Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375/552cc932-af85-3dda-b0f1-20f41d192db5.roa
File:                     552cc932-af85-3dda-b0f1-20f41d192db5.roa (raw, json)
Hash identifier:          +7YlXGBtGFqTgvgeEQumGVmAowLdDLBln7G8y/OTrZU=
Subject key identifier:   51:D9:E5:4D:08:F7:BC:D8:87:AC:F2:DB:C7:AF:5D:BE:43:CC:4C:9B
Certificate issuer:       /CN=07f6990d-62ce-456e-a266-cab190ec7375
Certificate serial:       010D0C9F432858494039505101EBB725DFF78B80
Authority key identifier: B3:9D:14:14:C4:C8:35:B1:A3:8E:58:24:B3:1B:E6:7D:89:21:A3:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375/552cc932-af85-3dda-b0f1-20f41d192db5.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     62913
IP address blocks:        199.193.162.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375/07f6990d-62ce-456e-a266-cab190ec7375.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375/07f6990d-62ce-456e-a266-cab190ec7375.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:50:51:01:eb:b7:25:df:f7:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07f6990d-62ce-456e-a266-cab190ec7375
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=7aa917ca-7af9-43a9-8059-2c20c22dbc19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b0:0d:9c:36:c6:48:72:35:e1:bf:47:20:cd:
                    16:d6:8f:9f:4c:4b:5c:b6:d4:6a:ff:9f:3e:6e:fe:
                    fe:57:24:7b:c6:e0:28:33:0a:8e:49:15:61:09:6b:
                    6c:a2:3a:8a:30:a7:4c:14:a6:76:ce:ee:ca:8f:14:
                    98:41:75:ab:a5:27:1d:31:4f:dc:58:5e:e7:6a:a0:
                    04:d1:68:bf:03:27:d1:c4:2c:16:63:56:da:b4:c9:
                    68:17:45:d0:88:aa:e2:ae:6d:0d:df:0f:91:46:75:
                    79:9c:91:da:ce:1f:74:88:99:07:0f:52:6b:3d:ec:
                    bd:18:81:a4:b2:64:87:eb:24:62:2d:1e:83:d9:bd:
                    1b:58:e9:b7:8b:37:59:a9:e4:2c:16:5d:1e:e5:7d:
                    7a:8c:a7:8e:49:3a:f2:0b:02:3d:26:c8:1f:ef:dc:
                    a0:18:f5:a9:0a:46:a0:72:8b:ba:e4:97:8c:1f:5c:
                    2c:0e:69:62:c9:c4:1a:5b:e9:a0:9d:d9:c9:09:67:
                    8d:cd:04:8b:3c:41:a6:74:01:79:83:88:84:8d:62:
                    21:ce:de:01:be:a6:72:4d:b2:45:50:87:27:a2:9f:
                    54:2a:b0:3d:59:ae:90:d7:77:25:1a:6c:a1:5c:ff:
                    2f:90:7c:6a:19:e1:26:5f:54:eb:fb:af:9f:98:ff:
                    ac:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D9:E5:4D:08:F7:BC:D8:87:AC:F2:DB:C7:AF:5D:BE:43:CC:4C:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375/552cc932-af85-3dda-b0f1-20f41d192db5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375/07f6990d-62ce-456e-a266-cab190ec7375.crl

            X509v3 Authority Key Identifier:
                keyid:B3:9D:14:14:C4:C8:35:B1:A3:8E:58:24:B3:1B:E6:7D:89:21:A3:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.193.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:28:5e:c9:e7:29:a6:0b:57:00:34:cf:0e:fb:64:2a:d1:85:
         f3:1b:17:84:d7:e7:83:c0:b9:85:43:b5:dc:c8:3d:0d:5f:90:
         c5:2f:5d:ba:05:02:2a:b2:67:da:a3:8a:1f:78:1f:71:dd:b5:
         1c:44:62:45:cb:86:33:9e:71:4f:08:4a:4d:bd:83:dd:19:29:
         24:c9:b5:df:31:56:af:6d:6e:ce:86:19:8d:12:8d:f0:23:b2:
         48:d3:35:f4:33:7c:81:4c:58:22:41:79:66:88:66:06:d0:00:
         e6:af:6c:a3:68:84:9e:95:41:fb:a5:f0:e6:04:d9:6c:44:85:
         17:9f:16:8e:3c:a0:e4:4e:20:bc:22:7c:f1:35:93:85:64:da:
         43:42:de:e0:d8:7b:a7:1c:5a:90:3f:0a:58:c1:94:82:14:c7:
         57:7a:ff:0f:f9:4d:8f:bd:30:3a:c6:90:ea:29:0e:16:00:75:
         01:09:66:16:9b:fa:c1:06:ac:15:fd:41:a8:e2:d3:34:34:a8:
         a8:b9:0f:2e:f3:6e:95:6a:a9:84:b2:bb:4a:28:51:15:1c:0d:
         1e:05:bc:49:af:fa:46:92:20:82:10:d5:d7:2e:06:88:28:2b:
         aa:a3:8c:09:5d:76:62:53:e1:c9:fe:ca:78:f7:de:b5:d4:78:
         7c:0b:56:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:59:06 2025 by rpki-client