Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/d18712d7-1c3b-34d4-9c05-3acd863f04f1.roa
File:                     d18712d7-1c3b-34d4-9c05-3acd863f04f1.roa (raw, json)
Hash identifier:          5V4fnUNkQlIDSJ1wlfYPwitZDa1RtGWeuWyg3WbSqqA=
Subject key identifier:   84:56:3B:50:40:57:5A:0B:27:2B:19:FC:20:50:9C:A1:D1:D5:77:62
Certificate issuer:       /CN=fff22b91-ff6b-40b0-b626-033566818ca6
Certificate serial:       010D0C9F432858493C093E18AD24D36D446009A0
Authority key identifier: B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/d18712d7-1c3b-34d4-9c05-3acd863f04f1.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     19905
IP address blocks:        216.59.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:3e:18:ad:24:d3:6d:44:60:09:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fff22b91-ff6b-40b0-b626-033566818ca6
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=63473699-7bfe-45e4-96cb-dc919c5bdb09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0e:2f:d1:42:1f:b6:3e:5b:49:e2:ba:8e:df:
                    83:da:14:4b:35:4b:0c:2f:9e:35:93:92:cb:54:e5:
                    24:dc:1e:6e:82:4f:2b:b1:63:45:03:4e:c5:36:08:
                    f4:bf:4e:07:e7:2a:fe:a5:7b:d3:6f:b7:9e:41:38:
                    77:50:ad:62:fc:c3:4c:55:c8:49:83:41:d8:6e:9f:
                    e0:ce:fa:93:76:05:2e:70:e1:d5:8f:78:55:9e:1a:
                    aa:98:06:da:7d:2d:f8:7f:29:be:b9:73:69:56:f6:
                    7e:83:f3:bd:3f:09:f6:11:fa:bc:cd:5d:ca:56:da:
                    e9:39:fb:c9:a0:93:06:04:08:5d:4a:61:02:f0:98:
                    64:4c:9e:7a:3c:bd:b5:86:8a:93:b7:8d:7b:64:a7:
                    d1:12:53:9f:4c:a2:1e:2d:92:dd:b0:91:84:47:fc:
                    78:4e:d7:46:60:42:27:7b:e2:42:fc:81:a0:54:70:
                    04:51:65:b5:8c:b4:a8:d7:7c:6f:cf:8e:65:56:27:
                    0d:1d:db:c5:d6:31:e3:cc:05:0c:d4:07:b4:e6:46:
                    d0:ee:82:5e:34:13:b8:e8:41:eb:80:cb:22:4e:8e:
                    83:14:1d:ba:3e:92:2c:a4:42:2e:0d:e1:af:fc:9e:
                    54:22:2d:71:28:d9:13:31:ca:58:16:51:b3:a1:91:
                    2c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:56:3B:50:40:57:5A:0B:27:2B:19:FC:20:50:9C:A1:D1:D5:77:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/d18712d7-1c3b-34d4-9c05-3acd863f04f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl

            X509v3 Authority Key Identifier:
                keyid:B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.59.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:e5:39:15:e9:b7:b7:fd:75:bf:b2:81:71:7c:95:71:ff:fc:
         95:2b:0b:63:8d:d8:ee:35:db:71:1a:b3:28:8f:10:25:af:b7:
         0b:bd:4d:4e:f9:01:1d:0a:b7:37:bd:95:76:81:cc:96:99:7d:
         3a:8d:8d:c4:c2:44:c8:5b:7b:66:97:96:6c:50:86:78:36:86:
         69:d9:3d:c0:ac:90:e6:8e:21:9f:0a:86:6a:ee:a8:b2:68:20:
         b0:2e:75:9d:89:89:bf:e2:a0:9d:1a:0c:21:f2:3e:f1:5f:fe:
         ef:fd:0b:cd:eb:d5:ad:2d:0f:fd:d7:35:cc:38:19:50:32:c3:
         fb:8b:c4:d6:e1:e7:5e:cf:1e:e1:a8:83:54:26:52:d5:aa:44:
         b4:69:86:bf:52:46:78:73:e9:9e:33:cb:cb:87:15:38:fc:f0:
         63:3e:27:7c:92:ce:ed:29:81:1d:38:f6:87:be:f1:4b:1c:6e:
         64:73:1c:90:c4:e4:a2:6b:0f:f8:71:fc:99:16:1c:81:28:d8:
         76:a2:8d:bc:6d:f1:9c:5b:d3:26:e4:8a:04:68:64:21:77:b6:
         5b:60:03:ce:45:1e:06:cf:f1:98:22:0c:83:ac:e7:3a:38:2d:
         9f:2d:3c:e9:da:04:f6:34:8f:a9:86:7a:28:9e:8c:a2:26:ec:
         1c:02:3a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:10:31 2025 by rpki-client