Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/d3f8c872-3a82-3529-a27e-0b7a5bc40bd3.roa
File:                     d3f8c872-3a82-3529-a27e-0b7a5bc40bd3.roa (raw, json)
Hash identifier:          oRFH3WhNOi4eSAbWAPzBZ65kMRuPW1IEFWea3CKKlwk=
Subject key identifier:   CC:6B:AD:F6:AF:10:65:FD:68:03:75:5F:D0:27:F2:4E:7A:22:12:20
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F432858493C093AE58DE12540E84845C0
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/d3f8c872-3a82-3529-a27e-0b7a5bc40bd3.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     10835
IP address blocks:        209.193.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:3a:e5:8d:e1:25:40:e8:48:45:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=141f6eb9-6fe5-4f3d-9c50-e6d83b1580eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:66:73:2f:aa:f6:da:55:f7:3f:5c:96:f7:a4:
                    25:36:f8:88:f4:fd:16:e7:84:c5:09:76:5b:fa:b9:
                    30:fc:14:3f:ea:54:4d:78:86:5c:9a:2d:35:41:b2:
                    a2:d5:d1:4b:79:d1:72:19:5e:2b:0d:e6:11:05:23:
                    1c:ec:d3:b6:2b:15:88:49:bc:5b:8e:ad:d9:0d:a8:
                    70:bd:4b:fb:d9:0a:75:0d:b2:6c:ed:54:9b:0e:8f:
                    32:36:6d:cd:e9:ec:0f:fd:ea:bb:71:40:0d:e2:cf:
                    79:01:d0:f0:b2:66:ba:13:81:a5:d3:e0:ae:95:2e:
                    9c:17:b7:29:ba:48:8c:c7:83:ed:46:1b:22:d0:79:
                    f9:d2:55:1a:90:e4:58:98:8e:60:1a:f6:39:8c:06:
                    a8:d3:17:6e:ba:49:68:73:2d:db:23:3c:8a:df:64:
                    85:45:1b:6c:92:17:c7:60:2f:cc:a4:98:f7:4b:c7:
                    97:10:21:b7:31:b9:a2:00:cf:b7:dc:cd:23:c5:5f:
                    af:0c:96:a3:16:7a:3b:18:a7:3b:7b:7e:eb:e5:f4:
                    5a:76:f8:68:7b:eb:7a:8e:09:c7:78:f6:96:66:7e:
                    71:62:df:b1:9d:cd:f9:5d:76:83:d1:f2:5c:5f:60:
                    37:28:48:f1:27:fc:8b:3f:6d:aa:04:57:34:d9:37:
                    aa:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:6B:AD:F6:AF:10:65:FD:68:03:75:5F:D0:27:F2:4E:7A:22:12:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/d3f8c872-3a82-3529-a27e-0b7a5bc40bd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.193.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:65:53:5a:67:79:49:96:51:a3:91:70:25:28:03:7d:cf:b6:
         15:8c:1d:2e:da:47:bf:99:55:1b:1d:c9:ca:97:50:4a:f7:2d:
         1d:73:15:09:87:69:e6:ff:22:01:cc:0e:89:54:d4:6d:e9:df:
         e5:f1:2f:8d:bb:35:26:bc:a7:30:2d:90:89:d5:81:c7:61:c0:
         3b:d1:bc:fa:e6:18:84:b9:d1:b7:b9:71:f7:bd:14:4a:40:1c:
         f1:83:4a:59:e3:d5:49:a9:12:05:c7:b1:0a:63:87:2a:c2:63:
         69:f2:e7:02:b6:19:02:89:e4:14:47:de:c3:c1:7c:8a:1f:91:
         ee:0d:45:fa:6e:fa:17:d2:e7:5e:d2:e3:43:a0:c6:de:c8:9c:
         61:86:dc:f1:b4:d0:ce:b8:52:b6:5e:3d:e0:3e:70:98:12:c3:
         77:56:12:1e:f6:50:1e:7d:df:48:7a:e6:8f:2b:ea:81:fd:db:
         08:cb:2e:c5:ae:79:df:01:34:76:ca:ec:4c:18:75:0d:90:12:
         51:f0:45:52:1c:2a:07:6b:7b:99:52:97:be:a9:be:25:56:4b:
         71:df:88:e3:5d:8b:5e:cf:4c:67:83:0b:bb:1d:cf:0f:79:a7:
         d0:89:3a:c8:63:cf:d8:f3:34:68:7a:93:54:0d:d0:c0:fc:5f:
         e5:49:6f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:29:10 2025 by rpki-client