Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/b810e319-cb8b-3cfc-8a59-ef8e0a611ef2.roa
File:                     b810e319-cb8b-3cfc-8a59-ef8e0a611ef2.roa (raw, json)
Hash identifier:          NSYLfJoOcq4M1D4ExGtupBgNzcK6P6Mr0NGD2zNHqE0=
Subject key identifier:   56:3A:4B:D1:9C:2D:92:E1:DE:F7:B5:44:06:91:66:35:A3:A4:55:CD
Certificate issuer:       /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial:       010D0C9F432858491D7188FA6F87EE96895EAF80
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/b810e319-cb8b-3cfc-8a59-ef8e0a611ef2.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     11650
IP address blocks:        198.46.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:88:fa:6f:87:ee:96:89:5e:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=6fd95b7a-0924-4e9c-b1a6-cb06e99a6ce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9d:9e:d6:95:d8:fe:10:a3:21:63:26:cd:64:
                    62:8a:65:9a:0a:83:9b:0c:b4:9e:a2:f5:4f:12:36:
                    74:75:ed:d6:df:bc:50:0e:f2:dc:99:af:0d:67:27:
                    a1:5e:a2:49:c3:07:cf:d1:a8:1b:24:dd:25:be:76:
                    00:67:21:fe:36:54:fc:99:c9:a0:cb:f2:fe:6c:09:
                    cd:f6:28:87:7e:d9:e0:25:da:e6:ff:6f:f6:d6:b3:
                    67:9f:f0:80:d1:ee:19:1c:10:e6:23:2e:56:b4:8c:
                    28:db:d4:a0:de:ff:51:22:20:58:50:ff:2a:99:7c:
                    81:5f:bb:d7:1e:a6:af:88:c4:83:d4:71:81:71:16:
                    ee:d9:f1:83:85:65:2b:24:ad:1a:0b:e0:9b:d2:83:
                    d4:2e:b2:56:12:d4:c6:a0:27:fd:cd:e0:1f:80:8f:
                    46:70:03:57:31:33:9f:5d:90:e4:25:d9:87:08:94:
                    9a:30:28:b1:ce:19:6c:2a:93:5d:c5:a7:79:83:4b:
                    a2:26:3e:dc:0d:c0:84:e1:24:57:5d:8b:e7:c8:46:
                    74:50:a7:6b:ef:84:b1:e2:a8:5f:d7:15:75:03:a0:
                    c2:b0:f9:c3:3c:8a:6f:da:f5:7f:f7:2d:f8:2a:9b:
                    ff:5b:3f:a6:aa:bf:4b:3b:3c:87:b0:72:10:93:ef:
                    85:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:3A:4B:D1:9C:2D:92:E1:DE:F7:B5:44:06:91:66:35:A3:A4:55:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/b810e319-cb8b-3cfc-8a59-ef8e0a611ef2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl

            X509v3 Authority Key Identifier:
                keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.46.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:c7:58:93:bc:f1:51:5f:c9:95:d8:04:7b:77:1b:1c:a7:29:
         64:8f:9f:b2:cd:8e:5a:71:80:13:62:08:db:f2:9a:72:28:bc:
         d3:47:37:0c:b0:70:d8:62:f6:34:a4:ba:ab:e3:cd:a6:0a:79:
         ce:b7:13:52:25:1d:99:e3:c8:50:61:88:50:11:cb:a2:8f:7b:
         06:30:2c:92:6a:8b:77:e3:1a:eb:a3:b7:69:1f:01:14:94:5f:
         32:d5:10:cd:c6:13:39:31:c2:5a:7d:cd:d0:91:f7:d9:f2:14:
         16:41:dd:e8:4d:f5:2b:94:4e:17:e1:8d:b0:28:54:db:d5:94:
         31:24:18:f6:70:33:a1:47:55:75:b4:e6:97:ea:0f:4e:5b:28:
         3d:07:5b:88:94:fa:6b:11:2c:c7:55:c8:1a:8f:fb:51:f6:88:
         6e:b6:54:2a:eb:8b:6c:1b:bd:fe:0d:e6:1a:f6:1b:eb:28:30:
         84:20:28:b9:55:04:12:b2:f4:18:cf:30:3d:4c:7c:d9:83:5a:
         9a:c0:02:7b:57:28:20:34:63:dd:1a:cf:db:de:a7:44:e1:89:
         e2:c0:12:c6:e3:3a:cc:ff:b1:55:75:17:52:34:2d:b5:c7:b0:
         e0:5c:81:17:f8:cd:46:db:94:f2:80:3c:7a:d5:a2:09:e8:78:
         44:78:ed:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:27:59 2025 by rpki-client