf:15:5d:06:a7:
                    db:a3:de:82:4d:8d:9f:47:6c:ea:30:8d:bf:cf:ef:
                    b4:aa:84:4e:ab:47:53:9e:61:74:65:99:c8:17:9b:
                    6e:97:77:32:db:82:ed:82:94:5f:0d:3d:af:82:a4:
                    0c:20:ce:94:34:8f:ad:77:da:ed:4b:6a:5d:b8:68:
                    c2:1a:51:35:7e:a3:4a:bb:4d:3f:f6:4b:56:41:75:
                    b8:d5:f4:54:b3:2c:f0:3e:ae:ea:a3:9c:6e:7f:eb:
                    6e:0d:93:64:e7:5f:5a:f3:d8:4f:20:a9:c5:da:55:
                    99:aa:39:96:0e:ea:24:14:5a:e2:98:de:98:9f:85:
                    53:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:67:BB:F1:4D:4D:B9:48:1E:D0:DE:B3:DB:71:D9:53:5F:23:26:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c5885067-49f4-3a7f-bf2e-4f3c31808739.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:d0:8e:3f:42:ed:2d:63:5e:19:c0:dc:a7:2e:db:b6:6d:c6:
         0a:9b:d3:13:81:1f:c4:93:50:9b:d1:74:41:37:2e:50:60:4f:
         ba:e5:04:0f:7a:ea:62:11:32:39:18:0f:eb:e0:c2:a4:a9:55:
         d8:41:41:c4:93:67:81:4b:a9:66:95:5a:6e:6f:74:8d:9d:77:
         ce:da:54:da:d9:11:7d:55:71:fb:9c:4c:0a:6e:3b:07:56:f0:
         74:f1:6c:1b:ea:2f:42:6e:2a:55:49:a5:30:8b:df:7c:6b:c0:
         08:e3:19:d8:da:b0:7a:bd:2c:b8:32:db:99:79:d3:e2:ba:16:
         08:22:e8:79:ba:d2:1a:1b:40:d3:ad:77:db:e9:21:dc:d3:85:
         76:b5:a7:9c:01:30:b1:2d:ac:4f:1d:42:78:56:39:ef:88:04:
         64:a5:65:36:d4:b1:01:fe:23:06:5c:bd:7a:c1:6b:86:9c:a8:
         a6:07:68:ca:0c:51:ea:00:11:61:b3:e8:9b:65:90:32:6a:93:
         a1:a5:f5:2c:54:ff:14:76:f3:b7:05:ff:d1:01:3e:b8:f4:ae:
         8b:15:d6:9d:90:b5:27:e8:50:92:28:73:1f:7c:6a:35:07:cd:
         56:d6:4e:8f:c9:60:04:aa:26:20:66:ad:90:e0:96:dd:4a:3b:
         4d:39:e4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:41:22 2025 by rpki-client